Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
connect secure vulnerabilities and exploits
(subscribe to this query)
578
VMScore
CVE-2021-22937
A vulnerability in Pulse Connect Secure prior to 9.1R12 could allow an authenticated administrator to perform a file write via a maliciously crafted archive uploaded in the administrator web interface.
Pulsesecure Pulse Connect Secure
Ivanti Connect Secure 9.1
578
VMScore
CVE-2021-22938
A vulnerability in Pulse Connect Secure prior to 9.1R12 could allow an authenticated administrator to perform command injection via an unsanitized web parameter in the administrator web console.
Pulsesecure Pulse Connect Secure
Ivanti Connect Secure 9.1
694
VMScore
CVE-2021-22965
A vulnerability in Pulse Connect Secure prior to 9.1R12.1 could allow an unauthenticated administrator to causes a denial of service when a malformed request is sent to the device.
Pulsesecure Pulse Connect Secure
Ivanti Connect Secure 9.1
445
VMScore
CVE-2018-20811
A hidden RPC service issue was found with Pulse Secure Pulse Connect Secure 8.3RX prior to 8.3R2 and 8.1RX prior to 8.1R12.
Ivanti Connect Secure 8.1
Ivanti Connect Secure 8.3
356
VMScore
CVE-2020-8256
A vulnerability in the Pulse Connect Secure < 9.1R8.2 admin web interface could allow an authenticated malicious user to gain arbitrary file reading access through Pulse Collaboration via XML External Entity (XXE) vulnerability.
Pulsesecure Pulse Connect Secure
Ivanti Connect Secure 9.1
NA
CVE-2021-44720
In Ivanti Pulse Secure Pulse Connect Secure (PCS) prior to 9.1R12, the administrator password is stored in the HTML source code of the "Maintenance > Push Configuration > Targets > Target Name" targets.cgi screen. A read-only administrative user can escalate to...
Pulsesecure Pulse Connect Secure
Ivanti Connect Secure 9.1
605
VMScore
CVE-2019-11213
In Pulse Secure Pulse Desktop Client and Network Connect, an attacker could access session tokens to replay and spoof sessions, and as a result, gain unauthorized access as an end user, a related issue to CVE-2019-1573. (The endpoint would need to be already compromised for explo...
Pulsesecure Pulse Secure Desktop Client
Pulsesecure Pulse Connect Secure
Ivanti Connect Secure
356
VMScore
CVE-2020-8216
An information disclosure vulnerability in meeting of Pulse Connect Secure <9.1R8 allowed an authenticated end-users to find meeting details, if they know the Meeting ID.
Pulsesecure Pulse Connect Secure
Ivanti Connect Secure 9.1
Pulsesecure Pulse Policy Secure
Ivanti Policy Secure 9.1
312
VMScore
CVE-2020-8217
A cross site scripting (XSS) vulnerability in Pulse Connect Secure <9.1R8 allowed malicious users to exploit in the URL used for Citrix ICA.
Pulsesecure Pulse Connect Secure
Ivanti Connect Secure 9.1
Pulsesecure Pulse Policy Secure
Ivanti Policy Secure 9.1
356
VMScore
CVE-2020-8219
An insufficient permission check vulnerability exists in Pulse Connect Secure <9.1R8 that allows an malicious user to change the password of a full administrator.
Pulsesecure Pulse Connect Secure
Ivanti Connect Secure 9.1
Pulsesecure Pulse Policy Secure
Ivanti Policy Secure 9.1
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
SSRF
server-side request forgery
CVE-2024-30067
CVE-2024-5553
CVE-2024-30095
IDOR
CVE-2024-35252
CVE-2024-23692
CVE-2024-27801
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
9
10
NEXT »