Show filters
15 Total Results
Displaying 11-15 of 15
Sort by:
Attacker Value
Unknown
CVE-2024-8495
Disclosure Date: November 12, 2024 (last updated January 18, 2025)
A null pointer dereference in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure before version 22.7R1.1 allows a remote unauthenticated attacker to cause a denial of service.
0
Attacker Value
Unknown
CVE-2024-47909
Disclosure Date: November 12, 2024 (last updated November 19, 2024)
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version 22.7R1.2 allows a remote authenticated attacker with admin privileges to cause a denial of service.
0
Attacker Value
Unknown
CVE-2024-47906
Disclosure Date: November 12, 2024 (last updated January 18, 2025)
Excessive binary privileges in Ivanti Connect Secure before version 22.7R2.3 (Not Applicable to 9.1Rx) and Ivanti Policy Secure before version 22.7R1.2 (Not Applicable to 9.1Rx) allows a local authenticated attacker to escalate privileges.
0
Attacker Value
Unknown
CVE-2024-47905
Disclosure Date: November 12, 2024 (last updated November 19, 2024)
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version 22.7R1.2 allows a remote authenticated attacker with admin privileges to cause a denial of service.
0
Attacker Value
Unknown
CVE-2024-11007
Disclosure Date: November 12, 2024 (last updated November 22, 2024)
Command injection in Ivanti Connect Secure before version 22.7R2.1 (Not Applicable to 9.1Rx) and Ivanti Policy Secure before version 22.7R1.1 (Not Applicable to 9.1Rx) allows a remote authenticated attacker with admin privileges to achieve remote code execution.
0
