Browse CVEs

MEDIUM 5.9 CVE-2019-6485 Citrix NetScaler Gateway 12.1 before build 50.31, 12.0 before build 60.9, 11.1 before build 60.14, 11.0 before build 72.17, and 10.5 before build 69.… Netscaler Gateway Firmware Patch available Fix from $1,6002019-02-22 MEDIUM 5.6 CVE-2018-19965 An issue was discovered in Xen through 4.11.x allowing 64-bit PV guest OS users to cause a denial of service (host OS crash) because #GP[0] can occur… Xenserver after 4.11.1 Fix from $1,6002018-12-08 HIGH 7.8 CVE-2018-18013 * Xen Mobile through 10.8.0 includes a service listening on port 5001 within its firewall that accepts unauthenticated input. If this service is supp… Xenmobile Server after 10.8.0 Fix from $1,9502018-10-24 CRITICAL 9.8 CVE-2018-17445EPSS 11% A Command Injection issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4. Netscaler Sd Wan after 10.0.4 Fix from $2,3002018-10-23 CRITICAL 9.8 CVE-2018-17446 A SQL Injection issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4. Netscaler Sd Wan after 10.0.4 Fix from $2,3002018-10-23 CRITICAL 9.8 CVE-2018-17448 An Incorrect Access Control issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4. Netscaler Sd Wan after 10.0.4 Fix from $2,3002018-10-23 HIGH 7.5 CVE-2018-17444 A Directory Traversal issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4. Netscaler Sd Wan after 10.0.4 Fix from $1,9502018-10-23 HIGH 7.5 CVE-2018-17447 An Information Exposure Through Log Files issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0… Netscaler Sd Wan 9.3.6 / 10.0.4+ Fix from $1,9502018-10-23 CRITICAL 9.8 CVE-2018-14007EPSS 56% Citrix XenServer 7.1 and newer allows Directory Traversal. Xenserver No fix yet Fix from $2,3002018-08-15 CRITICAL 9.9 CVE-2016-9603 A heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display driver support before 2.9; the issue could occur when a V… Xenserver Mitigation only Fix from $2,3002018-07-27 CRITICAL 9.9 CVE-2017-2620 Quick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue. The issue could… Xenserver Patch available Fix from $2,3002018-07-27 CRITICAL 9.1 CVE-2017-2615 Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access issue. It could occur while copyi… Xenserver Patch available Fix from $2,3002018-07-03 MEDIUM 5.6 CVE-2018-3665 System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially allow a local process to … Xenserver Mitigation only Fix from $1,6002018-06-21 CRITICAL 9.8 CVE-2018-10653EPSS 7% There is an XML External Entity (XXE) Processing Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3. Xenmobile Server No fix yet Fix from $2,3002018-05-23 HIGH 8.1 CVE-2018-10654 There is a Hazelcast Library Java Deserialization Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3. Xenmobile Server Mitigation only Fix from $1,9502018-05-23 CRITICAL 9.8 CVE-2018-10648 There are Unauthenticated File Upload Vulnerabilities in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3. Xenmobile Server Mitigation only Fix from $2,3002018-05-23 HIGH 7.8 CVE-2018-10650 There is an Insufficient Path Validation Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3. Xenmobile Server Mitigation only Fix from $1,9502018-05-23 HIGH 7.5 CVE-2018-10652 There is a Sensitive Data Leakage issue in Citrix XenMobile Server 10.7 before RP3. Xenmobile Server No fix yet Fix from $1,9502018-05-23 MEDIUM 6.1 CVE-2018-10649 There is a Cross-Site Scripting Vulnerability in Citrix XenMobile Server 10.7 before RP3. Xenmobile Server Mitigation only Fix from $1,6002018-05-23 MEDIUM 6.1 CVE-2018-10651 There are Open Redirect Vulnerabilities in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3. Xenmobile Server Mitigation only Fix from $1,6002018-05-23 CRITICAL 9.8 CVE-2018-7218EPSS 6% The AppFirewall functionality in Citrix NetScaler Application Delivery Controller and NetScaler Gateway 10.5 before Build 68.7, 11.0 before Build 71.… Application Delivery Controller Firmware Mitigation only Fix from $2,3002018-05-17 CRITICAL 9.8 CVE-2018-6809 NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12.0 allow remote attackers to gain privilege on a target syste… Netscaler Application Delivery Controller Firmware Mitigation only Fix from $2,3002018-03-06 HIGH 7.5 CVE-2018-6808 NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12.0 allow remote attackers to download arbitrary files on the … Netscaler Application Delivery Controller Firmware Mitigation only Fix from $1,9502018-03-06 HIGH 7.5 CVE-2018-6810 Directory traversal vulnerability in NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12.0 allows remote attacke… Netscaler Gateway Firmware Mitigation only Fix from $1,9502018-03-06 MEDIUM 6.1 CVE-2018-6811 Multiple cross-site scripting (XSS) vulnerabilities in Citrix NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 1… Netscaler Application Delivery Controller Firmware Patch available Fix from $1,6002018-03-06 HIGH 7.5 CVE-2018-5314 Command injection vulnerability in Citrix NetScaler ADC and NetScaler Gateway 11.0 before build 70.16, 11.1 before build 55.13, and 12.0 before build… Netscaler Application Delivery Controller Mitigation only Fix from $1,9502018-03-01 HIGH 8.8 CVE-2018-6186 Citrix NetScaler VPX through NS12.0 53.13.nc allows an SSRF attack via the /rapi/read_url URI by an authenticated attacker who has a webapp account. … Netscaler Mitigation only Fix from $1,9502018-02-01 MEDIUM 5.9 CVE-2017-17382EPSS 14% Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.5 before build 67.13, 11.0 before build 71.22, 11.1 before build 56.1… Application Delivery Controller Firmware Mitigation only Fix from $1,6002017-12-13 MEDIUM 5.9 CVE-2017-17549 Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.5 before build 67.13, 11.0 before build 71.22, 11.1 before build 56.1… Application Delivery Controller Firmware Mitigation only Fix from $1,6002017-12-13 HIGH 7.2 CVE-2017-14602 A vulnerability has been identified in the management interface of Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.1 … Application Delivery Controller Firmware Patch available Fix from $1,9502017-09-26