Skip to contentCitrix Xen vulnerabilities
- xen, citrix xenserver +1 moreXen, when running on a 64-bit hypervisor, allows local x86 guest OS users to modify arbitrary...CVE-2016-9383Fix available8.8 High
- xen, citrix xenserver +1 moreXen 4.0.x through 4.7.x mishandle x86 task switches to VM86 mode, which allows local 32-bit x86...CVE-2016-9382Fix available7.8 High
- qemu, citrix xenserver +1 moreRace condition in QEMU in Xen allows local x86 HVM guest OS administrators to gain privileges by...CVE-2016-9381Fix available7.5 High
- xen, citrix xenserver +1 moreThe pygrub boot loader emulator in Xen, when nul-delimited output format is requested, allows...CVE-2016-9380Fix available7.5 High
- xen, citrix xenserver +1 moreThe pygrub boot loader emulator in Xen, when S-expression output format is requested, allows...CVE-2016-9379Fix available7.9 High
- citrix xenapp, xendesktop +1 moreCitrix XenApp 6.x before 6.5 HRP07 and 7.x before 7.9 and Citrix XenDesktop before 7.9 might...CVE-2016-64939.8 Critical
- xen, citrix xenserver +1 moreXen 4.5.x through 4.7.x do not implement Supervisor Mode Access Prevention (SMAP) whitelisting in...CVE-2016-6259Fix available6.2 Medium
- xen, citrix xenserver +1 moreThe PV pagetable code in arch/x86/mm.c in Xen 4.7.x and earlier allows local 32-bit PV guest OS...CVE-2016-6258Fix available8.8 High
- citrix worx home, xenmobile mdx toolkit +1 moreCitrix Worx Home for iOS before 10.3.6 and XenMobile MDX Toolkit for iOS before 10.3.6 might...CVE-2016-51094.3 Medium
- citrix xenserverCitrix XenServer 7.0 before Hotfix XS70E003, when a deployment has been upgraded from an earlier...CVE-2016-53029.8 Critical
- citrix xenapp, xendesktop +1 moreCitrix Studio before 7.6.1000, Citrix XenDesktop 7.x before 7.6 LTSR Cumulative Update 1 (CU1),...CVE-2016-48107.5 High
- qemu, canonical ubuntu linux, citrix xenserver +8 more +10 moreInteger overflow in the VGA module in QEMU allows local guest OS users to cause a denial of...CVE-2016-3712Fix available5.5 Medium
- qemu, canonical ubuntu linux, citrix xenserver +11 more +13 moreThe VGA module in QEMU improperly performs bounds checking on banked access to video memory,...CVE-2016-3710Fix available8.8 High
- citrix xenmobile serverCross-site scripting (XSS) vulnerability in the Web User Interface in Citrix XenMobile Server 10...CVE-2016-27896.1 Medium
- xen, citrix xenserver +1 moreXen 4.6.x, 4.5.x, 4.4.x, 4.3.x, and earlier do not initialize x86 FPU stack and XMM registers...CVE-2015-8555Fix available8.6 High
- xen, citrix xenserver +1 moreThe paging_invlpg function in include/asm-x86/paging.h in Xen 3.3.x through 4.6.x, when using...CVE-2016-1571Fix available6.3 Medium
- ntp, citrix xenserver, netapp clustered data ontap +5 more +7 moreThe rate limiting feature in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote...CVE-2015-7705Fix availableEPSS 12.2%9.8 Critical
- ntp, citrix xenserver, debian linux +11 more +13 moreThe ntpd client in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to...CVE-2015-7704Fix availableEPSS 10.7%7.5 High
- qemu, canonical ubuntu linux, citrix xenserver +5 more +7 moreQEMU does not properly restrict write access to the PCI config space for certain PCI pass-through...CVE-2015-4106Fix available4.6 Medium
- citrix xenmobileCitrix XenMobile MDX Toolkit before 9.0.4, when used to wrap iOS 8 applications, does not...CVE-2014-84955.0 Medium
