CVE-2021-47271

In the Linux kernel, the following vulnerability has been resolved: usb: cdnsp: Fix deadlock issue in cdnspthreadirqhandler Patch fixes the following critical issue caused by deadlock which has been detected during testing NCM class: smp: csd: Detected non-responsive CSD lock 1 on CPU0 smp: csd:...

UBUNTU-CVE-2021-47271

In the Linux kernel, the following vulnerability has been resolved: usb: cdnsp: Fix deadlock issue in cdnspthreadirqhandler Patch fixes the following critical issue caused by deadlock which has been detected during testing NCM class: smp: csd: Detected non-responsive CSD lock 1 on CPU0 smp: csd:...

csd-abpi.org.br Cross Site Scripting vulnerability

Security Researcher haxmov Helped patch 543 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting csd-abpi.org.br website and its users. Following coordinated...

csd-abpi.org.br Cross Site Scripting vulnerability

Security Researcher haxmov Helped patch 543 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting csd-abpi.org.br website and its users. Following coordinated...

wallkillcsd.k12.ny.us XSS vulnerability

Vulnerable URL: http://www.wallkillcsd.k12.ny.us/education/components/sectionlist/default.php?sectiondetailid=103618=13'"78& Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1380477 VIP website status:| No...

PT-2017-19431

Name of the Vulnerable Software and Affected Versions csd-datetime-setting affected versions not specified Description The issue is related to the SetDate DBUS function in csd-datetime-setting, which does not check for polkit authorization of the caller, unlike the SetTime function. Recommendatio...

csd-electronics.de XSS vulnerability

Vulnerable URL: http://www.csd-electronics.de/200/cgi-bin/shop.dll?SESSIONID=0481898349244148=2 Details: Description| Value ---|--- Patched:| Yes, at 30.11.2015 Latest check for patch:| 30.11.2015 21:29 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5779643...

csd-electronics.de XSS vulnerability

Vulnerable URL: http://www.csd-electronics.de/200/cgi-bin/shop.dll?SESSIONID=0690910909790546=2 Details: Description| Value ---|--- Patched:| Yes, at 08.11.2015 Latest check for patch:| 08.11.2015 10:48 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4049590...

CVE-2009-5008

Cisco Secure Desktop (CSD) together with an AnyConnect SSL VPN server is affected by CVE-2009-5008, where the component does not perform verification correctly, enabling local users to bypass policy restrictions via a modified executable file. Reports across multiple sources (NVD/Red Hat/CVE entr...

CVE-2010-0589

CVE-2010-0589 affects Cisco Secure Desktop prior to version 3.5.841. The vulnerability lies in the Web Install ActiveX control (CSDWebInstaller) failing to properly verify signatures of downloaded executables, enabling a remote attacker to force a user to download and execute arbitrary files via ...

CVE-2006-5808

The CVE covers Cisco Secure Desktop (CSD) prior to version 3.1.1.45, where insecure default permissions for the CSD directory and its parent (full control for all users) allow local users to escalate privileges by replacing CSD executables. Affected component: CSD installation directories; root c...

CVE-2006-5807

CVE-2006-5807 affects Cisco Secure Desktop (CSD) prior to version 3.1.1.45. The issue allows local users to escape the secure desktop environment by launching certain applications that switch to the default desktop, referred to as System Policy Evasion. The vulnerability is local in scope with pa...

CVE-2006-5808: Undefined Security Weakness

The installation of Cisco Secure Desktop CSD before 3.1.1.45 uses insecure default permissions all users full control for the CSD directory and its parent directory, which allow local users to gain privileges by replacing CSD executables, aka "Local Privilege Escalation"...

CVE-2006-5393

Cisco Secure Desktop (CSD) is vulnerable to an information disclosure issue because it does not require the ClearPageFileAtShutdown (CCE-Winv2.0-407) registry value to equal 1. This flaw may allow local users to read specific memory pages that were written during another user's SSL VPN session . ...

CVE-2006-5394

The CVE-2006-5394 issue affects Cisco Secure Desktop (CSD) where the default configuration leaves the "Disable printing" option unchecked in Secure Desktop Settings. This could allow local users to read data sent to a printer during another user’s SSL VPN session. The vulnerability originates fro...