https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 19:06:22 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-10719 bdu:2024-10719 https://cve.radiocsirt.org/vuln/bdu:2024-10719 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0967 certfr-2024-avi-0967 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0967 https://cve.radiocsirt.org/vuln/euvd-2026-205246 EUVD-2026-205246 https://cve.radiocsirt.org/vuln/euvd-2026-205246 https://cve.radiocsirt.org/vuln/fkie_cve-2024-38656 <p>Argument injection in Ivanti Connect Secure before version 22.7R2.2 and 9.1R18.9 and Ivanti Policy Secure before version 22.7R1.2 allows a remote authenticated attacker with admin privileges to achieve remote code execution.</p> <p>Argument injection in Ivanti Connect Secure before version 22.7R2.2 and 9.1R18.9 and Ivanti Policy Secure before version 22.7R1.2 allows a remote authenticated attacker with admin privileges to achieve remote code execution.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-38656 https://cve.radiocsirt.org/vuln/ghsa-gvvw-6jh9-63h5 <p>Argument injection in Ivanti Connect Secure before version 22.7R2.2 and 9.1R18.9 and Ivanti Policy Secure before version 22.7R1.2 allows a remote authenticated attacker with admin privileges to achieve remote code execution.</p> <p>Argument injection in Ivanti Connect Secure before version 22.7R2.2 and 9.1R18.9 and Ivanti Policy Secure before version 22.7R1.2 allows a remote authenticated attacker with admin privileges to achieve remote code execution.</p> https://cve.radiocsirt.org/vuln/ghsa-gvvw-6jh9-63h5 https://cve.radiocsirt.org/vuln/va-24-317-01 <p>Ivanti Connect Secure before versions 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version 22.7R1.1 allow a remote, authenticated attacker with administrative privileges to inject operating system commands using the &#39;dig&#39; web interface. Ivanti Connect Secure before versions 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version 22.7R1.1 allow a remote, authenticated attacker with administrative privileges to inject operating system commands using the &#39;ping6&#39; web interface. Ivanti Connect Secure before versions 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version 22.7R1.1 allow a remote, authenticated attacker with administrative privileges to inject operating system commands using the &#39;traceroute6&#39; web interface. Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure before version 22.7R1.1 allow allow a remote, authenticated attacker with administrative privileges to write arbitrary files or execute operating system commands with the operating system privileges of the &#39;nr&#39; user using the diagnostic web interface for the Port Probe (&#39;nmap&#39;) feature. Ivanti Connect Secure before version 22.6R2 and Ivanti Policy Secure before version 22.7R1 allow a local, authenticated attacker with &#39;nr&#39; operating system privileges to gain &#39;root&#39; privileges by overwriting the &#39;kwatchdog&#39; configuration file. Ivanti Connect Secure before versions 22.7R2.2 and 9.1R18.9 and Ivanti Policy Secure before version 22.7R1.2 allow a remote, authenticated attacker…</p> <p>Ivanti Connect Secure before versions 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version 22.7R1.1 allow a remote, authenticated attacker with administrative privileges to inject operating system commands using the &#39;dig&#39; web interface. Ivanti Connect Secure before versions 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version 22.7R1.1 allow a remote, authenticated attacker with administrative privileges to inject operating system commands using the &#39;ping6&#39; web interface. Ivanti Connect Secure before versions 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version 22.7R1.1 allow a remote, authenticated attacker with administrative privileges to inject operating system commands using the &#39;traceroute6&#39; web interface. Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure before version 22.7R1.1 allow allow a remote, authenticated attacker with administrative privileges to write arbitrary files or execute operating system commands with the operating system privileges of the &#39;nr&#39; user using the diagnostic web interface for the Port Probe (&#39;nmap&#39;) feature. Ivanti Connect Secure before version 22.6R2 and Ivanti Policy Secure before version 22.7R1 allow a local, authenticated attacker with &#39;nr&#39; operating system privileges to gain &#39;root&#39; privileges by overwriting the &#39;kwatchdog&#39; configuration file. Ivanti Connect Secure before versions 22.7R2.2 and 9.1R18.9 and Ivanti Policy Secure before version 22.7R1.2 allow a remote, authenticated attacker…</p> https://cve.radiocsirt.org/vuln/va-24-317-01 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3433 <p>Ein Angreifer kann mehrere Schwachstellen in Ivanti Connect Secure, Ivanti Policy Secure und Ivanti Secure Access Client ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen, einen Denial-of-Service Zustand zu erzeugen und Daten zu modifizieren</p> <p>Ein Angreifer kann mehrere Schwachstellen in Ivanti Connect Secure, Ivanti Policy Secure und Ivanti Secure Access Client ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen, einen Denial-of-Service Zustand zu erzeugen und Daten zu modifizieren</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3433