Hardcoded credentials

Unspecified vulnerability in Citrix XenServer 6.2 Service Pack 1 and earlier allows attackers to cause a denial of service and obtain sensitive information by modifying the guest virtual hard disk VHD...

CVE-2014-4947

CVE-2014-4947 describes a buffer overflow in the HVM graphics console support of Citrix XenServer, affecting XenServer 6.2 Service Pack 1 and earlier. The connected sources corroborate that the issue concerns the HVM graphics console, with the CVE clearly stated as a buffer overflow and with unsp...

CVE-2014-4947

Buffer overflow in the HVM graphics console support in Citrix XenServer 6.2 Service Pack 1 and earlier has unspecified impact and attack vectors...

CVE-2014-4948

CVE-2014-4948 affects Citrix XenServer 6.2 Service Pack 1 and earlier. The connected sources corroborate that this entry involves a vulnerability in XenServer that could lead to a denial of service and information disclosure by modifying the guest virtual hard disk (VHD). The Nessus/OpenVAS entri...

CVE-2014-4948

Unspecified vulnerability in Citrix XenServer 6.2 Service Pack 1 and earlier allows attackers to cause a denial of service and obtain sensitive information by modifying the guest virtual hard disk VHD...

CVE-2014-4948: Undefined Security Weakness

Unspecified vulnerability in Citrix XenServer 6.2 Service Pack 1 and earlier allows attackers to cause a denial of service and obtain sensitive information by modifying the guest virtual hard disk VHD...

PT-2014-6226

Name of the Vulnerable Software and Affected Versions Citrix XenServer versions 6.2 Service Pack 1 and earlier Description A buffer overflow issue exists in the HVM graphics console support, which has an unspecified impact and attack vectors. Recommendations For Citrix XenServer versions 6.2...

CVE-2014-4947: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the HVM graphics console support in Citrix XenServer 6.2 Service Pack 1 and earlier has unspecified impact and attack vectors...

PT-2014-6227

Name of the Vulnerable Software and Affected Versions Citrix XenServer versions 6.2 Service Pack 1 and earlier Description The issue allows attackers to cause a denial of service and obtain sensitive information by modifying the guest virtual hard disk VHD. Recommendations For versions 6.2 Servic...

Citrix NetScaler security vulnerabilities

Information leak, XSS...

SEC Consult SA-20140716-2 :: Multiple vulnerabilities in Citrix NetScaler Application Delivery Controller and Citrix NetScaler Gateway

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SEC Consult Vulnerability Lab Security Advisory 20140716-2 ======================================================================= title: Multiple vulnerabilities product: Citrix NetScaler Application Delivery Controller Citrix NetScaler Gateway...

Citrix Netscaler 9.3-62.4 Disclosure / Cross Site Scripting Vulnerabilities

Exploit for linux platform in category web applications product: Citrix NetScaler Application Delivery Controller Citrix NetScaler Gateway vulnerable version: =9.3-62.4 =10.1-126.12 CVE: CVE-2014-4346, CVE-2014-4347 impact: High homepage: http://www.citrix.com found: 2014-01-05 by: Stefan Viehböc...

Citrix XenDesktop 4.x / 5.x / 7.x Unauthorized Access (CTX139591)

The remote host is running a version of Citrix XenDesktop that is affected by an unauthorized access vulnerability. A flaw exists that could result in a user gaining unauthorized access to another user's desktop. Note that this vulnerability only affects configurations when pooled random desktop...

CVE-2014-4347

Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway formerly Access Gateway Enterprise Edition before 9.3-62.4 and 10.x before 10.1-126.12 allows attackers to obtain sensitive information via vectors related to a cookie...

CVE-2014-4346

Cross-site scripting XSS vulnerability in administration user interface in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway formerly Access Gateway Enterprise Edition 10.1 before 10.1-126.12 allows remote attackers to inject arbitrary web script or HTML via unspecified...

Information disclosure

Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway formerly Access Gateway Enterprise Edition before 9.3-62.4 and 10.x before 10.1-126.12 allows attackers to obtain sensitive information via vectors related to a cookie...

Cross site scripting

Cross-site scripting XSS vulnerability in administration user interface in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway formerly Access Gateway Enterprise Edition 10.1 before 10.1-126.12 allows remote attackers to inject arbitrary web script or HTML via unspecified...

CVE-2014-4346

Cross-site scripting XSS vulnerability in administration user interface in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway formerly Access Gateway Enterprise Edition 10.1 before 10.1-126.12 allows remote attackers to inject arbitrary web script or HTML via unspecified...

CVE-2014-4347

Citrix NetScaler ADC and NetScaler Gateway (formerly Access Gateway) are affected by CVE-2014-4347. The vulnerability allows attackers to obtain sensitive information via cookie-related vectors on versions before 9.3-62.4 and 10.x before 10.1-126.12. Technical detail from SEC Consult and corrobor...

CVE-2014-4347

Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway formerly Access Gateway Enterprise Edition before 9.3-62.4 and 10.x before 10.1-126.12 allows attackers to obtain sensitive information via vectors related to a cookie...