Skip to contentPulsesecure vulnerabilities
Newest
- ivanti connect secure, pulsesecure pulse connect secure +1 moreIn Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, and 8...CVE-2019-115418.3 High
- ivanti connect secure, pulsesecure pulse connect secure, pulse policy secure +2 moreIn Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4 and 8.3RX before 8.3R7.1 and...CVE-2019-115408.3 High
- ivanti connect secure, policy secure, pulsesecure pulse policy secure +1 more +3 moreIn Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX...CVE-2019-11539In KEVPublic exploitEPSS 98.5%8.0 High
- ivanti connect secure, pulsesecure pulse connect secure, pulse secure desktop client +2 moreIn Pulse Secure Pulse Desktop Client and Network Connect, an attacker could access session tokens...CVE-2019-112138.1 High
- ivanti connect secure, pulsesecure pulse policy secure +1 moreAn XSS issue was found with Psaldownload.cgi in Pulse Secure Pulse Connect Secure (PCS) 8.3R2...CVE-2018-208146.1 Medium
- pulsesecure pulse secure desktop clientAn information exposure issue where IPv6 DNS traffic would be sent outside of the VPN tunnel ...CVE-2018-208127.5 High
- ivanti connect secure, pulsesecure pulse policy secure +1 moreSession data between cluster nodes during cluster synchronization is not properly encrypted in...CVE-2018-208109.8 Critical
- ivanti connect secure, pulsesecure pulse policy secure +1 moreA crafted message can cause the web server to crash with Pulse Secure Pulse Connect Secure (PCS)...CVE-2018-208097.5 High
- pulsesecure secure access series ssl vpn sa-4000Certain Secure Access SA Series SSL VPN products (originally developed by Juniper Networks but...CVE-2018-201938.8 High
- pulsesecure virtual traffic managerPulse Secure Virtual Traffic Manager 9.9 versions prior to 9.9r2 and 10.4r1 allow a remote...CVE-2018-203074.3 Medium
- pulsesecure virtual traffic managerA stored cross-site scripting (XSS) vulnerability in the web administration user interface of...CVE-2018-203065.4 Medium
- pulsesecure pulse secure desktop clientPulse Secure Desktop Client 5.3 up to and including R6.0 build 1769 on Windows has Insecure...CVE-2018-110025.5 Medium
- artifex ghostscript, gpl ghostscript, canonical ubuntu linux +8 more +10 moreArtifex Ghostscript 9.25 and earlier allows attackers to bypass a sandbox protection mechanism...CVE-2018-18284Fix availableEPSS 16.3%8.6 High
- pulsesecure pulse secure desktopPulse Secure Client 9.0R1 and 5.3RX before 5.3R5, when configured to authenticate VPN users...CVE-2018-75726.8 Medium
- ivanti connect secure, pulsesecure pulse connect secure, pulse policy secure +2 moreA vulnerability has been discovered in login.cgi in Pulse Secure Pulse Connect Secure (PCS) 8.1RX...CVE-2018-63209.8 Critical
- pulsesecure pulse secure desktop clientIn Pulse Secure Pulse Desktop Client 5.3RX before 5.3R5 and 9.0R1, there is a Privilege...CVE-2018-162616.8 Medium
- pulsesecure pulse secure desktop clientThe Pulse Secure Desktop (macOS) has a Privilege Escalation Vulnerability.CVE-2018-158657.8 High
- pulsesecure pulse secure desktop clientThe Pulse Secure Desktop (macOS) 5.3RX before 5.3R5 and 9.0R1 has a Format String Vulnerability.CVE-2018-157495.5 Medium
- pulsesecure pulse secure desktop clientThe Pulse Secure Desktop (macOS) 5.3RX before 5.3R5 and 9.0R1 has a Privilege Escalation...CVE-2018-157265.3 Medium
- ivanti connect secure, pulsesecure pulse connect secure, pulse policy secure +2 moredownload.cgi in Pulse Secure Pulse Connect Secure 8.1RX before 8.1R13 and 8.3RX before 8.3R4 and...CVE-2018-143666.1 Medium
- artifex ghostscript, gpl ghostscript, canonical ubuntu linux +2 more +4 moreIn Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use a...CVE-2018-16513Fix available7.8 High
- artifex ghostscript, gpl ghostscript, canonical ubuntu linux +8 more +10 moreIn Artifex Ghostscript 9.23 before 2018-08-24, attackers able to supply crafted PostScript could...CVE-2018-15911Fix available7.8 High
