CVE-2013-6944

CVE-2013-6944 is a cross-site scripting (XSS) vulnerability in the AAA TM vServer user interface of Citrix NetScaler ADC. Affected software includes Citrix NetScaler ADC 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7, where remote attackers can inject arbitrary web scrip...

CVE-2013-6939

Unspecified vulnerability in Citrix NetScaler Application Delivery Controller ADC 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows attackers to cause a denial of service via unknown vectors, related to "RADIUS authentication."...

PT-2014-3226

Name of the Vulnerable Software and Affected Versions Citrix NetScaler Application Delivery Controller ADC versions 9.3.x through 9.3-64.4 Citrix NetScaler Application Delivery Controller ADC versions 10.0 through 10.0-77.5 Citrix NetScaler Application Delivery Controller ADC versions 10.1 throug...

PT-2014-3227

Name of the Vulnerable Software and Affected Versions Citrix NetScaler Application Delivery Controller ADC versions 9.3.x through 9.3-64.4 Citrix NetScaler Application Delivery Controller ADC versions 10.0 through 10.0-77.5 Citrix NetScaler Application Delivery Controller ADC versions 10.1 throug...

CVE-2013-6944: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the user interface in the AAA TM vServer in Citrix NetScaler Application Delivery Controller ADC 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vector...

CVE-2013-6943: Improper Control of Generation of Code

Citrix NetScaler Application Delivery Controller ADC 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows remote attackers to conduct an LDAP injection attack via vectors related to SSH and Web management usernames...

CVE-2013-6940: Undefined Security Weakness

Citrix NetScaler Application Delivery Controller ADC 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 logs user credentials, which allows attackers to obtain sensitive information via unspecified vectors...

CVE-2013-6942: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Citrix NetScaler Application Delivery Controller ADC 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2013-6941: Undefined Security Weakness

Unspecified vulnerability in Citrix NetScaler Application Delivery Controller ADC 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows users to "breakout" of the shell via unknown vectors...

CVE-2013-6939: Undefined Security Weakness

Unspecified vulnerability in Citrix NetScaler Application Delivery Controller ADC 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows attackers to cause a denial of service via unknown vectors, related to "RADIUS authentication."...

PT-2014-3229

Name of the Vulnerable Software and Affected Versions Citrix NetScaler Application Delivery Controller ADC versions 9.3.x through 9.3-64.4 Citrix NetScaler Application Delivery Controller ADC versions 10.0 through 10.0-77.5 Citrix NetScaler Application Delivery Controller ADC versions 10.1 throug...

PT-2014-3223

Name of the Vulnerable Software and Affected Versions Citrix NetScaler SDX versions 9.3 through 9.3-64.4 Citrix NetScaler SDX versions 10.0 through 10.0-77.5 Citrix Application Delivery Controller ADC versions 9.3.x through 9.3-64.4 Citrix Application Delivery Controller ADC versions 10.0 through...

PT-2014-3228

Name of the Vulnerable Software and Affected Versions Citrix NetScaler Application Delivery Controller ADC versions 9.3.x through 9.3-64.4 Citrix NetScaler Application Delivery Controller ADC versions 10.0 through 10.0-77.5 Citrix NetScaler Application Delivery Controller ADC versions 10.1 throug...

PT-2014-3225

Name of the Vulnerable Software and Affected Versions Citrix NetScaler Application Delivery Controller ADC versions 9.3.x before 9.3-64.4 Citrix NetScaler Application Delivery Controller ADC versions 10.0 before 10.0-77.5 Citrix NetScaler Application Delivery Controller ADC versions 10.1 before...

PT-2014-3224

Name of the Vulnerable Software and Affected Versions Citrix NetScaler Application Delivery Controller ADC versions 9.3.x before 9.3-64.4 Citrix NetScaler Application Delivery Controller ADC versions 10.0 before 10.0-77.5 Citrix NetScaler Application Delivery Controller ADC versions 10.1 before...

Government Surveillance Could Targeted Automated Updates

SAN FRANCISCO – As more Web-based services are encrypted, privacy advocates are concerned the next wave of aggressive surveillance activity could target automated update services that essentially provide Internet companies root access to machines. Chris Soghoian, principal technologist with the...

Threat Outbreak Alert: Fake Delivery Failure Notification Email Messages on February 25, 2014

Medium Alert ID: 33055 First Published: 2014 February 26 18:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a delivery failure notification from DHL for the recipient. The text in the email message attempts to convinc...

Threat Outbreak Alert: Fake Failed Delivery Notification Email Messages on February 17, 2014

Medium Alert ID: 32895 First Published: 2014 February 17 21:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a failed delivery notification for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Product Order Delivery Information Email Messages on February 16, 2014

Medium Alert ID: 32882 First Published: 2014 February 17 14:58 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain product order details for the recipient. The text in the email message attempts to convince the recipient to...

CVE-2014-1948: Undefined Security Weakness

OpenStack Image Registry and Delivery Service Glance 2013.2 through 2013.2.1 and Icehouse before icehouse-2 logs a URL containing the Swift store backend password when authentication fails and WARNING level logging is enabled, which allows local users to obtain sensitive information by reading th...