Known vulnerabilities in Avalanche - page 2

Vendor: Ivanti
Software: Avalanche
Software CPE: cpe:2.3:a:ivanti:avalanche:*:*:*:*:*:*:*:*
Website: https://www.ivanti.com/
Total vulnerabilities: 87
Public exploits: 3
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Avalanche Avalanche is affected by 87 known vulnerabilities: 1 critical, 25 high, 50 medium, 11 low Critical High Medium Low

Vulnerabilities (87)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU95987 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-38652		 CWE-22 High
No
No
 6.4.4 14.08.2024 SB2024081432
#VU89718 - Unrestricted Upload of File with Dangerous Type
CVE-2024-29848		 CWE-434 Medium
No
No
 6.4.3.602 22.05.2024 SB2024052214
#VU88786 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-24993		 CWE-362 Medium
No
No
 6.4.3 17.04.2024 SB20240417128
#VU88788 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-24995		 CWE-362 Medium
No
No
 6.4.3 17.04.2024 SB20240417128
#VU88784 - NULL Pointer Dereference
CVE-2024-24991		 CWE-476 Medium
No
No
 6.4.3 17.04.2024 SB20240417128
#VU88774 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-23535		 CWE-22 Medium
No
No
 6.4.3 17.04.2024 SB20240417128
#VU88775 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-24992		 CWE-22 Medium
No
No
 6.4.3 17.04.2024 SB20240417128
#VU88777 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-24997		 CWE-22 Medium
No
No
 6.4.3 17.04.2024 SB20240417128
#VU88778 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-24998		 CWE-22 Medium
No
No
 6.4.3 17.04.2024 SB20240417128
#VU88773 - Unrestricted Upload of File with Dangerous Type
CVE-2024-23534		 CWE-434 Medium
No
No
 6.4.3 17.04.2024 SB20240417128
#VU88772 - Out-of-bounds read
CVE-2024-23532		 CWE-125 Medium
No
No
 6.4.3 17.04.2024 SB20240417128
#VU88771 - Integer overflow
CVE-2024-23531		 CWE-190 Medium
No
No
 6.4.3 17.04.2024 SB20240417128
#VU88765 - Out-of-bounds read
CVE-2024-23526		 CWE-125 Medium
No
No
 6.4.3 17.04.2024 SB20240417128
#VU88766 - Out-of-bounds read
CVE-2024-23527		 CWE-125 Medium
No
No
 6.4.3 17.04.2024 SB20240417128
#VU88767 - Out-of-bounds read
CVE-2024-23528		 CWE-125 Medium
No
No
 6.4.3 17.04.2024 SB20240417128
#VU88768 - Out-of-bounds read
CVE-2024-23529		 CWE-125 Medium
No
No
 6.4.3 17.04.2024 SB20240417128
#VU88769 - Out-of-bounds read
CVE-2024-23530		 CWE-125 Medium
No
No
 6.4.3 17.04.2024 SB20240417128
#VU88770 - Out-of-bounds read
CVE-2024-23533		 CWE-125 Low
No
No
 6.4.3 17.04.2024 SB20240417128
#VU88764 - Heap-based Buffer Overflow
CVE-2024-22061		 CWE-122 High
No
No
 6.4.3 17.04.2024 SB20240417128
#VU88789 - Heap-based Buffer Overflow
CVE-2024-24996		 CWE-122 High
No
No
 6.4.3 17.04.2024 SB20240417128


Showing elements 21 - 40 out of 87