CVE-2013-5649

Multiple cross-site scripting XSS vulnerabilities in Juniper Junos Pulse Secure Access Service aka SSL VPN with IVE OS 7.1 before 7.1r15, 7.2 before 7.2r11, 7.3 before 7.3r6, and 7.4 before 7.4r3 allow 1 remote attackers to inject arbitrary web script or HTML via vectors involving login pages, an...

CVE-2013-5649

CVE-2013-5649 affects Juniper Junos Pulse Secure Access Service (IVE OS) SSL VPN. Vulnerable components are web login and a support page where input validation is insufficient, allowing XSS by unauthenticated users and authenticated users. Impact includes arbitrary script execution in the browser...

Junos Pulse Secure Access Service (SSL VPN) Multiple XSS (JSA10554)

According to its self-reported version, the version of IVE OS running on the remote host has the following cross-site scripting vulnerabilities : - An unspecified cross-site scripting issue exists related to login pages. - A cross-site scripting vulnerability exists in the WWHSearchWordsText...

Barracuda SSL VPN 680Vx 2.3.3.193 - Script Injection Vulnerabilities

Exploit for hardware platform in category web applications Barracuda SSL VPN 680Vx 2.3.3.193 Multiple Script Injection Vulnerabilities Vendor: Barracuda Networks, Inc. Product web page: https://www.barracuda.com Affected version: 2.3.3.193, Model: V680 Summary: The Barracuda SSL VPN is a powerful...

Barracuda SSL VPN 680Vx 2.3.3.193 Multiple Script Injection Vulnerabilities

Summary The Barracuda SSL VPN is a powerful plug-and-play appliance purpose-built to provide remote users with secure access to internal network resources. Description Barracuda SSL VPN suffers from multiple stored XSS vulnerabilities when parsing user input to several parameters via POST method...

Barracuda SSL VPN 680Vx 2.3.3.193 - Multiple Script Injection Vulnerabilities

Barracuda SSL VPN 680Vx 2.3.3.193 Multiple Script Injection Vulnerabilities Vendor: Barracuda Networks, Inc. Product web page: https://www.barracuda.com Affected version: 2.3.3.193, Model: V680 Summary: The Barracuda SSL VPN is a powerful plug-and-play appliance purpose-built to provide remote...

Barracuda SSL VPN 680Vx 2.3.3.193 - Multiple Script Injection Vulnerabilities

Barracuda SSL VPN 680Vx 2.3.3.193 - Multiple Script Injection Vulnerabilities Barracuda SSL VPN 680Vx 2.3.3.193 Multiple Script Injection Vulnerabilities Vendor: Barracuda Networks, Inc. Product web page: https://www.barracuda.com Affected version: 2.3.3.193, Model: V680 Summary: The Barracuda...

CVE-2013-4669

FortiClient and FortiClient Lite proceed with an SSL session after determining that the server’s X.509 certificate is invalid, enabling MITM attackers to obtain sensitive information during password transmission. Affected versions include FortiClient on Windows (<4.3.5.472), Mac OS X (<4.0....

CVE-2013-3970

Juniper Junos Pulse Secure Access Service aka SSL VPN with IVE OS 7.0r2 through 7.0r8 and 7.1r1 through 7.1r5 and Junos Pulse Access Control Service aka UAC with UAC OS 4.1r1 through 4.1r5 include a test Certification Authority CA certificate in the Trusted Server CAs list, which makes it easier...

Design/Logic Flaw

Juniper Junos Pulse Secure Access Service aka SSL VPN with IVE OS 7.0r2 through 7.0r8 and 7.1r1 through 7.1r5 and Junos Pulse Access Control Service aka UAC with UAC OS 4.1r1 through 4.1r5 include a test Certification Authority CA certificate in the Trusted Server CAs list, which makes it easier...

CVE-2013-3970

Juniper Junos Pulse Secure Access Service aka SSL VPN with IVE OS 7.0r2 through 7.0r8 and 7.1r1 through 7.1r5 and Junos Pulse Access Control Service aka UAC with UAC OS 4.1r1 through 4.1r5 include a test Certification Authority CA certificate in the Trusted Server CAs list, which makes it easier...

CVE-2013-3970

CVE-2013-3970 affects Juniper Junos Pulse Secure Access Service (SSL VPN) with IVE OS 7.0r2–7.0r8 and 7.1r1–7.1r5, and Junos Pulse Access Control Service (UAC) with UAC OS 4.1r1–4.1r5. The issue involves inadvertently including an internal/test CA certificate in the Trusted Server CAs list, which...

Barracuda SSL VPN 680 2.2.2.203 Open Redirect

Title: ====== Barracuda SSL VPN 680 2.2.2.203 - Redirect Web Vulnerability Date: ===== 2013-05-25 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=755 Barracuda Networks Security ID BNSEC: 731 VL-ID: ===== 755 Common Vulnerability Scoring System:...

Barracuda SSL VPN 680 - returnTo Open Redirection

Barracuda SSL VPN 680 - returnTo Open Redirection source: https://www.securityfocus.com/bid/60172/info Barracuda SSL VPN 680 is prone to an open-redirection vulnerability. An attacker can leverage this issue by constructing a crafted URI and enticing a user to follow it. When an unsuspecting vict...

Barracuda SSL VPN 680 - 'returnTo' Open Redirection

source: https://www.securityfocus.com/bid/60172/info Barracuda SSL VPN 680 is prone to an open-redirection vulnerability. An attacker can leverage this issue by constructing a crafted URI and enticing a user to follow it. When an unsuspecting victim follows the link, they may be redirected to an...

Barracuda SSL VPN 680 2.2.2.203 - Redirect Vulnerability

Document Title: =============== Barracuda SSL VPN 680 2.2.2.203 - Redirect Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=755 Barracuda Networks Security ID BNSEC: 727 Release Date: ============= 2013-05-24 Vulnerability Laboratory ID VL-I...

Barracuda SSL VPN 680 2.2.2.203 - Redirect Vulnerability

Document Title: =============== Barracuda SSL VPN 680 2.2.2.203 - Redirect Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=755 Barracuda Networks Security ID BNSEC: 727 Release Date: ============= 2013-05-24 Vulnerability Laboratory ID VL-I...

Cisco ASA Clientless SSL VPN CIFS Denial of Service Vulnerability

A vulnerability in the implementation of the rewriter module of the Cisco Adaptive Security Appliance ASA Clientless SSL VPN could allow an authenticated, remote attacker to cause a reload of the affected system. The vulnerability is due to a race condition while accessing resources via the Commo...

Citrix Access Gateway User Web Interface Detection

The remote web server hosts the web interface for using Citrix Access Gateway, an SSL VPN appliance. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid65951; scriptversion"1.5"; scriptsetattributeattribute:"pluginmodificationdate", value:"2020/09/22";...

Citrix Access Gateway Administrative Web Interface Detection

The remote web server hosts the web interface for administering Citrix Access Gateway, an SSL VPN appliance. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid65949; scriptversion"1.4"; scriptsetattributeattribute:"pluginmodificationdate", value:"2020/09/22";...