Search vulnerabilities

Results 117

Export CSV
CVE-2023-46260

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service (DoS) or code execution.

CVSS 3.1 · 9.8 Critical EPSS 9.8% KEV · Not listed
Vendors
Products
CVE-2023-46217

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service (DoS) or code execution.

CVSS 3.1 · 9.8 Critical EPSS 36.4% KEV · Not listed
Vendors
Products
CVE-2023-46804

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service (DoS).

CVSS 3.1 · 7.5 High EPSS 4.1% KEV · Not listed
Vendors
Products
CVE-2023-46803

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service (DoS).

CVSS 3.1 · 7.5 High EPSS 4.1% KEV · Not listed
Vendors
Products
CVE-2023-46266

An attacker can send a specially crafted request which could lead to leakage of sensitive data or potentially a resource-based DoS attack.

CVSS 3.1 · 9.1 Critical EPSS 3.5% KEV · Not listed
Vendors
Products
CVE-2023-46265

An unauthenticated could abuse a XXE vulnerability in the Smart Device Server to leak data or perform a Server-Side Request Forgery (SSRF).

CVSS 3.1 · 9.8 Critical EPSS 4.0% KEV · Not listed
Vendors
Products
CVE-2023-46264

An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.4.1 and below that could allow an attacker to achieve a remove code execution.

CVSS 3.1 · 9.8 Critical EPSS 90.2% KEV · Not listed
Vendors
Products
CVE-2023-46263

An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.4.1 and below that could allow an attacker to achieve a remote code execution.

CVSS 3.1 · 9.8 Critical EPSS 81.9% KEV · Not listed
Vendors
Products
CVE-2023-46262

An unauthenticated attacked could send a specifically crafted web request causing a Server-Side Request Forgery (SSRF) in Ivanti Avalanche Remote Control server.

CVSS 3.1 · 7.5 High EPSS 82.8% KEV · Not listed
Vendors
Products
CVE-2023-46261

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service (DoS) or code execution.

CVSS 3.1 · 9.8 Critical EPSS 11.3% KEV · Not listed
Vendors
Products
CVE-2023-46259

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service (DoS) or code execution.

CVSS 3.1 · 9.8 Critical EPSS 11.3% KEV · Not listed
Vendors
Products
CVE-2023-46258

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service (DoS) or code execution.

CVSS 3.1 · 9.8 Critical EPSS 6.8% KEV · Not listed
Vendors
Products
CVE-2023-46225

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service (DoS) or code execution.

CVSS 3.1 · 9.8 Critical EPSS 11.3% KEV · Not listed
Vendors
Products
CVE-2023-46224

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service (DoS) or code execution.

CVSS 3.1 · 9.8 Critical EPSS 6.8% KEV · Not listed
Vendors
Products
CVE-2023-46223

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service (DoS) or code execution.

CVSS 3.1 · 9.8 Critical EPSS 6.8% KEV · Not listed
Vendors
Products
CVE-2023-46222

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service (DoS) or code execution.

CVSS 3.1 · 9.8 Critical EPSS 6.8% KEV · Not listed
Vendors
Products
CVE-2023-46221

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service (DoS) or code execution.

CVSS 3.1 · 9.8 Critical EPSS 6.8% KEV · Not listed
Vendors
Products
CVE-2023-46220

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service (DoS) or code execution.

CVSS 3.1 · 9.8 Critical EPSS 11.3% KEV · Not listed
Vendors
Products
CVE-2023-46216

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service (DoS) or code execution.

CVSS 3.1 · 9.8 Critical EPSS 36.4% KEV · Not listed
Vendors
Products
CVE-2023-41726

Ivanti Avalanche Incorrect Default Permissions allows Local Privilege Escalation Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Products