CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
2 advisories matched
2026-11-03
Ivanti Connect Secure Predictable Filename Vulnerability (CVE-2026-118527) - Arbitrary File Upload Risk
[Affected Scope] Ivanti Connect Secure versions prior to 25.1.1.3 and 22.8R2.6
[Impact] Authenticated attackers can upload malicious files to predictable paths, potentially leading to persistent access or further exploitation
[Mitigation] Immediate upgrade to versions 25.1.1.3, 22.8R2.6, or higher is required
2024-05-14
Apple Pointer Authentication (PAC) Bypass Vulnerability Advisory (CVE-2024-27834)
[Affected Scope] Apple OS versions prior to iOS 17.5, macOS Sonoma 14.5, and Safari 17.5.
[Impact] An attacker with existing read/write capabilities can bypass PAC to gain full system control or execute arbitrary code.
[Mitigation] Immediately update to the latest OS versions (iOS 17.5, macOS 14.5, etc.) provided by Apple.