Improper validation of certificates when using self-signed certificates 2.0.1

The ownCloud Desktop Client was vulnerable against MITM attacks until version 2.0.0 in combination with self-signed certificates. To be exploitable the following conditions have to be met:...

[SECURITY] [DSA 3363-1] owncloud-client security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3363-1 [email protected] https://www.debian.org/security/ Luciano Bello September 20, 2015 https://www.debian.org/security/faq -...

DSA-3363-1 owncloud-client - security update

Bulletin has no description...

ownCloud Desktop Client Security Bypass Vulnerability

ownCloud is a free and open source personal cloud storage solution created by German KDE developer Frank Karlitschek. The solution offers file management, music storage, calendars, and more. A security vulnerability exists in ownCloud Desktop Client due to the application failing to properly...

Updated owncloud-client package fixes security vulnerability

ownCloud Desktop Client before 1.8.2 was vulnerable against MITM attacks when used in combination with self-signed certificates CVE-2015-4456. The owncloud-client package has been updated to version 1.8.3, which fixes this issue as well as several other bugs...

Desktop Client: Improper validation of certificates when using self-signed certificates

The ownCloud Desktop Client was vulnerable against MITM attacks until version 1.8.2 in combination with self-signed certificates. To be exploitable the following conditions have to be met: The connection to the remote ownCloud server must be secured using a self-signed certificate which the user...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the XML-RPC API in the Desktop Client in OpenVPN Access Server 1.5.6 and earlier allow remote attackers to hijack the authentication of administrators for requests that 1 disconnecting established VPN sessions, 2 connect to arbitrary VPN...

CVE-2014-9104

CVE-2014-9104 covers CSRF vulnerabilities in the XML-RPC API of the OpenVPN Access Server Desktop Client (versions up to 1.5.6). The issues allow an attacker to hijack administrator authentication and perform actions via crafted API requests, including disconnecting VPN sessions, connecting to ar...

Ivanti Secure Access Client / Pulse Secure Desktop Client Detection

Binary data juniperpulseclientinstalled.nbin...

Centrinity FirstClass Desktop Client 7.1 - Local Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10074/info It has been reported that FirstClass Desktop Client may be prone to a local buffer overflow vulnerability that could allow attackers to execute arbitrary code on a vulnerable system that may lead to elevated...

Cisco WebEx One-Click Detection

The remote host has Cisco WebEx One-Click installed. WebEx One-Click is a desktop client for WebEx's meeting software. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid69274; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/02/06";...

MS13-029: Vulnerability in Remote Desktop Client Could Allow Remote Code Execution (2828223)

The remote host contains a version of the Remote Desktop ActiveX control that is affected by a remote code execution vulnerability when attempting to access an object in memory that has been deleted. If an attacker can trick a user on the affected system into opening a specially crafted webpage,...

MS13-029: Vulnerability in Remote Desktop Client could allow remote code execution: April 9, 2013

Resolves a vulnerability in Windows Remote Desktop Client that could allow remote code execution if a user views a specially crafted webpage.INTRODUCTIONMicrosoft has released security bulletin MS13-029. To view the complete security bulletin, go to one of the following Microsoft websites: Home...

ScrumWorks Pro privilege escalation vulnerability

Overview ScrumWorks Pro versions prior to ScrumWorks Pro 6.0 contain a privilege escalation vulnerability. Description ScrumWorks Pro versions prior to ScrumWorks Pro 6.0 contain a privilege escalation vulnerability where a malicious user can escalate the privileges of their ScrumWorks Pro accoun...

Minitube: Insecure temporary file usage

Background Minitube is a Qt4 YouTube desktop client. Description Tomáš Pružina reported that Minitube does not handle temporary files securely. Impact A local attacker could perform symlink attacks to overwrite arbitrary files with the privileges of the user running the application. Workaround...

Evernote Desktop Client Detection

Binary data 6339.prm...

Microsoft Remote Desktop Client Remote Code Execution Vulnerability (2508062)

This host is missing a critical security update according to Microsoft Bulletin MS11-017. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Remote Desktop Client Remote Code Execution Vulnerability (2508062)

This host is missing a critical security update according to Microsoft Bulletin MS11-017. OpenVAS Vulnerability Test $Id: secpodms11-017.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft Remote Desktop Client Remote Code Execution Vulnerability 2508062 Authors: Veerendra GG Copyright: Copyright c 20...

MS11-017: Description of the security update for Remote Desktop client 7.0: March 8, 2011

None None...

MS11-017: Vulnerabilities in Remote Desktop Connection Could Allow Remote Code Execution (2508062)

The remote host contains a version of the Remote Desktop client that incorrectly restricts the path used for loading external libraries. If an attacker can trick a user on the affected system into opening a specially crafted .rdp file located in the same network directory as a specially crafted...