Lucene search
+L
Zero Day InitiativeRecent

17219 matches found

Zero Day Initiative
Zero Day Initiative
•added 2024/09/17 12:00 a.m.•25 views

PDF-XChange Editor U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7.9AI score0.00275EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/09/17 12:00 a.m.•25 views

PDF-XChange Editor U3D File Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS5.8AI score0.00303EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/09/17 12:00 a.m.•21 views

PDF-XChange Editor U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7.9AI score0.00282EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/09/17 12:00 a.m.•20 views

PDF-XChange Editor U3D File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS8AI score0.00282EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/09/17 12:00 a.m.•23 views

PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7.8AI score0.00282EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/09/17 12:00 a.m.•24 views

PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7.8AI score0.00282EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/09/17 12:00 a.m.•22 views

PDF-XChange Editor PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS5.7AI score0.00345EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/09/17 12:00 a.m.•20 views

PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS5.7AI score0.00272EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/09/17 12:00 a.m.•28 views

PDF-XChange Editor PPM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS8.1AI score0.00358EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/09/17 12:00 a.m.•19 views

PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS5.7AI score0.0026EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/09/17 12:00 a.m.•17 views

PDF-XChange Editor TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS5.7AI score0.00272EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/09/17 12:00 a.m.•23 views

PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS5.7AI score0.00369EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/09/17 12:00 a.m.•24 views

PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7.8AI score0.00282EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/09/17 12:00 a.m.•33 views

Cohesive Networks VNS3 Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cohesive Networks VNS3. Authentication is required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP port 8000 by default. The issue results from th...

8.8CVSS8.5AI score0.01641EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/09/17 12:00 a.m.•26 views

Cohesive Networks VNS3 Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cohesive Networks VNS3. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP port 8000 by default. The issue results fro...

9.8CVSS9.1AI score0.0169EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/09/17 12:00 a.m.•30 views

Cohesive Networks VNS3 Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cohesive Networks VNS3. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP port 8000 by default. The issue results fro...

9.8CVSS9.1AI score0.01688EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/09/17 12:00 a.m.•24 views

BlueZ HID over GATT Profile Improper Access Control Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the HID over GATT Profile. The issue results from the lack of...

8.8CVSS8.3AI score0.02036EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2024/09/17 12:00 a.m.•22 views

PDF-XChange Editor XPS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS8.1AI score0.00383EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/09/17 12:00 a.m.•27 views

PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS8.1AI score0.00383EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/09/17 12:00 a.m.•19 views

WinZip Mark-of-the-Web Bypass Vulnerability

This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of WinZip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS7.8AI score0.00436EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/09/17 12:00 a.m.•26 views

Cohesive Networks VNS3 Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cohesive Networks VNS3. Authentication is required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP port 8000 by default. The issue results from th...

8.8CVSS8.5AI score0.01641EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/09/17 12:00 a.m.•20 views

PDF-XChange Editor JB2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS5.2AI score0.0026EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/09/17 12:00 a.m.•18 views

PDF-XChange Editor JB2 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7.8AI score0.00358EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/09/17 12:00 a.m.•20 views

PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS8.1AI score0.00383EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/09/17 12:00 a.m.•23 views

PDF-XChange Editor JB2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS5.7AI score0.00345EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/09/17 12:00 a.m.•20 views

PDF-XChange Editor U3D File Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS5.8AI score0.00412EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/09/17 12:00 a.m.•20 views

PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS5.7AI score0.00272EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/09/17 12:00 a.m.•22 views

PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS5.7AI score0.00345EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/09/17 12:00 a.m.•18 views

PDF-XChange Editor TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS5.7AI score0.00369EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/09/17 12:00 a.m.•20 views

PDF-XChange Editor JB2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS5.7AI score0.00272EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/09/17 12:00 a.m.•21 views

PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7.8AI score0.00383EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/09/17 12:00 a.m.•22 views

PDF-XChange Editor PDF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7.8AI score0.00358EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/09/17 12:00 a.m.•20 views

PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS8.1AI score0.00358EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/09/17 12:00 a.m.•22 views

PDF-XChange Editor JB2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS5.7AI score0.00345EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/09/13 12:00 a.m.•19 views

mySCADA myPRO Hard-Coded Credentials Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of mySCADA myPRO. Authentication is not required to exploit this vulnerability. The specific flaw exists within the telnet service, which listens on TCP port 5005 by default. The issue results from the...

