5454 matches found
Citrix NetScaler security vulnerabilities
Information leak, XSS...
SEC Consult SA-20140716-2 :: Multiple vulnerabilities in Citrix NetScaler Application Delivery Controller and Citrix NetScaler Gateway
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SEC Consult Vulnerability Lab Security Advisory 20140716-2 ======================================================================= title: Multiple vulnerabilities product: Citrix NetScaler Application Delivery Controller Citrix NetScaler Gateway...
Citrix Netscaler 9.3-62.4 Disclosure / Cross Site Scripting Vulnerabilities
Exploit for linux platform in category web applications product: Citrix NetScaler Application Delivery Controller Citrix NetScaler Gateway vulnerable version: =9.3-62.4 =10.1-126.12 CVE: CVE-2014-4346, CVE-2014-4347 impact: High homepage: http://www.citrix.com found: 2014-01-05 by: Stefan Viehböc...
Citrix XenDesktop 4.x / 5.x / 7.x Unauthorized Access (CTX139591)
The remote host is running a version of Citrix XenDesktop that is affected by an unauthorized access vulnerability. A flaw exists that could result in a user gaining unauthorized access to another user's desktop. Note that this vulnerability only affects configurations when pooled random desktop...
CVE-2014-4347
Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway formerly Access Gateway Enterprise Edition before 9.3-62.4 and 10.x before 10.1-126.12 allows attackers to obtain sensitive information via vectors related to a cookie...
CVE-2014-4346
Cross-site scripting XSS vulnerability in administration user interface in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway formerly Access Gateway Enterprise Edition 10.1 before 10.1-126.12 allows remote attackers to inject arbitrary web script or HTML via unspecified...
Information disclosure
Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway formerly Access Gateway Enterprise Edition before 9.3-62.4 and 10.x before 10.1-126.12 allows attackers to obtain sensitive information via vectors related to a cookie...
Cross site scripting
Cross-site scripting XSS vulnerability in administration user interface in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway formerly Access Gateway Enterprise Edition 10.1 before 10.1-126.12 allows remote attackers to inject arbitrary web script or HTML via unspecified...
CVE-2014-4346
CVE-2014-4346 is a cross-site scripting (XSS) vulnerability affecting Citrix NetScaler ADC/Gateway administration UI. SEC Consult and related sources indicate vulnerable releases include Citrix NetScaler VPX 10.0 and all 10.1 before 10.1-126.12, and 9.3 before 9.3-62.4. Fixed versions are 9.3-62....
CVE-2014-4347
Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway formerly Access Gateway Enterprise Edition before 9.3-62.4 and 10.x before 10.1-126.12 allows attackers to obtain sensitive information via vectors related to a cookie...
CVE-2014-4346
Cross-site scripting XSS vulnerability in administration user interface in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway formerly Access Gateway Enterprise Edition 10.1 before 10.1-126.12 allows remote attackers to inject arbitrary web script or HTML via unspecified...
CVE-2014-4347
Citrix NetScaler ADC and NetScaler Gateway (formerly Access Gateway) are affected by CVE-2014-4347. The vulnerability allows attackers to obtain sensitive information via cookie-related vectors on versions before 9.3-62.4 and 10.x before 10.1-126.12. Technical detail from SEC Consult and corrobor...
Citrix Netscaler Disclosure / Cross Site Scripting
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple vulnerabilities product: Citrix NetScaler Application Delivery Controller Citrix NetScaler Gateway vulnerable...
CVE-2014-4700
Citrix XenDesktop 7.x, 5.x, and 4.x, when pooled random desktop groups is enabled and ShutdownDesktopsAfterUse is disabled, allows local guest users to gain access to another user's desktop via unspecified vectors...
Design/Logic Flaw
Citrix XenDesktop 7.x, 5.x, and 4.x, when pooled random desktop groups is enabled and ShutdownDesktopsAfterUse is disabled, allows local guest users to gain access to another user's desktop via unspecified vectors...
CVE-2014-4700
Citrix XenDesktop 7.x, 5.x, and 4.x, when pooled random desktop groups is enabled and ShutdownDesktopsAfterUse is disabled, allows local guest users to gain access to another user's desktop via unspecified vectors...
CVE-2014-4700
CVE-2014-4700 affects Citrix XenDesktop 4.x, 5.x, and 7.x when pooled random desktop groups are enabled and ShutdownDesktopsAfterUse is disabled. The vulnerability allows a local guest to gain access to another user’s desktop via unspecified vectors. The issue is tied to the non-default configura...
CVE-2014-4700 - Vulnerability in Citrix XenDesktop could result in unauthorized access to another user's desktop
Description of Problem A vulnerability has been identified in Citrix XenDesktop that could result in a user gaining unauthorized interactive access to another user’s desktop. This vulnerability affects a specific, non-default configuration of Citrix XenDesktop 7 all versions up to and including...
Citrix Provisioning Services 5.6 SP1 Streamprocess Opcode 0x40020006 Buffer Overflow
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
Citrix Nfuse 1.6 Published Applications Information Leak Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3926/info Citrix Nfuse is an application portal server meant to provide the functionality of any application on the server via a web browser. Nfuse works in conjunction with a previously-installed webserver. If a request...