Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
avalanche vulnerabilities and exploits
(subscribe to this query)
9.8
CVSSv3
CVE-2021-42127
A deserialization of untrusted data vulnerability exists in Ivanti Avalanche prior to 6.3.3 using Inforail Service allows arbitrary code execution via Data Repository Service.
Ivanti Avalanche
9.8
CVSSv3
CVE-2021-42128
An exposed dangerous function vulnerability exists in Ivanti Avalanche prior to 6.3.3 using inforail Service allows Privilege Escalation via Enterprise Server Service.
Ivanti Avalanche
8.8
CVSSv3
CVE-2021-42129
A command injection vulnerability exists in Ivanti Avalanche prior to 6.3.3 allows an attacker with access to the Inforail Service to perform arbitrary command execution.
Ivanti Avalanche
8.8
CVSSv3
CVE-2021-42130
A deserialization of untrusted data vulnerability exists in Ivanti Avalanche prior to 6.3.3 allows an attacker with access to the Inforail Service to perform arbitrary code execution.
Ivanti Avalanche
8.8
CVSSv3
CVE-2021-42131
A SQL Injection vulnerability exists in Ivanti Avalance prior to 6.3.3 allows an attacker with access to the Inforail Service to perform privilege escalation.
Ivanti Avalanche
8.8
CVSSv3
CVE-2021-42132
A command Injection vulnerability exists in Ivanti Avalanche prior to 6.3.3 allows an attacker with access to the Inforail Service to perform arbitrary command execution.
Ivanti Avalanche
8.1
CVSSv3
CVE-2021-42133
An exposed dangerous function vulnerability exists in Ivanti Avalanche prior to 6.3.3 allows an attacker with access to the Inforail Service to perform an arbitrary file write.
Ivanti Avalanche
7.8
CVSSv3
CVE-2023-41725
Ivanti Avalanche EnterpriseServer Service Unrestricted File Upload Local Privilege Escalation Vulnerability
Ivanti Avalanche
7.8
CVSSv3
CVE-2023-41726
Ivanti Avalanche Incorrect Default Permissions allows Local Privilege Escalation Vulnerability
Ivanti Avalanche
9.8
CVSSv3
CVE-2023-41727
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service (DoS) or code execution.
Ivanti Avalanche
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322
CVE-2006-4304
wireless
CVE-2023-23022
local file inclusion
CVE-2024-27058
CVE-2024-33820
open redirect
CVE-2024-27079
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
NEXT »