İçeriğe atla
Noroxi

pulsesecure kayıtları

pulsesecure üreticisine ait 93 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
3 · %3,2
Silahlaştırılmış
5 · %5,4
Pre-auth RCE
3
Düzeltme kaydı olan
%9,7
Yayından KEV’e ortanca
585 gün

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

93 kayıt
  • CVE-2019-11539
    88Hemen

    In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 an

    YüksekCVSS 7,2KEVSilahlaştırılmışEPSS %99

    ivanti · connect secure25 Nis 2019

  • CVE-2020-8218
    68Bu hafta

    A code injection vulnerability exists in Pulse Connect Secure <9.1R8 that allows an attacker to crafted a URI to perform an arbitrary code e

    YüksekCVSS 7,2KEVSilahlaştırılmışEPSS %32

    ivanti · connect secure30 Tem 2020

  • CVE-2021-22900
    62Bu hafta

    A vulnerability allowed multiple unrestricted uploads in Pulse Connect Secure before 9.1R11.4 that could lead to an authenticated administra

    YüksekCVSS 7,2KEVSilahlaştırılmışEPSS %14

    ivanti · connect secure27 May 2021

  • CVE-2019-11477
    60Bu hafta

    Integer overflow in TCP_SKB_CB(skb)->tcp_gso_segs

    YüksekCVSS 7,5Kavram kanıtıEPSS %99

    linux · linux kernel18 Haz 2019

  • CVE-2019-11478
    58Planlayın

    SACK can cause extensive memory use via fragmented resend queue

    YüksekCVSS 7,5İstismar yokEPSS %95

    linux · linux kernel18 Haz 2019

  • CVE-2021-22908
    56Planlayın

    A buffer overflow vulnerability exists in Windows File Resource Profiles in 9.X allows a remote authenticated user with privileges to browse

    YüksekCVSS 8,8İstismar yokEPSS %69

    ivanti · connect secure27 May 2021

  • CVE-2016-0799
    49Planlayın

    The fmtstr function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g improperly calculates string lengths, whi

    KritikCVSS 9,8İstismar yokEPSS %32

    openssl · openssl3 Mar 2016

  • CVE-2016-0800
    48Planlayın

    The SSLv2 protocol, as used in OpenSSL before 1.0.1s and 1.0.2 before 1.0.2g and other products, requires a server to send a ServerVerify me

    OrtaCVSS 5,9SilahlaştırılmışEPSS %82

    openssl · openssl1 Mar 2016

  • CVE-2019-11542
    48Planlayın

    In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 an

    YüksekCVSS 7,2İstismar yokEPSS %66

    ivanti · connect secure25 Nis 2019

  • CVE-2019-11540
    41Planlayın

    In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4 and 8.3RX before 8.3R7.1 and Pulse Policy Secure version 9.0RX before 9.0R

    KritikCVSS 9,8İstismar yokEPSS %8

    ivanti · connect secure25 Nis 2019

  • CVE-2016-4787
    41Planlayın

    Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r10, and 7.4 before 7.4r13.4 allow remote attackers to read sen

    KritikCVSS 10,0İstismar yokEPSS %2

    ivanti · connect secure26 May 2016

  • CVE-2018-6320
    40Planlayın

    A vulnerability has been discovered in login.cgi in Pulse Secure Pulse Connect Secure (PCS) 8.1RX before 8.1R12 and 8.3RX before 8.3R2 and P

    KritikCVSS 9,8İstismar yokEPSS %4

    ivanti · connect secure6 Eyl 2018

  • CVE-2018-5299
    40Planlayın

    A stack-based Buffer Overflow Vulnerability exists in the web server in Pulse Secure Pulse Connect Secure (PCS) before 8.3R4 and Pulse Polic

    KritikCVSS 9,8İstismar yokEPSS %3

    pulsesecure · pulse connect secure16 Oca 2018

  • CVE-2020-8239
    40Planlayın

    A vulnerability in the Pulse Secure Desktop Client < 9.1R9 is vulnerable to the client registry privilege escalation attack.

    KritikCVSS 9,8İstismar yokEPSS %2

    pulsesecure · pulse secure desktop client28 Eki 2020

  • CVE-2018-20810
    40Planlayın

    Session data between cluster nodes during cluster synchronization is not properly encrypted in Pulse Secure Pulse Connect Secure (PCS) 8.3RX

    KritikCVSS 9,8İstismar yokEPSS %2

    ivanti · connect secure28 Haz 2019

  • CVE-2018-18284
    39İzleyin

    Artifex Ghostscript 9.25 and earlier allows attackers to bypass a sandbox protection mechanism via vectors involving the 1Policy operator.

    YüksekCVSS 8,6İstismar yokEPSS %16

    artifex · ghostscript19 Eki 2018

  • CVE-2019-11509
    37İzleyin

    In Pulse Secure Pulse Connect Secure (PCS) before 8.1R15.1, 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4 and Pulse Policy

    YüksekCVSS 8,8İstismar yokEPSS %8

    ivanti · connect secure3 Haz 2019

  • CVE-2020-8254
    36İzleyin

    A vulnerability in the Pulse Secure Desktop Client < 9.1R9 has Remote Code Execution (RCE) if users can be convinced to connect to a malicio

    YüksekCVSS 8,8Kavram kanıtıEPSS %2

    pulsesecure · pulse secure desktop client28 Eki 2020

  • CVE-2020-11580
    36İzleyin

    An issue was discovered in Pulse Secure Pulse Connect Secure (PCS) through 2020-04-06.

    KritikCVSS 9,1İstismar yokEPSS %1

    pulsesecure · pulse connect secure6 Nis 2020

  • CVE-2022-21826
    35İzleyin

    Pulse Secure version 9.115 and below may be susceptible to client-side http request smuggling, When the application receives a POST request,

    OrtaCVSS 5,4İstismar yokEPSS %45

    ivanti · connect secure30 Eyl 2022

  • CVE-2020-11581
    35İzleyin

    An issue was discovered in Pulse Secure Pulse Connect Secure (PCS) through 2020-04-06.

    YüksekCVSS 8,1İstismar yokEPSS %10

    pulsesecure · pulse connect secure6 Nis 2020

  • CVE-2016-4791
    35İzleyin

    The administrative user interface in Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r9, and 7.4 before 7.4r13.

    YüksekCVSS 8,6İstismar yokEPSS %2

    ivanti · connect secure26 May 2016

  • CVE-2017-11455
    35İzleyin

    diag.cgi in Pulse Connect Secure 8.2R1 through 8.2R5, 8.1R1 through 8.1R10 and Pulse Policy Secure 5.3R1 through 5.3R5, 5.2R1 through 5.2R8,

    YüksekCVSS 8,8İstismar yokEPSS %1

    ivanti · connect secure29 Ağu 2017

  • CVE-2018-20193
    35İzleyin

    Certain Secure Access SA Series SSL VPN products (originally developed by Juniper Networks but now sold and supported by Pulse Secure, LLC)

    YüksekCVSS 8,8İstismar yokEPSS %1

    pulsesecure · secure access series ssl vpn sa-400021 Ara 2018

  • CVE-2020-11582
    35İzleyin

    An issue was discovered in Pulse Secure Pulse Connect Secure (PCS) through 2020-04-06.

    YüksekCVSS 8,8İstismar yokEPSS %1

    pulsesecure · pulse connect secure6 Nis 2020