| CVE-2024-13830 |
Reflected XSS in Ivanti Connect Secure before version 22.7R2.6 and Ivanti Policy Secure before version 22.7R1.3 allows a…
|
6.1
Moyenne
|
11 févr. 2025 |
| CVE-2024-12058 |
External control of a file name in Ivanti Connect Secure before version 22.7R2.6 and Ivanti Policy Secure before version…
|
6.8
Moyenne
|
11 févr. 2025 |
| CVE-2024-10644 |
Code injection in Ivanti Connect Secure before version 22.7R2.4 and Ivanti Policy Secure before version 22.7R1.3…
|
9.1
Critique
|
11 févr. 2025 |
| CVE-2025-0283 |
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version…
|
7.0
Élevée
|
8 janv. 2025 |
| CVE-2025-0282 |
Exploitée
Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability
|
9.0
Critique
|
8 janv. 2025 |
| CVE-2024-11634 |
Command injection in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version 22.7R1.2…
|
9.1
Critique
|
10 déc. 2024 |
| CVE-2024-39712 |
Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version…
|
9.1
Critique
|
13 nov. 2024 |
| CVE-2024-39711 |
Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version…
|
9.1
Critique
|
13 nov. 2024 |
| CVE-2024-39710 |
Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version…
|
9.1
Critique
|
13 nov. 2024 |
| CVE-2024-39709 |
Incorrect file permissions in Ivanti Connect Secure before version 22.6R2 (Not Applicable to 9.1Rx) and Ivanti Policy…
|
7.8
Élevée
|
13 nov. 2024 |
| CVE-2024-38656 |
Argument injection in Ivanti Connect Secure before version 22.7R2.2 and 9.1R18.9 and Ivanti Policy Secure before version…
|
9.1
Critique
|
13 nov. 2024 |
| CVE-2024-38655 |
Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.9 and Ivanti Policy Secure before version…
|
9.1
Critique
|
13 nov. 2024 |
| CVE-2024-11004 |
Reflected XSS in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure before version 22.7R1.1 allows a…
|
6.1
Moyenne
|
12 nov. 2024 |
| CVE-2024-11005 |
Command injection in Ivanti Connect Secure before version 22.7R2.1 (Not Applicable to 9.1Rx) and Ivanti Policy Secure…
|
9.1
Critique
|
12 nov. 2024 |
| CVE-2024-11006 |
Command injection in Ivanti Connect Secure before version 22.7R2.1 (Not Applicable to 9.1Rx) and Ivanti Policy Secure…
|
9.1
Critique
|
12 nov. 2024 |
| CVE-2024-11007 |
Command injection in Ivanti Connect Secure before version 22.7R2.1 (Not Applicable to 9.1Rx) and Ivanti Policy Secure…
|
9.1
Critique
|
12 nov. 2024 |
| CVE-2024-8495 |
A null pointer dereference in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure before version…
|
7.5
Élevée
|
12 nov. 2024 |
| CVE-2024-47909 |
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version…
|
4.9
Moyenne
|
12 nov. 2024 |
| CVE-2024-47906 |
Excessive binary privileges in Ivanti Connect Secure before version 22.7R2.3 (Not Applicable to 9.1Rx) and Ivanti Policy…
|
7.8
Élevée
|
12 nov. 2024 |
| CVE-2024-9420 |
A use-after-free in Ivanti Connect Secure before version 22.7R2.3 and 9.1R18.9 and Ivanti Policy Secure before…
|
8.8
Élevée
|
12 nov. 2024 |
| CVE-2024-47905 |
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version…
|
4.9
Moyenne
|
12 nov. 2024 |
| CVE-2024-37404 |
Improper Input Validation in the admin portal of Ivanti Connect Secure before 22.7R2.1 and 9.1R18.9, or Ivanti Policy…
|
9.1
Critique
|
18 oct. 2024 |
| CVE-2024-29205 |
An Improper Check for Unusual or Exceptional Conditions vulnerability in the web component of Ivanti Connect Secure…
|
7.5
Élevée
|
24 avr. 2024 |
| CVE-2024-21894 |
A heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows an…
|
8.2
Élevée
|
4 avr. 2024 |
| CVE-2024-22052 |
A null pointer dereference vulnerability in IPSec component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy…
|
7.5
Élevée
|
4 avr. 2024 |