CVE-2018-15726: Improper Neutralization of Special Elements used in an OS Command

The Pulse Secure Desktop macOS 5.3RX before 5.3R5 and 9.0R1 has a Privilege Escalation Vulnerability...

PT-2018-13254

Name of the Vulnerable Software and Affected Versions Pulse Secure Desktop macOS affected versions not specified Description The issue is related to a Privilege Escalation problem. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

PT-2018-13174

Name of the Vulnerable Software and Affected Versions Pulse Secure Desktop macOS versions 5.3RX before 5.3R5 Pulse Secure Desktop macOS version 9.0R1 Description The issue is related to a Privilege Escalation problem. Recommendations For Pulse Secure Desktop macOS versions 5.3RX before 5.3R5,...

PT-2018-13179

Name of the Vulnerable Software and Affected Versions Pulse Secure Desktop macOS versions 5.3RX through 5.3R4 Pulse Secure Desktop macOS version 9.0R1 Description The issue is related to a Format String Vulnerability. Recommendations For Pulse Secure Desktop macOS versions 5.3RX through 5.3R4,...

CVE-2018-15749: Use of Externally-Controlled Format String

The Pulse Secure Desktop macOS 5.3RX before 5.3R5 and 9.0R1 has a Format String Vulnerability...

CVE-2018-15865: Undefined Security Weakness

The Pulse Secure Desktop macOS has a Privilege Escalation Vulnerability...

Microsoft Windows: User Account Control: Switch to the secure desktop when prompting for elevation

This policy setting determines whether the elevation request prompts on the interactive user desktop or on the secure desktop. The secure desktop presents the logon UI and restricts functionality and access to the system until the logon requirements are satisfied. The secure desktop...

Microsoft Windows: User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop

This security setting controls whether User Interface Accessibility UIAccess or UIA programs can automatically disable the secure desktop for elevation prompts that are used by a standard user. Note: This setting does not change the behavior of the UAC elevation prompt for administrators. C...

Pulse Secure Desktop Linux clients GUI component man-in-the-middle bypass security vulnerability

Pulse Secure Desktop Linux clients formerly known as Juniper Junos Pulse is Juniper Networks' suite of Linux-based client software for accessing endpoint devices on the Juniper Pulse Secure Gateway.The GUI component also known as PulseUI is one of the graphical user interfaces. The GUI component...

PT-2018-17514

Name of the Vulnerable Software and Affected Versions Pulse Secure Desktop Linux clients versions prior to PULSE5.2R9.2 Pulse Secure Desktop Linux clients versions 5.3.x prior to PULSE5.3R4.2 Description The issue concerns the GUI component, also known as PulseUI, which does not perform strict SS...

CVE-2018-6374: Improper Certificate Validation

The GUI component aka PulseUI in Pulse Secure Desktop Linux clients before PULSE5.2R9.2 and 5.3.x before PULSE5.3R4.2 does not perform strict SSL Certificate Validation. This can lead to the manipulation of the Pulse Connection set...

CVE-2016-2408

Pulse Secure Desktop before 5.2R2 and Pulse Secure Installer Service before 8.2R2 and below for Windows allow restricted users to gain privileges via unspecified vectors...

CVE-2016-2408: Undefined Security Weakness

Pulse Secure Desktop before 5.2R2 and Pulse Secure Installer Service before 8.2R2 and below for Windows allow restricted users to gain privileges via unspecified vectors...

PT-2016-5159

Name of the Vulnerable Software and Affected Versions Pulse Secure Desktop versions prior to 5.2R2 Pulse Secure Installer Service versions prior to 8.2R2 Description The issue allows restricted users to gain privileges via unspecified vectors. Recommendations For Pulse Secure Desktop versions pri...

Pulse Secure Desktop Client Elevation of Privilege Vulnerability

Pulse Secure Desktop Client provides a secure and trusted connection for end devices accessing the Pulse Secure gateway. The system service installed by Pulse Secure Desktop Client has a security vulnerability in the access control settings. By emulating a trusted process communicating with this...

CVE-2016-0501

Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5.2 allows remote attackers to affect availability via vectors related to SGD Core...

Oracle Virtualization Secure Global Desktop Component Vulnerability

Oracle Secure Global Desktop SGD is a secure remote access solution for accessing enterprise-class applications and desktop environments running on Microsoft Windows, Linux, Solaris and mainframe hosted in the cloud.Oracle Secure Global Desktop works on a variety of popular client devices,...

Cisco Secure Desktop (CSD) Arbitrary Command Execution Vulnerability

Cisco Secure Desktop CSD is a secure desktop product from Cisco that reduces the risk of remote users logging off and cookies, browser history, temporary files, and downloads being left on the system after the SSL VPN session times out with encryption. An arbitrary command execution vulnerability...

Command injection

A certain Cisco JAR file, as distributed in Cache Cleaner in Cisco Secure Desktop CSD, allows remote attackers to execute arbitrary commands via a crafted web site, aka Bug ID CSCup83001...

CVE-2015-0691

A certain Cisco JAR file, as distributed in Cache Cleaner in Cisco Secure Desktop CSD, allows remote attackers to execute arbitrary commands via a crafted web site, aka Bug ID CSCup83001...