603 matches found
Input validation
Pulse Secure Virtual Traffic Manager 9.9 versions prior to 9.9r2 and 10.4r1 allow a remote authenticated user to obtain sensitive historical activity information by leveraging incorrect permission validation...
CVE-2018-20307
Pulse Secure Virtual Traffic Manager 9.9 versions prior to 9.9r2 and 10.4r1 allow a remote authenticated user to obtain sensitive historical activity information by leveraging incorrect permission validation...
CVE-2018-20307
Pulse Secure Virtual Traffic Manager 9.9 versions prior to 9.9r2 and 10.4r1 allow a remote authenticated user to obtain sensitive historical activity information by leveraging incorrect permission validation...
CVE-2018-20306
A stored cross-site scripting XSS vulnerability in the web administration user interface of Pulse Secure Virtual Traffic Manager may allow a remote authenticated attacker to inject web script or HTML via a crafted website and steal sensitive data and credentials. Affected releases are Pulse Secur...
Cross site scripting
A stored cross-site scripting XSS vulnerability in the web administration user interface of Pulse Secure Virtual Traffic Manager may allow a remote authenticated attacker to inject web script or HTML via a crafted website and steal sensitive data and credentials. Affected releases are Pulse Secur...
CVE-2018-20306
A stored cross-site scripting XSS vulnerability in the web administration user interface of Pulse Secure Virtual Traffic Manager may allow a remote authenticated attacker to inject web script or HTML via a crafted website and steal sensitive data and credentials. Affected releases are Pulse Secur...
CVE-2018-20307
Pulse Secure Virtual Traffic Manager 9.9 versions prior to 9.9r2 and 10.4r1 allow a remote authenticated user to obtain sensitive historical activity information by leveraging incorrect permission validation...
CVE-2018-20307
CVE-2018-20307 affects Pulse Secure Virtual Traffic Manager (vTM) . Affected releases include vTM 9.9 prior to 9.9r2 , 10.4r1 , and 17.2r1 . The root cause is incorrect permission validation, which could allow a remote authenticated user to obtain sensitive historical activity information. Per pu...
CVE-2018-20306
CVE-2018-20306 is a stored XSS vulnerability in the web administration UI of Pulse Secure Virtual Traffic Manager (vTM). Affected: vTM 9.9 before 9.9r2, 10.4r1, and 17.2r1 (per multiple sources). The issue can let an authenticated remote attacker inject script/HTML via a crafted website to steal ...
CVE-2018-20306
A stored cross-site scripting XSS vulnerability in the web administration user interface of Pulse Secure Virtual Traffic Manager may allow a remote authenticated attacker to inject web script or HTML via a crafted website and steal sensitive data and credentials. Affected releases are Pulse Secur...
CVE-2018-20306: Improper Neutralization of Input During Web Page Generation
A stored cross-site scripting XSS vulnerability in the web administration user interface of Pulse Secure Virtual Traffic Manager may allow a remote authenticated attacker to inject web script or HTML via a crafted website and steal sensitive data and credentials. Affected releases are Pulse Secur...
PT-2018-15305
Name of the Vulnerable Software and Affected Versions Pulse Secure Virtual Traffic Manager versions prior to 9.9r2 Pulse Secure Virtual Traffic Manager version 10.4r1 Description A stored cross-site scripting XSS issue in the web administration user interface may allow a remote authenticated...
CVE-2018-20307: Exposure of Sensitive Information to an Unauthorized Actor
Pulse Secure Virtual Traffic Manager 9.9 versions prior to 9.9r2 and 10.4r1 allow a remote authenticated user to obtain sensitive historical activity information by leveraging incorrect permission validation...
PT-2018-15306
Name of the Vulnerable Software and Affected Versions Pulse Secure Virtual Traffic Manager versions prior to 9.9r2 Pulse Secure Virtual Traffic Manager version 10.4r1 Description The issue allows a remote authenticated user to obtain sensitive historical activity information due to incorrect...
Pulse Secure Desktop Client for Windows Arbitrary File Write Vulnerability
Pulse Secure Desktop Client for Windows is a suite of Windows-based client software from Pulse Secure, Inc. for end devices that access Juniper Pulse Secure gateways. A security vulnerability exists in Pulse Secure Desktop Client versions 5.3 through R6.0 build 1769 for Windows-based platforms. T...
Design/Logic Flaw
Pulse Secure Desktop Client 5.3 up to and including R6.0 build 1769 on Windows has Insecure Permissions...
CVE-2018-11002
Pulse Secure Desktop Client 5.3 up to and including R6.0 build 1769 on Windows has Insecure Permissions...
CVE-2018-11002
Pulse Secure Desktop Client 5.3 up to and including R6.0 build 1769 on Windows has Insecure Permissions...
CVE-2018-11002
Pulse Secure Desktop Client for Windows (versions 5.3 through R6.0 build 1769) has an insecure-permissions flaw in its file handling that can enable writing to arbitrary files and overwrite contents. Root cause is insecure permissions within the affected component/file paths on Windows. No explic...