agentprime: ivanti-avalanche

agentprime: ivanti-avalancheEvery new CVE for ivanti-avalanche.https://agentprime.io/CVE-2025-8297: Unrestricted file upload in Ivanti Avalanchehttps://agentprime.io/advisories/CVE-2025-8297/https://agentprime.io/advisories/CVE-2025-8297/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 Aug 2025 14:37:23 GMTCVECVE-2025-8296: SQL injection in Ivanti Avalanchehttps://agentprime.io/advisories/CVE-2025-8296/https://agentprime.io/advisories/CVE-2025-8296/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 Aug 2025 14:33:47 GMTCVECVE-2023-38036: Buffer overflow in Ivanti Avalanchehttps://agentprime.io/advisories/CVE-2023-38036/https://agentprime.io/advisories/CVE-2023-38036/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Sat, 12 Jul 2025 03:30:40 GMTCVEcriticalCVE-2024-13181: Path traversal in Ivanti Avalanchehttps://agentprime.io/advisories/CVE-2024-13181/https://agentprime.io/advisories/CVE-2024-13181/CVSS 7.3 (High). Critical: CVSS score 7.3 (7.0 or more) and EPSS 0.33 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Jan 2025 16:53:36 GMTCVEcriticalCVE-2024-13180: Path traversal in Ivanti Avalanchehttps://agentprime.io/advisories/CVE-2024-13180/https://agentprime.io/advisories/CVE-2024-13180/CVSS 7.5 (High). Critical: CVSS score 7.5 (7.0 or more) and EPSS 0.27 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Jan 2025 16:52:41 GMTCVEcriticalCVE-2024-13179: Path traversal in Ivanti Avalanchehttps://agentprime.io/advisories/CVE-2024-13179/https://agentprime.io/advisories/CVE-2024-13179/CVSS 7.3 (High). Critical: CVSS score 7.3 (7.0 or more) and EPSS 0.64 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Jan 2025 16:51:57 GMTCVEcriticalCVE-2024-50331: Out-of-bounds read in Ivanti Avalanchehttps://agentprime.io/advisories/CVE-2024-50331/https://agentprime.io/advisories/CVE-2024-50331/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 Nov 2024 15:34:00 GMTCVECVE-2024-50321: Infinite loop in Ivanti Avalanchehttps://agentprime.io/advisories/CVE-2024-50321/https://agentprime.io/advisories/CVE-2024-50321/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 Nov 2024 15:33:32 GMTCVECVE-2024-50320: Infinite loop in Ivanti Avalanchehttps://agentprime.io/advisories/CVE-2024-50320/https://agentprime.io/advisories/CVE-2024-50320/CVSS 7.5 (High). Critical: CVSS score 7.5 (7.0 or more) and EPSS 0.40 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 Nov 2024 15:32:52 GMTCVEcriticalCVE-2024-50319: Infinite loop in Ivanti Avalanchehttps://agentprime.io/advisories/CVE-2024-50319/https://agentprime.io/advisories/CVE-2024-50319/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 Nov 2024 15:32:20 GMTCVECVE-2024-50318: NULL pointer dereference in Ivanti Avalanchehttps://agentprime.io/advisories/CVE-2024-50318/https://agentprime.io/advisories/CVE-2024-50318/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 Nov 2024 15:30:35 GMTCVECVE-2024-50317: NULL pointer dereference in Ivanti Avalanchehttps://agentprime.io/advisories/CVE-2024-50317/https://agentprime.io/advisories/CVE-2024-50317/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 Nov 2024 15:29:58 GMTCVECVE-2024-47011: Path traversal in Ivanti Avalanchehttps://agentprime.io/advisories/CVE-2024-47011/https://agentprime.io/advisories/CVE-2024-47011/CVSS 7.5 (High). Critical: CVSS score 7.5 (7.0 or more) and EPSS 0.56 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Oct 2024 16:30:25 GMTCVEcriticalCVE-2024-47010: Path traversal in Ivanti Avalanchehttps://agentprime.io/advisories/CVE-2024-47010/https://agentprime.io/advisories/CVE-2024-47010/CVSS 7.3 (High). Critical: CVSS score 7.3 (7.0 or more) and EPSS 0.38 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Oct 2024 16:29:57 GMTCVEcriticalCVE-2024-47009: Path traversal in Ivanti Avalanchehttps://agentprime.io/advisories/CVE-2024-47009/https://agentprime.io/advisories/CVE-2024-47009/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Oct 2024 16:28:53 GMTCVECVE-2024-47008: Server-side request forgery in Ivanti Avalanchehttps://agentprime.io/advisories/CVE-2024-47008/https://agentprime.io/advisories/CVE-2024-47008/CVSS 7.5 (High). Critical: CVSS score 7.5 (7.0 or more) and EPSS 0.47 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Oct 2024 16:28:14 GMTCVEcriticalCVE-2024-47007: NULL pointer dereference in Ivanti Avalanchehttps://agentprime.io/advisories/CVE-2024-47007/https://agentprime.io/advisories/CVE-2024-47007/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Oct 2024 16:27:46 GMTCVECVE-2024-38652: Path traversal in Ivanti Avalanchehttps://agentprime.io/advisories/CVE-2024-38652/https://agentprime.io/advisories/CVE-2024-38652/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Aug 2024 02:38:00 GMTCVECVE-2024-37373: Improper input validation in Ivanti Avalanchehttps://agentprime.io/advisories/CVE-2024-37373/https://agentprime.io/advisories/CVE-2024-37373/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Aug 2024 02:38:00 GMTCVECVE-2024-37399: NULL pointer dereference in Ivanti Avalanchehttps://agentprime.io/advisories/CVE-2024-37399/https://agentprime.io/advisories/CVE-2024-37399/CVSS 7.5 (High). Critical: CVSS score 7.5 (7.0 or more) and EPSS 0.28 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Aug 2024 02:38:00 GMTCVEcriticalCVE-2024-38653: XML external entity injection in Ivanti Avalanchehttps://agentprime.io/advisories/CVE-2024-38653/https://agentprime.io/advisories/CVE-2024-38653/CVSS 8.2 (High). Critical: CVSS score 8.2 (7.0 or more) and EPSS 0.92 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Aug 2024 02:38:00 GMTCVEcriticalCVE-2024-36136: Off-by-one error in Ivanti Avalanchehttps://agentprime.io/advisories/CVE-2024-36136/https://agentprime.io/advisories/CVE-2024-36136/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Aug 2024 02:38:00 GMTCVECVE-2024-29848: Unrestricted file upload in Ivanti Avalanchehttps://agentprime.io/advisories/CVE-2024-29848/https://agentprime.io/advisories/CVE-2024-29848/CVSS 7.2 (High). Critical: CVSS score 7.2 (7.0 or more) and EPSS 0.64 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Fri, 31 May 2024 17:38:31 GMTCVEcriticalCVE-2024-23527: Out-of-bounds read in Ivanti Avalanchehttps://agentprime.io/advisories/CVE-2024-23527/https://agentprime.io/advisories/CVE-2024-23527/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 24 Apr 2024 23:12:51 GMTCVECVE-2024-23526: Out-of-bounds read in Ivanti Avalanchehttps://agentprime.io/advisories/CVE-2024-23526/https://agentprime.io/advisories/CVE-2024-23526/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Apr 2024 01:10:31 GMTCVECVE-2024-22061: Command injection in Ivanti Avalanchehttps://agentprime.io/advisories/CVE-2024-22061/https://agentprime.io/advisories/CVE-2024-22061/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Apr 2024 01:10:30 GMTCVECVE-2024-23529: Out-of-bounds read in Ivanti Avalanchehttps://agentprime.io/advisories/CVE-2024-23529/https://agentprime.io/advisories/CVE-2024-23529/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Apr 2024 01:10:13 GMTCVECVE-2024-23528: Out-of-bounds read in Ivanti Avalanchehttps://agentprime.io/advisories/CVE-2024-23528/https://agentprime.io/advisories/CVE-2024-23528/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Apr 2024 01:10:13 GMTCVECVE-2024-25000: Path traversal in Ivanti Avalanchehttps://agentprime.io/advisories/CVE-2024-25000/https://agentprime.io/advisories/CVE-2024-25000/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Apr 2024 01:10:12 GMTCVECVE-2024-27977: Path traversal in Ivanti Avalanchehttps://agentprime.io/advisories/CVE-2024-27977/https://agentprime.io/advisories/CVE-2024-27977/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Apr 2024 01:10:11 GMTCVECVE-2024-24992: Path traversal in Ivanti Avalanchehttps://agentprime.io/advisories/CVE-2024-24992/https://agentprime.io/advisories/CVE-2024-24992/CVSS 8.8 (High). Critical: CVSS score 8.8 (7.0 or more) and EPSS 0.71 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Apr 2024 01:10:11 GMTCVEcriticalCVE-2024-23532: Out-of-bounds read in Ivanti Avalanchehttps://agentprime.io/advisories/CVE-2024-23532/https://agentprime.io/advisories/CVE-2024-23532/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Apr 2024 01:10:11 GMTCVECVE-2024-23535: Path traversal in Ivanti Avalanchehttps://agentprime.io/advisories/CVE-2024-23535/https://agentprime.io/advisories/CVE-2024-23535/CVSS 8.8 (High). Critical: CVSS score 8.8 (7.0 or more) and EPSS 0.68 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Apr 