Pulsesecure

Pulse Connect Secure

57 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.1

CVE-2019-11543

  • EPSS 0.18%
  • Published 26.04.2019 02:29:00
  • Last modified 21.11.2024 04:21:18

XSS exists in the admin web console in Pulse Secure Pulse Connect Secure (PCS) 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure 9.0RX before 9.0R3.2, 5.4RX before 5.4R7.1, and 5.2RX before 5.2R12.1.

7.2

CVE-2019-11542

Exploit
  • EPSS 43.06%
  • Published 26.04.2019 02:29:00
  • Last modified 21.11.2024 04:21:18

In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure version 9.0RX before 9.0R3.2, 5.4RX before 5.4R7.1, 5.3RX before 5.3R12.1, 5.2RX before ...

7.5

CVE-2019-11541

  • EPSS 1.77%
  • Published 26.04.2019 02:29:00
  • Last modified 21.11.2024 04:21:18

In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, and 8.2RX before 8.2R12.1, users using SAML authentication with the Reuse Existing NC (Pulse) Session option may see authentication leaks.

9.8

CVE-2019-11540

Exploit
  • EPSS 14.76%
  • Published 26.04.2019 02:29:00
  • Last modified 21.11.2024 04:21:18

In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4 and 8.3RX before 8.3R7.1 and Pulse Policy Secure version 9.0RX before 9.0R3.2 and 5.4RX before 5.4R7.1, an unauthenticated, remote attacker can conduct a session hijacking attack.

8.1

CVE-2019-11213

  • EPSS 2.62%
  • Published 12.04.2019 15:29:00
  • Last modified 21.11.2024 04:20:44

In Pulse Secure Pulse Desktop Client and Network Connect, an attacker could access session tokens to replay and spoof sessions, and as a result, gain unauthorized access as an end user, a related issue to CVE-2019-1573. (The endpoint would need to be...

8.6

CVE-2018-18284

Exploit
  • EPSS 0.22%
  • Published 19.10.2018 22:29:01
  • Last modified 21.11.2024 03:55:38

Artifex Ghostscript 9.25 and earlier allows attackers to bypass a sandbox protection mechanism via vectors involving the 1Policy operator.

9.8

CVE-2018-6320

  • EPSS 5.24%
  • Published 06.09.2018 23:29:02
  • Last modified 21.11.2024 04:10:28

A vulnerability has been discovered in login.cgi in Pulse Secure Pulse Connect Secure (PCS) 8.1RX before 8.1R12 and 8.3RX before 8.3R2 and Pulse Policy Secure (PPS) 5.2RX before 5.2R9 and 5.4RX before 5.4R2 wherein an http(s) Host header received fro...

6.1

CVE-2018-14366

  • EPSS 0.1%
  • Published 06.09.2018 23:29:00
  • Last modified 21.11.2024 03:48:55

download.cgi in Pulse Secure Pulse Connect Secure 8.1RX before 8.1R13 and 8.3RX before 8.3R4 and Pulse Policy Secure through 5.2RX before 5.2R10 and 5.4RX before 5.4R4 have an Open Redirect Vulnerability.

7.8

CVE-2018-16513

  • EPSS 0.26%
  • Published 05.09.2018 13:29:00
  • Last modified 21.11.2024 03:52:53

In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use a type confusion in the setcolor function to crash the interpreter or possibly have unspecified other impact.

7.8

CVE-2018-15911

  • EPSS 2.7%
  • Published 28.08.2018 04:29:00
  • Last modified 21.11.2024 03:51:42

In Artifex Ghostscript 9.23 before 2018-08-24, attackers able to supply crafted PostScript could use uninitialized memory access in the aesdecode operator to crash the interpreter or potentially execute code.