CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 03/06/2019 |
| CVE-2019-11634KEV | 严重9.8 | Citrix Workspace App before 1904 for Windows has Incorrect Access Control. | 22/05/2019 |
| CVE-2019-7218 | 中危5.9 | Citrix ShareFile before 19.23 allows a downgrade from two-factor authentication to one-factor authentication. An attacker with access to the offline victim's otp physical token or virtual app (like google authenticator) is able to bypass the first authentication phase (username/password mechanism) and log-in using user | 13/05/2019 |
| CVE-2019-7217 | 高危7.5 | Citrix ShareFile before 19.12 allows User Enumeration. It is possible to enumerate application username based on different server responses using the request to check the otp code. No authentication is required. | 13/05/2019 |
| CVE-2019-11550 | 中危5.9 | Citrix SD-WAN 10.2.x before 10.2.1 and NetScaler SD-WAN 10.0.x before 10.0.7 have Improper Certificate Validation. | 08/05/2019 |
| CVE-2018-19965 | 中危5.6 | An issue was discovered in Xen through 4.11.x allowing 64-bit PV guest OS users to cause a denial of service (host OS crash) because #GP[0] can occur after a non-canonical address is passed to the TLB flushing code. NOTE: this issue exists because of an incorrect CVE-2017-5754 (aka Meltdown) mitigation. | 08/12/2018 |
| CVE-2018-19962 | 高危7.8 | An issue was discovered in Xen through 4.11.x on AMD x86 platforms, possibly allowing guest OS users to gain host OS privileges because small IOMMU mappings are unsafely combined into larger ones. | 08/12/2018 |
| CVE-2018-19961 | 高危7.8 | An issue was discovered in Xen through 4.11.x on AMD x86 platforms, possibly allowing guest OS users to gain host OS privileges because TLB flushes do not always occur after IOMMU mapping changes. | 08/12/2018 |
| CVE-2018-18014 | 中危4.8 | * Lack of authentication in Citrix Xen Mobile through 10.8 allows low-privileged local users to execute system commands as root by making requests to private services listening on ports 8000, 30000 and 30001. NOTE: the vendor disputes that this is a vulnerability, stating it is "already mitigated by the internal firew | 24/10/2018 |
| CVE-2018-18013 | 高危7.8 | * Xen Mobile through 10.8.0 includes a service listening on port 5001 within its firewall that accepts unauthenticated input. If this service is supplied with raw serialised Java objects, it deserialises them back into Java objects in memory, giving rise to a remote code execution vulnerability. NOTE: the vendor dispu | 24/10/2018 |
| CVE-2018-17448 | 严重9.8 | An Incorrect Access Control issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4. | 23/10/2018 |
| CVE-2018-17447 | 高危7.5 | An Information Exposure Through Log Files issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4. | 23/10/2018 |
| CVE-2018-17446 | 严重9.8 | A SQL Injection issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4. | 23/10/2018 |
| CVE-2018-17445 | 严重9.8 | A Command Injection issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4. | 23/10/2018 |
| CVE-2018-17444 | 高危7.5 | A Directory Traversal issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4. | 23/10/2018 |
| CVE-2018-16969 | 中危4.3 | Citrix ShareFile StorageZones Controller before 5.4.2 has Information Exposure Through an Error Message. | 26/09/2018 |
| CVE-2018-16968 | 低危3.1 | Citrix ShareFile StorageZones Controller before 5.4.2 allows Directory Traversal. | 26/09/2018 |