2024 01:10:11 GMTCVEcriticalCVE-2024-24998: Ivanti Avalanche: A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a…https://agentprime.io/advisories/CVE-2024-24998/https://agentprime.io/advisories/CVE-2024-24998/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Apr 2024 01:10:11 GMTCVECVE-2024-24995: Time-of-check time-of-use race condition in Ivanti Avalanchehttps://agentprime.io/advisories/CVE-2024-24995/https://agentprime.io/advisories/CVE-2024-24995/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Apr 2024 01:10:11 GMTCVECVE-2024-24993: Time-of-check time-of-use race condition in Ivanti Avalanchehttps://agentprime.io/advisories/CVE-2024-24993/https://agentprime.io/advisories/CVE-2024-24993/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Apr 2024 01:10:11 GMTCVECVE-2024-24997: Path traversal in Ivanti Avalanchehttps://agentprime.io/advisories/CVE-2024-24997/https://agentprime.io/advisories/CVE-2024-24997/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Apr 2024 01:10:11 GMTCVECVE-2024-24991: NULL pointer dereference in Ivanti Avalanchehttps://agentprime.io/advisories/CVE-2024-24991/https://agentprime.io/advisories/CVE-2024-24991/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Apr 2024 01:10:11 GMTCVECVE-2024-27978: NULL pointer dereference in Ivanti Avalanchehttps://agentprime.io/advisories/CVE-2024-27978/https://agentprime.io/advisories/CVE-2024-27978/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Apr 2024 01:10:11 GMTCVECVE-2024-24994: Path traversal in Ivanti Avalanchehttps://agentprime.io/advisories/CVE-2024-24994/https://agentprime.io/advisories/CVE-2024-24994/CVSS 8.8 (High). Critical: CVSS score 8.8 (7.0 or more) and EPSS 0.68 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Apr 2024 01:10:11 GMTCVEcriticalCVE-2024-24996: Heap-based buffer overflow in Ivanti Avalanchehttps://agentprime.io/advisories/CVE-2024-24996/https://agentprime.io/advisories/CVE-2024-24996/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.32 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Apr 2024 01:10:11 GMTCVEcriticalCVE-2024-23534: Unrestricted file upload in Ivanti Avalanchehttps://agentprime.io/advisories/CVE-2024-23534/https://agentprime.io/advisories/CVE-2024-23534/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Apr 2024 01:10:11 GMTCVECVE-2024-23533: Out-of-bounds read in Ivanti Avalanchehttps://agentprime.io/advisories/CVE-2024-23533/https://agentprime.io/advisories/CVE-2024-23533/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Apr 2024 01:10:11 GMTCVECVE-2024-23531: Integer overflow in Ivanti Avalanchehttps://agentprime.io/advisories/CVE-2024-23531/https://agentprime.io/advisories/CVE-2024-23531/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Apr 2024 01:10:11 GMTCVECVE-2024-23530: Out-of-bounds read in Ivanti Avalanchehttps://agentprime.io/advisories/CVE-2024-23530/https://agentprime.io/advisories/CVE-2024-23530/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Apr 2024 01:10:11 GMTCVECVE-2024-27976: Path traversal in Ivanti Avalanchehttps://agentprime.io/advisories/CVE-2024-27976/https://agentprime.io/advisories/CVE-2024-27976/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Apr 2024 01:10:11 GMTCVECVE-2024-29204: Heap-based buffer overflow in Ivanti Avalanchehttps://agentprime.io/advisories/CVE-2024-29204/https://agentprime.io/advisories/CVE-2024-29204/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Apr 2024 01:10:11 GMTCVEcriticalCVE-2024-27975: Use after free in Ivanti Avalanchehttps://agentprime.io/advisories/CVE-2024-27975/https://agentprime.io/advisories/CVE-2024-27975/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Apr 2024 01:10:11 GMTCVECVE-2024-27984: Path traversal in Ivanti Avalanchehttps://agentprime.io/advisories/CVE-2024-27984/https://agentprime.io/advisories/CVE-2024-27984/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Apr 2024 01:10:11 GMTCVECVE-2023-46220: An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service (DoS) or code execution.https://agentprime.io/advisories/CVE-2023-46220/https://agentprime.io/advisories/CVE-2023-46220/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.11 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 19 Dec 2023 15:43:26 GMTCVEcritical