Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

ivanti connect secure 8.0 vulnerabilities and exploits

(subscribe to this query)
5.5
CVSSv3
CVE-2016-4790
Cross-site scripting (XSS) vulnerability in the administrative user interface in Pulse Connect Secure (PCS) 8.2 prior to 8.2r1, 8.1 prior to 8.1r2, 8.0 prior to 8.0r9, and 7.4 prior to 7.4r13.4 allows remote malicious users to inject arbitrary web script or HTML via unspecified v...
Pulsesecure Pulse Connect Secure 8.1r1.0Ivanti Connect Secure 8.1Ivanti Connect Secure 8.0Pulsesecure Pulse Connect Secure 7.4Ivanti Connect Secure 8.2
8.6
CVSSv3
CVE-2016-4791
The administrative user interface in Pulse Connect Secure (PCS) 8.2 prior to 8.2r1, 8.1 prior to 8.1r2, 8.0 prior to 8.0r9, and 7.4 prior to 7.4r13.4 allows remote administrators to enumerate files, read arbitrary files, and conduct server side request forgery (SSRF) attacks via ...
Pulsesecure Pulse Connect Secure 8.1r1.0Ivanti Connect Secure 8.1Ivanti Connect Secure 8.2Ivanti Connect Secure 8.0Pulsesecure Pulse Connect Secure 7.4
10
CVSSv3
CVE-2016-4787
Pulse Connect Secure (PCS) 8.2 prior to 8.2r1, 8.1 prior to 8.1r2, 8.0 prior to 8.0r10, and 7.4 prior to 7.4r13.4 allow remote malicious users to read sensitive system authentication files in an unspecified directory via unknown vectors.
Ivanti Connect Secure 8.0Ivanti Connect Secure 8.2Pulsesecure Pulse Connect Secure 7.4Pulsesecure Pulse Connect Secure 8.1r1.0Ivanti Connect Secure 8.1
5.8
CVSSv3
CVE-2016-4788
Pulse Connect Secure (PCS) 8.2 prior to 8.2r1, 8.1 prior to 8.1r2, 8.0 prior to 8.0r10, and 7.4 prior to 7.4r13.4 allow remote malicious users to read an unspecified system file via unknown vectors.
Ivanti Connect Secure 8.2Pulsesecure Pulse Connect Secure 8.1r1.0Ivanti Connect Secure 8.1Pulsesecure Pulse Connect Secure 7.4Ivanti Connect Secure 8.0
7.5
CVSSv3
CVE-2016-4786
Pulse Connect Secure (PCS) 8.2 prior to 8.2r1, 8.1 prior to 8.1r3, 8.0 prior to 8.0r11, and 7.4 prior to 7.4r13.4 allow remote malicious users to cause a denial of service (CPU consumption) via unspecified vectors.
Pulsesecure Pulse Connect Secure 8.1r1.0Ivanti Connect Secure 8.1Ivanti Connect Secure 8.2Ivanti Connect Secure 8.0Pulsesecure Pulse Connect Secure 7.4
6.1
CVSSv3
CVE-2016-4789
Cross-site scripting (XSS) vulnerability in the system configuration section in the administrative user interface in Pulse Connect Secure (PCS) 8.2 prior to 8.2r1, 8.1 prior to 8.1r2, 8.0 prior to 8.0r9, and 7.4 prior to 7.4r13.4 allows remote malicious users to inject arbitrary ...
Pulsesecure Pulse Connect Secure 8.1r1.0Ivanti Connect Secure 8.1Ivanti Connect Secure 8.0Pulsesecure Pulse Connect Secure 7.4Ivanti Connect Secure 8.2
7.5
CVSSv3
CVE-2019-11477
Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs). A remote attacker could use this to cause a denial of service. This has been fixed in stable kern...
Linux Linux KernelF5 Big-ip Advanced Firewall ManagerF5 Big-ip Advanced Firewall Manager 15.0.0F5 Big-ip Access Policy ManagerF5 Big-ip Access Policy Manager 15.0.0F5 Big-ip Application Acceleration ManagerF5 Big-ip Application Acceleration Manager 15.0.0F5 Big-ip Link ControllerF5 Big-ip Link Controller 15.0.0F5 Big-ip Policy Enforcement ManagerF5 Big-ip Policy Enforcement Manager 15.0.0F5 Big-ip WebacceleratorF5 Big-ip Webaccelerator 15.0.0F5 Big-ip Application Security ManagerF5 Big-ip Application Security Manager 15.0.0F5 Big-ip Local Traffic ManagerF5 Big-ip Local Traffic Manager 15.0.0F5 Big-ip Fraud Protection ServiceF5 Big-ip Fraud Protection Service 15.0.0F5 Big-ip Global Traffic ManagerF5 Big-ip Global Traffic Manager 15.0.0F5 Big-ip Analytics
7.5
CVSSv3
CVE-2019-11478
Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment in the Linux kernel could be fragmented when handling certain TCP Selective Acknowledgment (SACK) sequences. A remote attacker could use this to cause a denial of service. This has been fi...
Linux Linux KernelF5 Big-ip Advanced Firewall ManagerF5 Big-ip Advanced Firewall Manager 15.0.0F5 Big-ip Access Policy ManagerF5 Big-ip Access Policy Manager 15.0.0F5 Big-ip Application Acceleration ManagerF5 Big-ip Application Acceleration Manager 15.0.0F5 Big-ip Link ControllerF5 Big-ip Link Controller 15.0.0F5 Big-ip Policy Enforcement ManagerF5 Big-ip Policy Enforcement Manager 15.0.0F5 Big-ip WebacceleratorF5 Big-ip Webaccelerator 15.0.0F5 Big-ip Application Security ManagerF5 Big-ip Application Security Manager 15.0.0F5 Big-ip Local Traffic ManagerF5 Big-ip Local Traffic Manager 15.0.0F5 Big-ip Fraud Protection ServiceF5 Big-ip Fraud Protection Service 15.0.0F5 Big-ip Global Traffic ManagerF5 Big-ip Global Traffic Manager 15.0.0F5 Big-ip Analytics
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook