1450 matches found
CVE-2020-8250: Undefined Security Weakness
A vulnerability in the Pulse Secure Desktop Client Linux 9.1R9 could allow local attackers to escalate privilege...
PT-2020-20062
Name of the Vulnerable Software and Affected Versions Pulse Secure Desktop Client versions prior to 9.1R9 Description A vulnerability exists that allows for Remote Code Execution RCE if users connect to a malicious server. This issue is specific to the Windows Pulse Desktop Client. Recommendation...
PT-2020-20059
Name of the Vulnerable Software and Affected Versions Pulse Secure Desktop Client Linux versions prior to 9.1R9 Description A local attacker could potentially exploit this issue to escalate privileges. Recommendations For versions prior to 9.1R9, update to version 9.1R9 or later to resolve the...
PT-2020-20057
Name of the Vulnerable Software and Affected Versions Pulse Secure Desktop Client Linux versions prior to 9.1R9 Description A local attacker could potentially exploit a vulnerability to escalate privileges. Recommendations For versions prior to 9.1R9, update to version 9.1R9 or later to resolve t...
CVE-2020-8254: Relative Path Traversal
A vulnerability in the Pulse Secure Desktop Client 9.1R9 has Remote Code Execution RCE if users can be convinced to connect to a malicious server. This vulnerability only affects Windows PDC.To improve the security of connections between Pulse clients and Pulse Connect Secure, see below...
CVE-2020-8248: Undefined Security Weakness
A vulnerability in the Pulse Secure Desktop Client Linux 9.1R9 could allow local attackers to escalate privilege...
CVE-2020-8956
Pulse Secure Desktop Client 9.0Rx before 9.0R5 and 9.1Rx before 9.1R4 on Windows reveals users' passwords if Save Settings is enabled...
CVE-2020-8956
Pulse Secure Desktop Client 9.0Rx before 9.0R5 and 9.1Rx before 9.1R4 on Windows reveals users' passwords if Save Settings is enabled...
Code injection
Pulse Secure Desktop Client 9.0Rx before 9.0R5 and 9.1Rx before 9.1R4 on Windows reveals users' passwords if Save Settings is enabled...
CVE-2020-8956
Summary (CVE-2020-8956): Pulse Secure Desktop Client on Windows (9.0Rx before 9.0R5 and 9.1Rx before 9.1R4; affected root cause) exposes saved passwords when the client’s Save Settings option is enabled. The issue is an information-disclosure vulnerability affecting Windows PDC. Fixed versions in...
PT-2020-20394
Name of the Vulnerable Software and Affected Versions Pulse Secure Desktop Client versions 9.0Rx through 9.0R4 Pulse Secure Desktop Client versions 9.1Rx through 9.1R3 Description The issue reveals users' passwords if the Save Settings feature is enabled. Recommendations For Pulse Secure Desktop...
CVE-2020-8956: Weak Password Requirements
Pulse Secure Desktop Client 9.0Rx before 9.0R5 and 9.1Rx before 9.1R4 on Windows reveals users' passwords if Save Settings is enabled...
PT-2020-20050
Name of the Vulnerable Software and Affected Versions Pulse Secure Desktop Client versions prior to 9.1R9 Description The issue concerns a client registry privilege escalation attack. It requires a server-side upgrade due to the Standalone Host Checker Client Windows and Windows PDC...
PT-2020-20052 · Pulse Secure · Pulse Secure Desktop Client
Name of the Vulnerable Software and Affected Versions: Pulse Secure Desktop Client versions prior to 9.1R9 Description: A vulnerability could allow an attacker to perform a Man-in-the-Middle MITM attack if end users are convinced to connect to a malicious server. Recommendations: For versions pri...
Nextcloud Desktop Client Sensitive Information Plaintext Storage Vulnerability
Nextcloud is a suite of open source, self-hosted file synchronization and sharing communication applications from Nextcloud Germany.Nextcloud Desktop Client is a desktop client application for Nextcloud. A vulnerability exists in Nextcloud Desktop Client version 2.6.4 in which sensitive informati...
CVE-2020-8225
A cleartext storage of sensitive information in Nextcloud Desktop Client 2.6.4 gave away information about used proxies and their authentication credentials...
CVE-2020-8225
A cleartext storage of sensitive information in Nextcloud Desktop Client 2.6.4 gave away information about used proxies and their authentication credentials...
DEBIAN-CVE-2020-8225
A cleartext storage of sensitive information in Nextcloud Desktop Client 2.6.4 gave away information about used proxies and their authentication credentials...