CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 03/06/2019 |
| CVE-2019-11634KEV | CRÍTICO9.8 | Citrix Workspace App before 1904 for Windows has Incorrect Access Control. | 22/05/2019 |
| CVE-2019-7218 | MÉDIO5.9 | Citrix ShareFile before 19.23 allows a downgrade from two-factor authentication to one-factor authentication. An attacker with access to the offline victim's otp physical token or virtual app (like google authenticator) is able to bypass the first authentication phase (username/password mechanism) and log-in using user | 13/05/2019 |
| CVE-2019-7217 | ALTO7.5 | Citrix ShareFile before 19.12 allows User Enumeration. It is possible to enumerate application username based on different server responses using the request to check the otp code. No authentication is required. | 13/05/2019 |
| CVE-2019-11550 | MÉDIO5.9 | Citrix SD-WAN 10.2.x before 10.2.1 and NetScaler SD-WAN 10.0.x before 10.0.7 have Improper Certificate Validation. | 08/05/2019 |
| CVE-2018-19965 | MÉDIO5.6 | An issue was discovered in Xen through 4.11.x allowing 64-bit PV guest OS users to cause a denial of service (host OS crash) because #GP[0] can occur after a non-canonical address is passed to the TLB flushing code. NOTE: this issue exists because of an incorrect CVE-2017-5754 (aka Meltdown) mitigation. | 08/12/2018 |
| CVE-2018-19962 | ALTO7.8 | An issue was discovered in Xen through 4.11.x on AMD x86 platforms, possibly allowing guest OS users to gain host OS privileges because small IOMMU mappings are unsafely combined into larger ones. | 08/12/2018 |
| CVE-2018-19961 | ALTO7.8 | An issue was discovered in Xen through 4.11.x on AMD x86 platforms, possibly allowing guest OS users to gain host OS privileges because TLB flushes do not always occur after IOMMU mapping changes. | 08/12/2018 |
| CVE-2018-18014 | MÉDIO4.8 | * Lack of authentication in Citrix Xen Mobile through 10.8 allows low-privileged local users to execute system commands as root by making requests to private services listening on ports 8000, 30000 and 30001. NOTE: the vendor disputes that this is a vulnerability, stating it is "already mitigated by the internal firew | 24/10/2018 |
| CVE-2018-18013 | ALTO7.8 | * Xen Mobile through 10.8.0 includes a service listening on port 5001 within its firewall that accepts unauthenticated input. If this service is supplied with raw serialised Java objects, it deserialises them back into Java objects in memory, giving rise to a remote code execution vulnerability. NOTE: the vendor dispu | 24/10/2018 |
| CVE-2018-17448 | CRÍTICO9.8 | An Incorrect Access Control issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4. | 23/10/2018 |
| CVE-2018-17447 | ALTO7.5 | An Information Exposure Through Log Files issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4. | 23/10/2018 |
| CVE-2018-17446 | CRÍTICO9.8 | A SQL Injection issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4. | 23/10/2018 |
| CVE-2018-17445 | CRÍTICO9.8 | A Command Injection issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4. | 23/10/2018 |
| CVE-2018-17444 | ALTO7.5 | A Directory Traversal issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4. | 23/10/2018 |
| CVE-2018-16969 | MÉDIO4.3 | Citrix ShareFile StorageZones Controller before 5.4.2 has Information Exposure Through an Error Message. | 26/09/2018 |
| CVE-2018-16968 | BAIXO3.1 | Citrix ShareFile StorageZones Controller before 5.4.2 allows Directory Traversal. | 26/09/2018 |