Pulse Secure Desktop Client Security Vulnerabilities and Issues — Pulse Secure Desktop Client CVE List

Lucene search

PulsesecurePulse Secure Desktop Client

12 matches found

CVE•added 2020/06/16 8:15 p.m.•110 views

CVE-2020-13162

A time-of-check time-of-use vulnerability in PulseSecureService.exe in Pulse Secure Client versions prior to 9.1.6 down to 5.3 R70 for Windows (which runs as NT AUTHORITY/SYSTEM) allows unprivileged users to run a Microsoft Installer executable with elevated privileges.

7CVSS6.6AI score0.00347EPSS

CVE•added 2020/08/21 9:15 p.m.•67 views

CVE-2020-8227

Missing sanitization of a server response in Nextcloud Desktop Client 2.6.4 for Linux allowed a malicious Nextcloud Server to store files outside of the dedicated sync directory.

7.1CVSS6.4AI score0.20057EPSS

CVE•added 2020/10/28 1:15 p.m.•52 views

CVE-2020-8241

A vulnerability in the Pulse Secure Desktop Client

7.5CVSS7.7AI score0.035EPSS

CVE•added 2019/06/28 6:15 p.m.•51 views

CVE-2018-20812

An information exposure issue where IPv6 DNS traffic would be sent outside of the VPN tunnel (when Traffic Enforcement was enabled) exists in Pulse Secure Pulse Secure Desktop 9.0R1 and below. This is applicable only to dual-stack (IPv4/IPv6) endpoints.

7.5CVSS7.2AI score0.00322EPSS

CVE•added 2020/10/28 1:15 p.m.•47 views

CVE-2020-8240

A vulnerability in the Pulse Secure Desktop Client

7.8CVSS7.4AI score0.00044EPSS

CVE•added 2020/08/10 2:15 p.m.•45 views

CVE-2020-8224

A code injection in Nextcloud Desktop Client 2.6.4 allowed to load arbitrary code when placing a malicious OpenSSL config into a fixed directory.

7.8CVSS7.6AI score0.00346EPSS

CVE•added 2024/05/03 2:15 a.m.•45 views

CVE-2023-34298

Pulse Secure Client SetupService Directory Traversal Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Pulse Secure Client. An attacker must first obtain the ability to execute low-privileged code on the target sy...

7.8CVSS7.8AI score0.00038EPSS

CVE•added 2020/10/28 1:15 p.m.•43 views

CVE-2020-8249

A vulnerability in the Pulse Secure Desktop Client (Linux)

7.8CVSS7.4AI score0.00651EPSS

CVE•added 2020/09/18 9:15 p.m.•41 views

CVE-2020-8225

A cleartext storage of sensitive information in Nextcloud Desktop Client 2.6.4 gave away information about used proxies and their authentication credentials.

7.5CVSS7.4AI score0.01303EPSS

CVE•added 2020/10/28 1:15 p.m.•30 views

CVE-2020-8250

A vulnerability in the Pulse Secure Desktop Client (Linux)

7.8CVSS7.4AI score0.0035EPSS

CVE•added 2018/09/06 11:29 p.m.•29 views

CVE-2018-15865

The Pulse Secure Desktop (macOS) has a Privilege Escalation Vulnerability.

7.8CVSS7.5AI score0.00058EPSS

CVE•added 2020/10/28 1:15 p.m.•27 views

CVE-2020-8248

A vulnerability in the Pulse Secure Desktop Client (Linux)

7.8CVSS7.4AI score0.00406EPSS