Lucene search
+L

733 matches found

NVD
NVD
added 2024/05/06 7:15 a.m.28 views

CVE-2024-23186

E-Mail containing malicious display-name information could trigger client-side script execution when using specific mobile devices. Attackers could perform malicious API requests or extract information from the users account. Please deploy the provided updates and patch releases. We now use safer...

6.5CVSS6.5AI score0.00575EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/04/19 12:00 a.m.9 views

Ivanti Avalanche 安全漏洞

Ivanti Avalanche is an enterprise mobile device management system from Ivanti, USA. The system is primarily used to manage devices such as smartphones, tablets and barcode scanners. A security vulnerability exists in Ivanti Avalanche prior to version 6.4.3, which stems from a path traversal...

8.8CVSS7.5AI score0.03237EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/04/19 12:00 a.m.9 views

The vulnerability of the WLAvalancheService component in the mobile device management system of Avalanche allows a hacker to disclose protected information.

The vulnerability of the WLAvalancheService component in the mobile device management system of Avalanche relates to memory-walking attacks. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information that is protected by the system...

5.3CVSS6.2AI score0.01884EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/04/19 12:00 a.m.8 views

The vulnerability of the WLAvalancheService component in the mobile device management system of Avalanche allows a hacker to disclose protected information.

The vulnerability of the WLAvalancheService component in the mobile device management system of Avalanche relates to memory-walking attacks. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information that is protected by the system...

4.3CVSS5.7AI score0.01366EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/04/19 12:00 a.m.9 views

The vulnerability of the WLAvalancheService component in the Avalanche mobile device management system allows a attacker to execute arbitrary commands with SYSTEM privileges.

The vulnerability of the WLAvalancheService component in the mobile device management system of Avalanche relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands with SYSTEM privileges...

9CVSS8AI score0.02616EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/04/19 12:00 a.m.10 views

The vulnerability of the Avalanche mobile device management system’s web component allows a hacker to execute arbitrary code.

The vulnerability of the Avalanche mobile device management web component is related to an incorrect restriction on the path name to the restricted catalog. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the SYSTEM context remotely...

9CVSS8AI score0.03237EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/04/19 12:00 a.m.11 views

The vulnerability of the WLAvalancheService component in the Avalanche mobile device management system allows a hacker to trigger a service failure.

The vulnerability of the WLAvalancheService component in the mobile device management system of Avalanche is related to pointer assignment errors. Exploiting this vulnerability could allow a remote attacker to cause service failures...

7.5CVSS6.8AI score0.01728EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/04/19 12:00 a.m.9 views

The vulnerability in the Avalanche mobile device management web component allows a hacker to execute arbitrary commands with SYSTEM privileges.

The vulnerability of the Avalanche mobile device management web component is related to an incorrect restriction on the path name to the restricted catalog. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with SYSTEM privileges remotely...

9CVSS7.9AI score0.70908EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/04/19 12:00 a.m.10 views

The vulnerability in the Avalanche mobile device management web component allows a hacker to execute arbitrary commands with SYSTEM privileges.

The vulnerability of the Avalanche mobile device management web component is related to an incorrect restriction on the path name to the restricted catalog. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with SYSTEM privileges remotely...

9CVSS7.9AI score0.68104EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2024/04/19 12:00 a.m.9 views

Ivanti Avalanche 安全漏洞

Ivanti Avalanche is an enterprise mobile device management system from Ivanti, USA. The system is primarily used to manage devices such as smartphones, tablets and barcode scanners. A security vulnerability exists in Ivanti Avalanche versions prior to 6.4.3, which stems from a path traversal...

8.8CVSS7.4AI score0.70908EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/04/19 12:00 a.m.15 views

The vulnerability in the Avalanche mobile device management web component allows a hacker to execute arbitrary commands with SYSTEM privileges.

The vulnerability of the Avalanche mobile device management web component is related to an incorrect restriction on the path name to the restricted catalog. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with SYSTEM privileges remotely...

9CVSS7.9AI score0.02851EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/04/19 12:00 a.m.12 views

The vulnerability of the WLAvalancheService component in the Avalanche mobile device management system allows a hacker to trigger a service failure.

The vulnerability of the WLAvalancheService component in the mobile device management system of Avalanche is related to pointer assignment errors. Exploiting this vulnerability could allow a remote attacker to cause service failures...

6.8CVSS6.8AI score0.01728EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/04/19 12:00 a.m.10 views

The vulnerability of the WLAvalancheService component in the mobile device management system of Avalanche allows a hacker to disclose protected information.

The vulnerability of the WLAvalancheService component in the mobile device management system of Avalanche relates to memory-walking attacks. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information that is protected by the system...

5.3CVSS6.2AI score0.01884EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/04/19 12:00 a.m.12 views

The vulnerability in the Avalanche mobile device management web component allows a hacker to delete any files they desire.

The vulnerability of the Avalanche mobile device management web component is related to incorrect restrictions on the path name to the restricted catalog. Exploiting this vulnerability could allow a malicious actor to delete any files they desire...

7.5CVSS7.1AI score0.01807EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/04/19 12:00 a.m.11 views

The vulnerability of the WLAvalancheService component in the mobile device management system of Avalanche allows a hacker to disclose protected information.

The vulnerability of the WLAvalancheService component in the mobile device management system of Avalanche relates to memory-walking attacks. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information that is protected by the system...

5.3CVSS6.2AI score0.01884EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/04/19 12:00 a.m.9 views

The vulnerability in the Avalanche mobile device management web component allows a hacker to execute arbitrary commands with SYSTEM privileges.

The vulnerability of the Avalanche mobile device management web component is related to an incorrect restriction on the path name to the restricted catalog. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with SYSTEM privileges remotely...

9CVSS7.9AI score0.68104EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2024/04/19 12:00 a.m.17 views

Ivanti Avalanche Heap Overflow Vulnerability

Ivanti Avalanche is a mobile device management MDM software platform designed to help organizations manage, maintain and secure their mobile devices. It supports a range of device types, including smartphones, tablets, and industrial devices. A heap overflow vulnerability exists in Ivanti Avalanc...

9.8CVSS7.6AI score0.04308EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/04/19 12:00 a.m.7 views

Ivanti Avalanche 安全漏洞

Ivanti Avalanche is a mobile device management MDM software platform designed to help organizations manage, maintain and secure their mobile devices. It supports a range of device types, including smartphones, tablets, and industrial devices. A heap overflow vulnerability exists in Ivanti Avalanc...

9.8CVSS7.5AI score0.04308EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/04/19 12:00 a.m.11 views

The vulnerability of the WLAvalancheService component in the Avalanche mobile device management system allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the WLAvalancheService component in the mobile device management system of Avalanche relates to memory-walking attacks. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...

7.5CVSS7.5AI score0.01789EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/04/19 12:00 a.m.13 views

The vulnerability in the Avalanche mobile device management web component allows a hacker to execute arbitrary commands with SYSTEM privileges.

The vulnerability of the Avalanche mobile device management web component is related to synchronization errors when using a common resource “Race Situation”. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary commands with SYSTEM privileges...

9CVSS8AI score0.02373EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder