Lucene search
+L

6025 matches found

NVD
NVD
•added 2005/12/03 7:03 p.m.•32 views

CVE-2005-3971

Cross-site scripting XSS vulnerability in the login form in Citrix MetaFrame Secure Access Manager 2.0 through 2.2 and NFuse Elite 1.0 allows remote attackers to inject arbitrary web script or HTML via the username field...

4.3CVSS5.7AI score0.01405EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2005/12/03 7:00 p.m.•38 views

CVE-2005-3971

Cross-site scripting XSS vulnerability in the login form in Citrix MetaFrame Secure Access Manager 2.0 through 2.2 and NFuse Elite 1.0 allows remote attackers to inject arbitrary web script or HTML via the username field...

5.7AI score0.01405EPSS
SaveExploits0References7
CVE
CVE
•added 2005/12/03 7:00 p.m.•71 views

CVE-2005-3971

CVE-2005-3971 affects Citrix MetaFrame Secure Access Manager 2.0–2.2 and NFuse Elite 1.0. It is a cross-site scripting (XSS) vulnerability in the login form that allows remote attackers to inject arbitrary web script or HTML via the username field. The connected sources document this vulnerabilit...

4.3CVSS5.9AI score0.01405EPSS
SaveExploits0References7Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/12/03 12:00 a.m.•3 views

CVE-2005-3971: Undefined Security Weakness

Cross-site scripting XSS vulnerability in the login form in Citrix MetaFrame Secure Access Manager 2.0 through 2.2 and NFuse Elite 1.0 allows remote attackers to inject arbitrary web script or HTML via the username field...

4.3CVSS6AI score0.01405EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2005/11/03 12:00 a.m.•43 views

Citrix Published Applications Enumeration (UDP)

UDP based enumeration of Citrix published applications. SPDX-FileCopyrightText: 2002 John [email protected] Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.3AI score
SaveExploits0References3
OpenVAS
OpenVAS
•added 2005/11/03 12:00 a.m.•50 views

Citrix Web Interface XSS

The remote server is running a Citrix Web Interface server that is vulnerable to cross site scripting. SPDX-FileCopyrightText: 2003 Michael J. Richardson Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

4.3CVSS6.2AI score0.03885EPSS
SaveExploits2References2
OpenVAS
OpenVAS
•added 2005/11/03 12:00 a.m.•52 views

Citrix NFuse_Application parameter XSS

The remote Citrix NFuse contains a flaw that allows a remote cross site scripting attack. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

7.5CVSS6.3AI score0.07944EPSS
SaveExploits2References3
OpenVAS
OpenVAS
•added 2005/11/03 12:00 a.m.•18 views

Citrix Server Detection

A Citrix server is running on this machine. SPDX-FileCopyrightText: 2005 John [email protected] Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.1AI score
SaveExploits0References1
Packet Storm
Packet Storm
•added 2005/10/06 12:00 a.m.•28 views

ctxpoliciesbypass.txt

DESCRIPTION: ============ Vulnerability in Presentation Server allow to user bypass citrix policy which is applied to client name. SOFTWARE: Citrix Metaframe Presentation Server 3.0 / 4.0 ========= INFO: ===== Citrix Presentation Server policy is used for admins to restrict the user environment a...

7.4AI score
SaveExploits0
NVD
NVD
•added 2005/10/04 10:02 p.m.•32 views

CVE-2005-3134

Citrix Metaframe Presentation Server 3.0 and 4.0 allows remote attackers to bypass policy restrictions by downloading the launch.ica file and changing the client device name ClientName...

7.5CVSS6.7AI score0.02067EPSS
SaveExploits1References7
Cvelist
Cvelist
•added 2005/10/04 4:00 a.m.•41 views

CVE-2005-3134

Citrix Metaframe Presentation Server 3.0 and 4.0 allows remote attackers to bypass policy restrictions by downloading the launch.ica file and changing the client device name ClientName...

6.7AI score0.02067EPSS
SaveExploits1References7
CVE
CVE
•added 2005/10/04 4:00 a.m.•74 views

CVE-2005-3134

CVE-2005-3134 affects Citrix Metaframe Presentation Server 3.0 and 4.0. The issue allows remote attackers to bypass policy restrictions by downloading the launch.ica file and changing the ClientName, enabling partial impacts to confidentiality, integrity, and availability as per the CVSSv2 vector...

7.5CVSS7.1AI score0.02067EPSS
SaveExploits1References7Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/10/04 12:00 a.m.•6 views

CVE-2005-3134: Undefined Security Weakness

Citrix Metaframe Presentation Server 3.0 and 4.0 allows remote attackers to bypass policy restrictions by downloading the launch.ica file and changing the client device name ClientName...

7.5CVSS5.9AI score0.02067EPSS
SaveExploits1References1
securityvulns
securityvulns
•added 2005/10/01 12:00 a.m.•39 views

Citrix Metaframe Presentation Server bypassing policies

DESCRIPTION: ============ Vulnerability in Presentation Server allow to user bypass citrix policy which is applied to client name. SOFTWARE: Citrix Metaframe Presentation Server 3.0 / 4.0 ========= INFO: ===== Citrix Presentation Server policy is used for admins to restrict the user environment a...

0.2AI score
SaveExploits0
securityvulns
securityvulns
•added 2005/10/01 12:00 a.m.•27 views

Citrix Metaframe Presentation Server protection bypass

Restrictions policy is based upon paramters controlled by client...

3.7AI score
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2005/05/10 4:00 a.m.•40 views

CVE-2003-1157

Cross-site scripting XSS vulnerability in login.asp in Citrix MetaFrame XP Server 1.0 allows remote attackers to inject arbitrary web script or HTML via the NFuseMessage parameter...

5.7AI score0.03885EPSS
SaveExploits2References7
Cvelist
Cvelist
•added 2005/05/10 4:00 a.m.•34 views

CVE-2004-1902

The Citrix MetaFrame Password Manager 2.0, when a central credential store is not configured, does not encrypt passwords entered immediately after executing the First Time User Wizards, which allows local users to gain sensitive information...

6.4AI score0.00356EPSS
SaveExploits0References7
CVE
CVE
•added 2005/05/10 4:00 a.m.•70 views

CVE-2004-1902

CVE-2004-1902 affects Citrix MetaFrame Password Manager 2.0. When a central credential store is not configured, passwords entered immediately after the First Time User Wizards are not encrypted, allowing local users to access sensitive information. Impact: partial confidentiality loss for credent...

2.1CVSS6.8AI score0.00356EPSS
SaveExploits0References7Affected Software1
CVE
CVE
•added 2005/05/10 4:00 a.m.•113 views

CVE-2003-1157

CVE-2003-1157 describes a cross-site scripting (XSS) vulnerability in the Citrix MetaFrame XP Server 1.0 Web Interface component, affecting the login.asp handling of the NFuse_Message parameter. Attackers can inject arbitrary web script or HTML via this parameter, potentially impacting users' bro...

4.3CVSS5.7AI score0.03885EPSS
SaveExploits2References7Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/05/10 12:00 a.m.•5 views

CVE-2003-1157: Undefined Security Weakness

Cross-site scripting XSS vulnerability in login.asp in Citrix MetaFrame XP Server 1.0 allows remote attackers to inject arbitrary web script or HTML via the NFuseMessage parameter...

4.3CVSS6AI score0.03885EPSS
SaveExploits2References1
Rows per page
Query Builder