1581 matches found
PT-2020-6841 · Pulse · Pulse Connect Secure
Name of the Vulnerable Software and Affected Versions: Pulse Connect Secure versions prior to 9.1R8 Description: A code injection vulnerability exists in the admin web interface of Pulse Connect Secure, allowing an attacker to craft a URI and perform arbitrary code execution. The vulnerability is...
CVE-2020-8217: Improper Neutralization of Input During Web Page Generation
A cross site scripting XSS vulnerability in Pulse Connect Secure 9.1R8 allowed attackers to exploit in the URL used for Citrix ICA...
CVE-2020-8221: Improper Limitation of a Pathname to a Restricted Directory
A path traversal vulnerability exists in Pulse Connect Secure 9.1R8 which allows an authenticated attacker to read arbitrary files via the administrator web interface...
CVE-2020-8218: Improper Control of Generation of Code
A code injection vulnerability exists in Pulse Connect Secure 9.1R8 that allows an attacker to crafted a URI to perform an arbitrary code execution via the admin web interface...
PT-2020-20031 · Pulse Secure · Pulse Connect Secure
Name of the Vulnerable Software and Affected Versions: Pulse Connect Secure versions prior to 9.1R8 Description: An insufficient permission check issue allows an attacker to change the password of a full administrator. Recommendations: For versions prior to 9.1R8, update to version 9.1R8 or later...
PT-2020-20034 · Pulse Secure · Pulse Connect Secure
Name of the Vulnerable Software and Affected Versions: Pulse Connect Secure versions prior to 9.1R8 Description: A path traversal issue exists that allows an authenticated attacker, via the administrator web interface, to read arbitrary files through Meeting. Recommendations: For versions prior t...
PT-2020-20032 · Pulse Secure · Pulse Connect Secure
Name of the Vulnerable Software and Affected Versions: Pulse Connect Secure versions prior to 9.1R8 Description: A denial of service issue exists that allows an authenticated attacker to perform command injection via the administrator web interface, which can cause a denial of service...
CVE-2020-8204: Improper Neutralization of Input During Web Page Generation
A cross site scripting XSS vulnerability exists in Pulse Connect Secure 9.1R5 on the PSAL Page...
CVE-2020-8216: Exposure of Sensitive Information to an Unauthorized Actor
An information disclosure vulnerability in meeting of Pulse Connect Secure 9.1R8 allowed an authenticated end-users to find meeting details, if they know the Meeting ID...
Pulse Secure Pulse Connect Secure and Pulse Policy Secure Path Traversal Vulnerabilities
Pulse Secure Pulse Connect Secure a.k.a. PCS, formerly known as Juniper Junos Pulse and Pulse Policy Secure are both products of Pulse Secure, Inc.Pulse Connect Secure is an SSL VPN solution. Pulse Connect Secure is an SSL VPN solution. Pulse Policy Secure is a network access control solution...
Pulse Secure Pulse Connect Secure and Pulse Policy Secure Insufficient Privilege Checking Vulnerability
Pulse Secure Pulse Connect Secure a.k.a. PCS, formerly known as Juniper Junos Pulse and Pulse Policy Secure are both products of Pulse Secure, Inc.Pulse Connect Secure is an SSL VPN solution. Pulse Connect Secure is an SSL VPN solution. Pulse Policy Secure is a network access control solution. A...
CVE-2020-8218
A code injection vulnerability exists in Pulse Connect Secure 9.1R8 that allows an attacker to crafted a URI to perform an arbitrary code execution via the admin web interface. Recent assessments: wvu-r7 at August 27, 2020 3:29pm UTC reported: Researchers wrote this one up at...
PT-2020-6955 · Citrix +1 · Citrix Ica +1
Name of the Vulnerable Software and Affected Versions: Pulse Connect Secure versions prior to 9.1R8 Description: A cross-site scripting XSS issue exists due to insufficient cleaning of user-provided data transmitted through the URL used for Citrix ICA. This allows a remote attacker to conduct an...
PT-2020-20033 · Pulse Secure · Pulse Connect Secure
Name of the Vulnerable Software and Affected Versions: Pulse Connect Secure versions prior to 9.1R8 Description: A path traversal issue exists, allowing an authenticated attacker to read arbitrary files via the administrator web interface. Recommendations: For versions prior to 9.1R8, update to...
PT-2020-20023 · Pulse Secure · Pulse Connect Secure
Name of the Vulnerable Software and Affected Versions: Pulse Connect Secure versions prior to 9.1R5 Description: A cross site scripting XSS issue exists on the PSAL Page. Recommendations: For versions prior to 9.1R5, update to version 9.1R5 or later to resolve the issue...
CVE-2020-8219: Improper Handling of Insufficient Permissions or Privileges
An insufficient permission check vulnerability exists in Pulse Connect Secure 9.1R8 that allows an attacker to change the password of a full administrator...
PT-2020-20030 · Pulse Secure · Pulse Connect Secure
Name of the Vulnerable Software and Affected Versions: Pulse Connect Secure versions prior to 9.1R8 Description: An information disclosure issue allows authenticated end-users to find meeting details if they know the Meeting ID. Recommendations: For versions prior to 9.1R8, update to version 9.1R...
CVE-2020-8220: Uncontrolled Resource Consumption
A denial of service vulnerability exists in Pulse Connect Secure 9.1R8 that allows an authenticated attacker to perform command injection via the administrator web which can cause DOS...
Pulse Secure Pulse Connect Secure and Pulse Policy Secure Cross-Site Scripting Vulnerabilities
Pulse Secure Pulse Connect Secure a.k.a. PCS, formerly known as Juniper Junos Pulse and Pulse Policy Secure are both products of Pulse Secure, Inc.Pulse Connect Secure is an SSL VPN solution. Pulse Connect Secure is an SSL VPN solution. Pulse Policy Secure is a network access control solution...
