8 source-linked records in the current knowledge graph.
A code injection vulnerability exists in Pulse Connect Secure that allows an attacker to crafted a URI to perform an arbitrary code execution via the admin web interface. Required action: Apply updates per vendor instructions.
CISA KEV ↗ · unattributed attributionIvanti Pulse Connect Secure contains a use-after-free vulnerability that allow a remote, unauthenticated attacker to execute code via license services. Required action: Apply updates per vendor instructions.
CISA KEV ↗ · unattributed attributionIvanti Pulse Connect Secure contains an unspecified vulnerability in the admin web interface that could allow an authenticated attacker to upload a custom template to perform code execution. Required action: Apply updates per vendor instructions.
CISA KEV ↗ · unattributed attributionIvanti Pulse Connect Secure contains an unrestricted file upload vulnerability that allows an authenticated administrator to perform a file write via a maliciously crafted archive upload in the administrator web interface. Required action: Apply updates per vendor instructions.
CISA KEV ↗ · unattributed attributionIvanti Pulse Connect Secure Collaboration Suite contains a buffer overflow vulnerabilities that allows a remote authenticated users to execute code as the root user via maliciously crafted meeting room. Required action: Apply updates per vendor instructions.
CISA KEV ↗ · unattributed attributionPulse Connect Secure contains an unspecified vulnerability that allows an authenticated attacker to perform code execution using uncontrolled gzip extraction. Required action: Apply updates per vendor instructions.
CISA KEV ↗ · unattributed attributionIvanti Pulse Connect Secure contains a command injection vulnerability that allows remote authenticated users to perform remote code execution via Windows File Resource Profiles. Required action: Apply updates per vendor instructions.
CISA KEV ↗ · unattributed attributionIvanti Pulse Connect Secure contains an arbitrary file read vulnerability that allows an unauthenticated remote attacker with network access via HTTPS to send a specially crafted URI. Required action: Apply updates per vendor instructions.
CISA KEV ↗ · unattributed attribution