csd-abpi.org.br Cross Site Scripting vulnerability

Security Researcher haxmov Helped patch 543 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting csd-abpi.org.br website and its users. Following coordinated...

wallkillcsd.k12.ny.us XSS vulnerability

Vulnerable URL: http://www.wallkillcsd.k12.ny.us/education/components/sectionlist/default.php?sectiondetailid=103618=13'"78& Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1380477 VIP website status:| No...

csd-electronics.de XSS vulnerability

Vulnerable URL: http://www.csd-electronics.de/200/cgi-bin/shop.dll?SESSIONID=0481898349244148=2 Details: Description| Value ---|--- Patched:| Yes, at 30.11.2015 Latest check for patch:| 30.11.2015 21:29 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5779643...

csd-electronics.de XSS vulnerability

Vulnerable URL: http://www.csd-electronics.de/200/cgi-bin/shop.dll?SESSIONID=0690910909790546=2 Details: Description| Value ---|--- Patched:| Yes, at 08.11.2015 Latest check for patch:| 08.11.2015 10:48 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4049590...

CVE-2009-5008

Cisco Secure Desktop (CSD) together with an AnyConnect SSL VPN server is affected by CVE-2009-5008, where the component does not perform verification correctly, enabling local users to bypass policy restrictions via a modified executable file. Reports across multiple sources (NVD/Red Hat/CVE entr...

CVE-2010-0589

CVE-2010-0589 affects Cisco Secure Desktop prior to version 3.5.841. The vulnerability lies in the Web Install ActiveX control (CSDWebInstaller) failing to properly verify signatures of downloaded executables, enabling a remote attacker to force a user to download and execute arbitrary files via ...

CVE-2006-5808

The CVE covers Cisco Secure Desktop (CSD) prior to version 3.1.1.45, where insecure default permissions for the CSD directory and its parent (full control for all users) allow local users to escalate privileges by replacing CSD executables. Affected component: CSD installation directories; root c...

CVE-2006-5807

CVE-2006-5807 affects Cisco Secure Desktop (CSD) prior to version 3.1.1.45. The issue allows local users to escape the secure desktop environment by launching certain applications that switch to the default desktop, referred to as System Policy Evasion. The vulnerability is local in scope with pa...

CVE-2006-5393

Cisco Secure Desktop (CSD) is affected by CVE-2006-5393 due to the ClearPageFileAtShutdown (CCE-Winv2.0-407) registry value not being required to equal 1. The result is a local disclosure risk where a local user could read memory pages written during another user’s SSL VPN session. Affected softw...

CVE-2006-5394

The CVE-2006-5394 issue affects Cisco Secure Desktop (CSD) where the default configuration leaves the "Disable printing" option unchecked in Secure Desktop Settings. This could allow local users to read data sent to a printer during another user’s SSL VPN session. The vulnerability originates fro...