9.8CVSS9.1AI score0.00995EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/09/13 12:00 a.m.•17 views

SolarWinds Access Rights Manager Hard-Coded Credentials Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of SolarWinds Access Rights Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configuration of a RabbitMQ instance. The issue results from the use...

7.3CVSS8.7AI score0.00474EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/09/13 12:00 a.m.•13 views

SolarWinds Access Rights Manager JsonSerializationBinder Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Access Rights Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

9.9CVSS9AI score0.03085EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/09/12 12:00 a.m.•22 views

Ivanti Endpoint Manager AgentPortal Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Endpoint Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the AgentPortal service. The issue results from the lack of proper validation of...

9.8CVSS9.3AI score0.52913EPSS
SaveExploits2References1
Zero Day Initiative
Zero Day Initiative
•added 2024/09/11 12:00 a.m.•18 views

Microsoft Windows Defender SmartScreen Bypass Vulnerability

This vulnerability allows remote attackers to bypass the SmartScreen security feature to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The...

8.8CVSS8AI score0.13626EPSS
SaveExploits1References1
Zero Day Initiative
Zero Day Initiative
•added 2024/09/11 12:00 a.m.•20 views

Microsoft Windows Drag and Drop SmartScreen Bypass Vulnerability

This vulnerability allows remote attackers to bypass the SmartScreen security feature on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

8.8CVSS7.9AI score0.13626EPSS
SaveExploits1References1
Zero Day Initiative
Zero Day Initiative
•added 2024/09/11 12:00 a.m.•17 views

Ivanti Endpoint Manager ImportXml XML External Entity Processing Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Ivanti Endpoint Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of ImportXml method. Due to the improper restriction ...

8.2CVSS7.5AI score0.59257EPSS
SaveExploits1References1
Zero Day Initiative
Zero Day Initiative
•added 2024/09/11 12:00 a.m.•24 views

(0Day) Visteon Infotainment System DeviceManager iAP Serial Number SQL Injection Vulnerability

This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Visteon Infotainment system. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DeviceManager. When parsing the iAP Serial number, the proce...

6.8CVSS8AI score0.0056EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/09/11 12:00 a.m.•21 views

Ivanti Endpoint Manager loadKeyboardTable SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Endpoint Manager. Authentication is required to exploit this vulnerability. The specific flaw exists within the implementation of the loadKeyboardTable method. The issue results from the lack ...

7.2CVSS9AI score0.0215EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/09/11 12:00 a.m.•20 views

Ivanti Endpoint Manager GetVulnerabilitiesDataTable SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Endpoint Manager. Authentication is required to exploit this vulnerability. The specific flaw exists within the implementation of the GetVulnerabilitiesDataTable method. The issue results from...

7.2CVSS9AI score0.0215EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/09/11 12:00 a.m.•12 views

Ivanti Endpoint Manager WasPreviouslyMapped SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Endpoint Manager. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. Alternatively, no user interaction is...

7.8CVSS8.9AI score0.20333EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/09/11 12:00 a.m.•15 views

Ivanti Endpoint Manager LoadSlotsTable SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Endpoint Manager. Authentication is required to exploit this vulnerability. The specific flaw exists within the implementation of the LoadSlotsTable method. The issue results from the lack of...

7.2CVSS9AI score0.43356EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/09/11 12:00 a.m.•17 views

Ivanti Workspace Control RES Exposed Dangerous Method Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Ivanti Workspace Control. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the RES...

7.8CVSS7.9AI score0.00268EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/09/11 12:00 a.m.•19 views

Ivanti Endpoint Manager LoadMotherboardTable SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Endpoint Manager. Authentication is required to exploit this vulnerability. The specific flaw exists within the implementation of the LoadMotherboardTable method. The issue results from the la...

7.2CVSS9AI score0.25389EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/09/11 12:00 a.m.•15 views

Ivanti Endpoint Manager loadModuleTable SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Endpoint Manager. Authentication is required to exploit this vulnerability. The specific flaw exists within the implementation of the loadModuleTable method. The issue results from the lack of...

7.2CVSS9AI score0.24005EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/09/11 12:00 a.m.•23 views

Ivanti Endpoint Manager updateAssetInfo SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Endpoint Manager. Authentication is required to exploit this vulnerability. The specific flaw exists within the implementation of the updateAssetInfo method. The issue results from the lack of...

7.2CVSS9AI score0.43356EPSS
SaveExploits0References1
Total number of security vulnerabilities17219