| CVE-2024-39712 |
Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version…
|
9.1
Critique
|
13 nov. 2024 |
| CVE-2024-39711 |
Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version…
|
9.1
Critique
|
13 nov. 2024 |
| CVE-2024-39710 |
Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version…
|
9.1
Critique
|
13 nov. 2024 |
| CVE-2024-39709 |
Incorrect file permissions in Ivanti Connect Secure before version 22.6R2 (Not Applicable to 9.1Rx) and Ivanti Policy…
|
7.8
Élevée
|
13 nov. 2024 |
| CVE-2024-38656 |
Argument injection in Ivanti Connect Secure before version 22.7R2.2 and 9.1R18.9 and Ivanti Policy Secure before version…
|
9.1
Critique
|
13 nov. 2024 |
| CVE-2024-38655 |
Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.9 and Ivanti Policy Secure before version…
|
9.1
Critique
|
13 nov. 2024 |
| CVE-2024-38649 |
An out-of-bounds write in IPsec of Ivanti Connect Secure before version 22.7R2.1(Not Applicable to 9.1Rx) allows a…
|
7.5
Élevée
|
13 nov. 2024 |
| CVE-2024-37400 |
An out of bounds read in Ivanti Connect Secure before version 22.7R2.3 allows a remote unauthenticated attacker to…
|
7.5
Élevée
|
13 nov. 2024 |
| CVE-2024-11004 |
Reflected XSS in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure before version 22.7R1.1 allows a…
|
6.1
Moyenne
|
12 nov. 2024 |
| CVE-2024-11005 |
Command injection in Ivanti Connect Secure before version 22.7R2.1 (Not Applicable to 9.1Rx) and Ivanti Policy Secure…
|
9.1
Critique
|
12 nov. 2024 |
| CVE-2024-11006 |
Command injection in Ivanti Connect Secure before version 22.7R2.1 (Not Applicable to 9.1Rx) and Ivanti Policy Secure…
|
9.1
Critique
|
12 nov. 2024 |
| CVE-2024-11007 |
Command injection in Ivanti Connect Secure before version 22.7R2.1 (Not Applicable to 9.1Rx) and Ivanti Policy Secure…
|
9.1
Critique
|
12 nov. 2024 |
| CVE-2024-8495 |
A null pointer dereference in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure before version…
|
7.5
Élevée
|
12 nov. 2024 |
| CVE-2024-47907 |
A stack-based buffer overflow in IPsec of Ivanti Connect Secure before version 22.7R2.3 allows a remote…
|
7.5
Élevée
|
12 nov. 2024 |
| CVE-2024-47906 |
Excessive binary privileges in Ivanti Connect Secure before version 22.7R2.3 (Not Applicable to 9.1Rx) and Ivanti Policy…
|
7.8
Élevée
|
12 nov. 2024 |
| CVE-2024-9420 |
A use-after-free in Ivanti Connect Secure before version 22.7R2.3 and 9.1R18.9 and Ivanti Policy Secure before…
|
8.8
Élevée
|
12 nov. 2024 |
| CVE-2024-37404 |
Improper Input Validation in the admin portal of Ivanti Connect Secure before 22.7R2.1 and 9.1R18.9, or Ivanti Policy…
|
9.1
Critique
|
18 oct. 2024 |
| CVE-2024-29205 |
An Improper Check for Unusual or Exceptional Conditions vulnerability in the web component of Ivanti Connect Secure…
|
7.5
Élevée
|
24 avr. 2024 |
| CVE-2024-21894 |
A heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows an…
|
8.2
Élevée
|
4 avr. 2024 |
| CVE-2024-22052 |
A null pointer dereference vulnerability in IPSec component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy…
|
7.5
Élevée
|
4 avr. 2024 |
| CVE-2024-22053 |
A heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x 22.x) and Ivanti Policy Secure allows an…
|
8.2
Élevée
|
4 avr. 2024 |
| CVE-2024-22023 |
An XML entity expansion or XEE vulnerability in SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy…
|
5.3
Moyenne
|
4 avr. 2024 |
| CVE-2024-21893 |
Exploitée
Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability
|
8.2
Élevée
|
31 janv. 2024 |
| CVE-2024-21888 |
A privilege escalation vulnerability in web component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure…
|
8.8
Élevée
|
31 janv. 2024 |