Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor archive

landesk CVEs

Beta · best-effort

9 CVEs tagged to vendor landesk — 2 Critical, 4 High, 3 Medium, 0 Low, 0 Unrated.

See this archive with more filtersView vendor evidence profileExplore

CVE-2014-5362

Published Sep 19, 2017

The admin interface in Landesk Management Suite 9.6 and earlier allows remote attackers to conduct remote file inclusion attacks involving ASPX pages from third-party sites via th…

CVSS 7.2 · High
Vendor/product tagsBeta · best-effort

CVE-2014-5361

Published Apr 21, 2015

Multiple cross-site request forgery (CSRF) vulnerabilities in Landesk Management Suite 9.6 and earlier allow remote attackers to hijack the authentication of administrators for re…

CVSS 6.8 · Medium
Vendor/product tagsBeta · best-effort

CVE-2014-5360

Published Feb 3, 2015

Cross-site scripting (XSS) vulnerability in the admin interface in LANDESK Management Suite before 9.6 SP1 allows remote attackers to inject arbitrary web script or HTML via the A…

CVSS 4.3 · Medium
Vendor/product tagsBeta · best-effort

CVE-2012-1196

Published Feb 18, 2012

Directory traversal vulnerability in the VulCore web service (WSVulnerabilityCore/VulCore.asmx) in Lenovo ThinkManagement Console 9.0.3 allows remote attackers to delete arbitrary…

CVSS 5.0 · Medium
Vendor/product tagsBeta · best-effort

CVE-2012-1195

Published Feb 18, 2012

Unrestricted file upload vulnerability in andesk/managementsuite/core/core.anonymous/ServerSetup.asmx in the ServerSetup web service in Lenovo ThinkManagement Console 9.0.3 allows…

CVSS 7.5 · High
Vendor/product tagsBeta · best-effort

CVE-2010-2892

Published Nov 15, 2010

gsb/drivers.php in LANDesk Management Gateway 4.0 through 4.0-1.48 and 4.2 through 4.2-1.8 allows remote authenticated administrators to execute arbitrary commands via shell metac…

CVSS 8.5 · High
Vendor/product tagsBeta · best-effort

CVE-2008-6195

Published Feb 20, 2009

Directory traversal vulnerability in the PXE TFTP Service (PXEMTFTP.exe) in LANDesk Management Suite (LDMS) 8.80.1.1 and earlier allows remote attackers to read arbitrary files vi…

CVSS 7.8 · High
Vendor/product tagsBeta · best-effort

CVE-2007-1674

Published Apr 18, 2007

Stack-based buffer overflow in the Alert Service (aolnsrvr.exe) in LANDesk Management Suite 8.7 allows remote attackers to execute arbitrary code via a crafted packet to port 6553…

CVSS 10.0 · Critical
Vendor/product tagsBeta · best-effort
Showing 1-9 of 9 CVEsPage 1 of 1