Lucene search
+L

547 matches found

CNNVD
CNNVD
added 2024/05/03 12:00 a.m.8 views

Pulse Secure Client 安全漏洞

Pulse Secure Client is a suite of client software from Pulse Secure USA for end devices that access the Pulse Secure gateway. A security vulnerability exists in Pulse Secure Client that stems from failure to properly validate a user-supplied path before using it in a file operation, allowing a...

7.8CVSS7.4AI score0.0097EPSS
SaveExploits0References2
The Hacker News
The Hacker News
added 2024/02/15 2:20 p.m.88 views

Ivanti Pulse Secure Found Using 11-Year-Old Linux Version and Outdated Libraries

A reverse engineering of the firmware running on Ivanti Pulse Secure appliances has revealed numerous weaknesses, once again underscoring the challenge of securing software supply chains. Eclypsiusm, which acquired firmware version 9.1.18.2-24467.1 as part of the process, said the base operating...

9.1CVSS7.3AI score0.99999EPSS
SaveExploits25
GithubExploit
GithubExploit
added 2024/01/16 8:05 a.m.109 views

Exploit for Improper Authentication in Ivanti Connect_Secure

19/01/2024 Update Updated with the latest info bas...

8.2CVSS6.9AI score0.99986EPSS
SaveExploits16
BDU FSTEC
BDU FSTEC
added 2023/12/01 12:00 a.m.12 views

The vulnerability of the VPN server of the Ivanti Secure Access Client (ISAC) for corporate networks (formerly known as Pulse Secure Desktop Client) on Windows operating systems arises from the use of insecure configurations. This vulnerability allows attackers to gain unauthorized access to protected information, increase their privileges, or cause service interruptions.

The vulnerability of the VPN server of Ivanti Secure Access Client formerly Pulse Secure Desktop Client for Windows operating systems is related to the use of insecure configurations. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information, increase...

7.8CVSS7.6AI score0.00713EPSS
SaveExploits1References5Affected Software1
Ivanti
Ivanti
added 2023/06/22 6:28 p.m.12 views

CVE (2023-34298) Ivanti Secure Access Client Local Privilege Escalation

Summary A logged in Windows user can leverage functionality of the Pulse Secure / Ivanti Secure Access Client or Pulse Secure Installer Service to carry out a privilege escalation on the user machine. Mitigation None Currently Related Links https://forums.ivanti.com/s/article/New-Client-Side...

7.8CVSS7.5AI score0.0097EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2023/06/14 12:00 a.m.75 views

(0Day) Pulse Secure Client SetupService Directory Traversal Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Pulse Secure Client. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within SetupService. Th...

7.8CVSS7.1AI score0.0097EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2023/06/14 12:00 a.m.17 views

PT-2023-24794 · Pulse Secure · Pulse Secure Client

Name of the Vulnerable Software and Affected Versions: Pulse Secure Client affected versions not specified Description: This issue allows local attackers to escalate privileges on affected installations of Pulse Secure Client. An attacker must first obtain the ability to execute low-privileged co...

7.8CVSS8AI score0.0097EPSS
SaveExploits0References5
Ivanti
Ivanti
added 2023/02/14 7:22 a.m.11 views

JSA10553 - 2013-03: Security Bulletin: Pulse Secure Mobile: Android client privilege escalation

Last Modified Date Aug 24, 2026 12:34:47 AM...

7AI score
SaveExploits0
Ivanti
Ivanti
added 2023/02/14 7:22 a.m.10 views

JSA10469 - Pre-authentication CGI script prints arbitrary contents of XML and ZIP files

Last Modified Date Aug 24, 2026 12:34:50 AM...

7.1AI score
SaveExploits0
Ivanti
Ivanti
added 2023/02/14 7:22 a.m.8 views

JSA10350 - Optimistic TCP acknowledgements can cause denial of service (CERT/CC VU#102014)

Last Modified Date Aug 24, 2026 12:35:35 AM...

7.2AI score
SaveExploits0
Ivanti
Ivanti
added 2023/02/14 7:22 a.m.7 views

JSA10376 - Pulse Policy Secure (PPS) Infranet Controller Webroot Path Disclosure Vulnerability

Last Modified Date Aug 24, 2026 12:35:05 AM...

6.8AI score
SaveExploits0
Ivanti
Ivanti
added 2023/02/14 7:22 a.m.9 views

JSA10497 - 2012-09: Security, Access, and Acceleration: Security Advisories Released

Last Modified Date Aug 24, 2026 12:34:48 AM...

7AI score
SaveExploits0
Ivanti
Ivanti
added 2023/02/14 7:22 a.m.9 views

JSA10656 - 2014-10 Out of Cycle Security Bulletin: Multiple products affected by SSL POODLE vulnerability (CVE-2014-3566)

Last Modified Date Aug 24, 2026 12:35:24 AM...

4.3CVSS6.2AI score0.99999EPSS
SaveExploits7
Ivanti
Ivanti
added 2023/02/14 7:22 a.m.11 views

JSA10515 - 2012-06: Security, Access, and, Acceleration: Security Advisories Released

Last Modified Date Aug 24, 2026 12:35:26 AM...

5.2AI score
SaveExploits0
Ivanti
Ivanti
added 2023/02/14 7:22 a.m.12 views

JSA10400 - Pulse Connect Secure (PCS) and Pulse Policy Secure (PPS) products - SSL-VPN Security Bundle - Admin Issues

Last Modified Date Aug 24, 2026 12:35:04 AM...

7.6AI score
SaveExploits0
Ivanti
Ivanti
added 2023/02/14 7:22 a.m.8 views

JSA10592 - 2013-09: Security, Access, and Acceleration: Security Advisories Released

Last Modified Date Mar 4, 2024 7:36:20 PM...

6.5AI score
SaveExploits0
Ivanti
Ivanti
added 2023/02/14 7:22 a.m.9 views

JSA10551 - 2013-03: Security, Access, and Acceleration Advisories Released

Last Modified Date Aug 24, 2026 12:35:26 AM...

5.2AI score
SaveExploits0
Ivanti
Ivanti
added 2023/02/14 7:22 a.m.14 views

JSA10414 - Pulse Connect Secure (PCS) and Pulse Policy Secure (PPS) - Security Bundle - Admin Issue

Last Modified Date Mar 4, 2024 6:56:46 PM...

7.2AI score
SaveExploits0
Ivanti
Ivanti
added 2023/02/14 7:22 a.m.24 views

SA40003 - [Pulse Secure] July 9th 2015 OpenSSL Security Advisory (CVE-2015-1793)

Last Modified Date Aug 24, 2026 12:34:55 AM...

6.5CVSS6.3AI score0.7115EPSS
SaveExploits7
Ivanti
Ivanti
added 2023/02/14 7:22 a.m.14 views

JSA10412 - VU#261869 - Clientless PCS products break web browser's domain-based security models

Last Modified Date Aug 24, 2026 12:34:58 AM...

5.2AI score
SaveExploits0
Rows per page
Query Builder