1072 matches found
CVE-2020-8198
Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 resulting in Stored Cross-Site Scripting XSS...
CVE-2020-8194
Reflected code injection in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 allows the modification of a file download...
CVE-2020-8193
CVE-2020-8193 affects Citrix ADC and Citrix Gateway (and Citrix SD-WAN WANOP) with unauthenticated access to certain endpoints due to improper access control. Affected releases include Citrix ADC/Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14, 10.5-70.18 and WAN-OP version...
CVE-2020-8191
CVE-2020-8191 concerns Citrix ADC and Citrix Gateway (and related WAN-OP components) with a reflected Cross-Site Scripting (XSS) vulnerability caused by improper input validation. Affected versions include Citrix ADC and Citrix Gateway before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10....
PT-2020-20019
Name of the Vulnerable Software and Affected Versions Citrix ADC and Citrix Gateway versions prior to 13.0-58.30 Citrix ADC and Citrix Gateway versions prior to 12.1-57.18 Citrix ADC and Citrix Gateway versions prior to 12.0-63.21 Citrix ADC and Citrix Gateway versions prior to 11.1-64.14 Citrix...
PT-2020-20015
Name of the Vulnerable Software and Affected Versions Citrix ADC and Citrix Gateway versions prior to 13.0-58.30 Citrix ADC and Citrix Gateway versions prior to 12.1-57.18 Citrix ADC and Citrix Gateway versions prior to 12.0-63.21 Citrix ADC and Citrix Gateway versions prior to 11.1-64.14 Citrix...
CVE-2020-8195: Improper Input Validation
Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 resulting in limited information disclosure to low privileged users...
CVE-2020-8193: Improper Access Control
Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 allows unauthenticated access to certain URL endpoints...
CVE-2020-8195
Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 resulting in limited information disclosure to low privileged users. Recent assessments:...
CVE-2020-8191: Improper Neutralization of Input During Web Page Generation
Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 allows reflected Cross Site Scripting XSS...
CVE-2020-8198: Improper Neutralization of Input During Web Page Generation
Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 resulting in Stored Cross-Site Scripting XSS...
PT-2020-20017
Name of the Vulnerable Software and Affected Versions Citrix ADC and Citrix Gateway versions prior to 13.0-58.30 Citrix ADC and Citrix Gateway versions prior to 12.1-57.18 Citrix ADC and Citrix Gateway versions prior to 12.0-63.21 Citrix ADC and Citrix Gateway versions prior to 11.1-64.14 Citrix...
PT-2020-22096
Name of the Vulnerable Software and Affected Versions CoolKey affected versions not specified Description The issue is related to a stack-buffer-overflow read crash. Technical details about the crash include the function names coolkey rsa op, coolkey compute crypt, and sc decipher. Recommendation...
CVE-2020-13155
clearsystem.php in NukeViet 4.4 allows CSRF with resultant HTML injection via the deltype parameter to the admin/index.php?nv=webtools&op=clearsystem URI...
PT-2020-13362
Name of the Vulnerable Software and Affected Versions NukeViet version 4.4 Description The issue allows for a Cross-Site Request Forgery CSRF attack to change a user's password without needing the old password. This is achieved through the admin/index.php?nv=users&op=edit&userid= URI in the...
CVE-2020-13156: Cross-Site Request Forgery (CSRF)
modules\users\admin\adduser.php in NukeViet 4.4 allows CSRF to add a user account via the admin/index.php?nv=users&op=useradd URI...
CVE-2020-13155: Cross-Site Request Forgery (CSRF)
clearsystem.php in NukeViet 4.4 allows CSRF with resultant HTML injection via the deltype parameter to the admin/index.php?nv=webtools&op=clearsystem URI...
PT-2020-13360
Name of the Vulnerable Software and Affected Versions NukeViet version 4.4 Description The issue allows for CSRF with resultant HTML injection via the deltype parameter to the "admin/index.php?nv=webtools&op=clearsystem" URI. This can be exploited through the clearsystem.php file. Recommendations...
op-shika.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1182097 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
PT-2020-12448 · Dovecot +6 · Dovecot +6
Name of the Vulnerable Software and Affected Versions: Dovecot versions prior to 2.3.10.1 Description: The issue arises from sending malformed parameters to a NOOP command, which causes a NULL Pointer Dereference and crash in submission-login, submission, or lmtp. This can be triggered without...