- artifex ghostscript, gpl ghostscript, canonical ubuntu linux +6 more +8 moreIn Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use a...CVE-2018-15910Fix available7.8 High
- artifex ghostscript, gpl ghostscript, canonical ubuntu linux +8 more +10 moreIn Artifex Ghostscript 9.23 before 2018-08-24, a type confusion using the .shfill operator could...CVE-2018-15909Fix available7.8 High
- pulsesecure pulse connect securePulse Secure Pulse Connect Secure 8.1.x before 8.1R14, 8.2.x before 8.2R11, and 8.3.x before 8...CVE-2018-98495.5 Medium
- pulsesecure desktop linux clientThe GUI component (aka PulseUI) in Pulse Secure Desktop Linux clients before PULSE5.2R9.2 and 5.3...CVE-2018-63746.5 Medium
- pulsesecure pulse connect secure, pulse policy secure +1 moreA stack-based Buffer Overflow Vulnerability exists in the web server in Pulse Secure Pulse...CVE-2018-52999.8 Critical
- pulsesecure pulse connect secureA cross site scripting issue has been found in custompage.cgi in Pulse Secure Pulse Connect...CVE-2017-179474.8 Medium
- pulsesecure pulse one on-premisePulse Secure Pulse One On-Premise 2.0.1649 and below does not properly validate requests, which...CVE-2017-149357.5 High
- ivanti connect secure, pulsesecure pulse connect secure, pulse policy secure +2 morediag.cgi in Pulse Connect Secure 8.2R1 through 8.2R5, 8.1R1 through 8.1R10 and Pulse Policy...CVE-2017-114558.8 High
- pulsesecure pulse connect securePulse Connect Secure 8.3R1 has CSRF in logout.cgi. The logout function of the admin panel is not...CVE-2017-111968.8 High
- pulsesecure pulse connect securePulse Connect Secure 8.3R1 has Reflected XSS in launchHelp.cgi. The helpLaunchPage parameter is...CVE-2017-111956.1 Medium
- pulsesecure pulse connect securePulse Connect Secure 8.3R1 has Reflected XSS in adminservercacertdetails.cgi. In the admin panel,...CVE-2017-111946.1 Medium
- pulsesecure pulse connect securePulse Connect Secure 8.3R1 has CSRF in diag.cgi. In the panel, the diag.cgi file is responsible...CVE-2017-111938.8 High
- pulsesecure pulse secure desktop, odyssey access client, pulse secure security +1 more +3 morePulse Secure Desktop before 5.2R2 and Pulse Secure Installer Service before 8.2R2 and below for...CVE-2016-24087.8 High
- ivanti connect secure, pulsesecure pulse connect secure +1 moreThe administrative user interface in Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8...CVE-2016-47918.6 High
- ivanti connect secure, pulsesecure pulse connect secure +1 moreCross-site scripting (XSS) vulnerability in the administrative user interface in Pulse Connect...CVE-2016-47905.5 Medium
- ivanti connect secure, pulsesecure pulse connect secure +1 moreCross-site scripting (XSS) vulnerability in the system configuration section in the...CVE-2016-47896.1 Medium
- ivanti connect secure, pulsesecure pulse connect secure +1 morePulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r10, and 7.4 before...CVE-2016-47885.8 Medium
- ivanti connect secure, pulsesecure pulse connect secure +1 morePulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r10, and 7.4 before...CVE-2016-478710.0 Critical
- ivanti connect secure, pulsesecure pulse connect secure +1 morePulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r3, 8.0 before 8.0r11, and 7.4 before...CVE-2016-47867.5 High
- pulsesecure pulse connect secureThe Terminal Services Remote Desktop Protocol (RDP) client session restrictions feature in Pulse...CVE-2016-39856.5 Medium
- openssl, pulsesecure client, steel belted radius +2 moreThe SSLv2 protocol, as used in OpenSSL before 1.0.1s and 1.0.2 before 1.0.2g and other products,...CVE-2016-0800Public exploitFix availableEPSS 82.1%5.9 Medium
- openssl, pulsesecure client, steel belted radius +2 moreThe fmtstr function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0...CVE-2016-0799Fix availableEPSS 32.4%9.8 Critical