Pulse Secure Desktop Client Elevation of Privilege Vulnerability

Pulse Secure Desktop Client provides a secure and trusted connection for end devices accessing the Pulse Secure gateway. The system service installed by Pulse Secure Desktop Client has a security vulnerability in the access control settings. By emulating a trusted process communicating with this...

CVE-2016-0501

Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5.2 allows remote attackers to affect availability via vectors related to SGD Core...

Oracle Virtualization Secure Global Desktop Component Vulnerability

Oracle Secure Global Desktop SGD is a secure remote access solution for accessing enterprise-class applications and desktop environments running on Microsoft Windows, Linux, Solaris and mainframe hosted in the cloud.Oracle Secure Global Desktop works on a variety of popular client devices,...

Cisco Secure Desktop (CSD) Arbitrary Command Execution Vulnerability

Cisco Secure Desktop CSD is a secure desktop product from Cisco that reduces the risk of remote users logging off and cookies, browser history, temporary files, and downloads being left on the system after the SSL VPN session times out with encryption. An arbitrary command execution vulnerability...

Command injection

A certain Cisco JAR file, as distributed in Cache Cleaner in Cisco Secure Desktop CSD, allows remote attackers to execute arbitrary commands via a crafted web site, aka Bug ID CSCup83001...

CVE-2015-0691

A certain Cisco JAR file, as distributed in Cache Cleaner in Cisco Secure Desktop CSD, allows remote attackers to execute arbitrary commands via a crafted web site, aka Bug ID CSCup83001...

CVE-2015-0691

CVE-2015-0691 concerns Cisco Secure Desktop (CSD) Cache Cleaner, where a Cisco-signed Java Archive (JAR) in the Cache Cleaner component could allow an unauthenticated, remote attacker to execute arbitrary commands via a crafted web site (Bug CSCup83001). The issue: code execution via the signed J...

Cisco Secure Desktop code execution

Code execution in the signed jar library...

Cisco Secure Desktop Cache Cleaner Command Execution Vulnerability

A vulnerability in a Cisco-signed Java Archive JAR executable Cache Cleaner component of Cisco Secure Desktop could allow an unauthenticated, remote attacker to execute arbitrary commands on the client host where the affected .jar file is executed. Command execution would occur with the privilege...

Cisco Secure Desktop 3.x 'translation' Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/37960/info Cisco Secure Desktop is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the brows...

Cisco Host Scan Component of AnyConnect Secure Mobility and Secure Desktop Heap Overflow Vulnerability

The Cisco Host Scan component of Cisco AnyConnect Secure Mobility and Cisco Secure Desktop contains a heap overflow vulnerability that could allow a local, unprivileged user to elevate its privileges to those of SYSTEM. Cisco has confirmed the vulnerability in a security notice and software updat...

CVE-2012-4655

The WebLaunch feature in Cisco Secure Desktop before 3.6.6020 does not properly validate binaries that are received by the downloader process, which allows remote attackers to execute arbitrary code via vectors involving 1 ActiveX or 2 Java components, aka Bug IDs CSCtz76128 and CSCtz78204...

Design/Logic Flaw

The WebLaunch feature in Cisco Secure Desktop before 3.6.6020 does not properly validate binaries that are received by the downloader process, which allows remote attackers to execute arbitrary code via vectors involving 1 ActiveX or 2 Java components, aka Bug IDs CSCtz76128 and CSCtz78204...

CVE-2012-4655

The CVE-2012-4655 issue affects Cisco Secure Desktop’s WebLaunch downloader: binaries received by the downloader process are not properly validated, allowing remote arbitrary code execution via ActiveX or Java components. Affected product/versions include Cisco Secure Desktop before 3.6.6020 (per...

CVE-2012-4655

The WebLaunch feature in Cisco Secure Desktop before 3.6.6020 does not properly validate binaries that are received by the downloader process, which allows remote attackers to execute arbitrary code via vectors involving 1 ActiveX or 2 Java components, aka Bug IDs CSCtz76128 and CSCtz78204...

KLA10105 ACE vulnerability in CISCO Secure Desktop

Improperly downloaded binaries validation was found in Cisco Secure Desktop. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited from the network at a point related to WebLaunch. Original advisories Cisco bulletin Related products...

Cisco Products ActiveX Control Multiple Vulnerabilities

This host is installed with Cisco ASMC/Hostscan/Secure Desktop or Cisco ActiveX controls and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbciscoprdtsactivexmultvuln.nasl 7172 2017-09-18 11:07:34Z cfischer $ Cisco Products ActiveX Control Multiple Vulnerabilities Authors:...

CVE-2012-2495

The HostScan downloader implementation in Cisco AnyConnect Secure Mobility Client 3.x before 3.0 MR8 and Cisco Secure Desktop before 3.6.6020 does not compare the timestamp of offered software to the timestamp of installed software, which allows remote attackers to force a version downgrade by...

Cisco AnyConnect Secure Mobility Client and Secure Desktop WebLaunch Software Downgrade Vulnerability

Cisco AnyConnect Secure Mobility Client and Secure Desktop contain a vulnerability that could allow an unauthenticated, remote attacker to replace software components on a targeted system. The vulnerability exists because the affected software performs insufficient validation of user-supplied...

Cisco Secure Desktop CSDWebInstaller Code Execution (CVE-2011-0926)

Cisco Secure Desktop is multipurpose client-side VPN software that is used in a broader enterprise context. A remote code execution vulnerability exists in Cisco Secure Desktop. The vulnerability is due to a lack of validation of executables downloaded by the Secure Desktop Web CSDWebInstaller.oc...