- citrix xenserverUnspecified vulnerability in Citrix XenServer 6.2 Service Pack 1 and earlier allows attackers to...CVE-2014-49486.4 Medium
- citrix xenserverBuffer overflow in the HVM graphics console support in Citrix XenServer 6.2 Service Pack 1 and...CVE-2014-494710.0 High
- citrix xendesktopCitrix XenDesktop 7.x, 5.x, and 4.x, when pooled random desktop groups is enabled and...CVE-2014-47004.9 Medium
- citrix xenmobile device manager, xenmobile device manager mdm +1 moreUnspecified vulnerability in Citrix XenMobile Device Manager server (formerly Zenprise Device...CVE-2014-16635.0 Medium
- citrix xendesktopCitrix XenDesktop 7.0, when upgraded from XenDesktop 5.x, does not properly enforce policy rule...CVE-2013-60775.8 Medium
- citrix xenclient xtThe NDVM in Citrix XenClient XT before 2.1.3 and 3.x before 3.1.4 allows remote attackers to...CVE-2013-26017.5 High
- citrix xendesktopCitrix XenDesktop Virtual Desktop Agent (VDA) 5.6.x before 5.6.200, when making changes to the...CVE-2012-63145.0 Medium
- citrix xenappThe XML Service interface in Citrix XenApp 6.5 and 6.5 Feature Pack 1 allows remote attackers to...CVE-2012-51619.3 High
- citrix xenserverArray index error in the HVMOP_set_mem_access handler in Xen 4.1 allows local HVM guest OS...CVE-2012-5512Fix available3.2 Low
- citrix xenserver, xen +1 moreThe GNTTABOP_swap_grant_ref sub-operation in the grant table hypercall in Xen 4.2 and Citrix...CVE-2012-35166.9 Medium
- citrix xenserver, xen +1 morePHYSDEVOP_map_pirq in Xen 4.1 and 4.2 and Citrix XenServer 6.0.2 and earlier allows local HVM...CVE-2012-3498Fix available5.6 Medium
- citrix xenserver, xen +1 moreThe physdev_get_free_pirq hypercall in arch/x86/physdev.c in Xen 4.1.x and Citrix XenServer 6.0.2...CVE-2012-3495Fix available6.1 Medium
- citrix xenserver, xen +1 moreXENMEM_populate_physmap in Xen 4.0, 4.1, and 4.2, and Citrix XenServer 6.0.2 and earlier, when...CVE-2012-3496Fix available4.7 Medium
- citrix xenserver, xen +1 moreThe set_debugreg hypercall in include/asm-x86/debugreg.h in Xen 4.0, 4.1, and 4.2, and Citrix...CVE-2012-3494Fix available2.1 Low
- citrix xenserver, freebsd, illumos +8 more +10 moreThe x86-64 kernel system-call functionality in Xen 4.1.2 and earlier, as used in Citrix XenServer...CVE-2012-0217Public exploitFix availableEPSS 39.6%7.2 High
- citrix xentools/libxc/xc_dom_bzimageloader.c in Xen 3.2, 3.3, 4.0, and 4.1 allows local users to cause a...CVE-2011-3262Fix available2.1 Low
- citrix xenXen 4.1 before 4.1.1 and 4.0 before 4.0.2, when using PCI passthrough on Intel VT-d chipsets that...CVE-2011-1898Fix available7.4 High
- citrix xenMultiple integer overflows in tools/libxc/xc_dom_bzimageloader.c in Xen 3.2, 3.3, 4.0, and 4.1...CVE-2011-1583Fix available6.9 Medium
- citrix xenThe fixup_page_fault function in arch/x86/traps.c in Xen 4.0.1 and earlier on 64-bit platforms,...CVE-2010-4255Fix available6.1 Medium
- citrix xenThe vbd_create function in Xen 3.1.2, when the Linux kernel 2.6.18 on Red Hat Enterprise Linux ...CVE-2010-42385.5 Medium
- citrix xenThe do_block_io_op function in (1) drivers/xen/blkback/blkback.c and (2) drivers/xen/blktap...CVE-2010-42475.5 Medium
- citrix xenThe backend driver in Xen 3.x allows guest OS users to cause a denial of service via a kernel...CVE-2010-36992.7 Low
- citrix online plug-in for windows for xenapp \& xendesktopThe IICAClient interface in the ICAClient library in the ICA Client ActiveX Object (aka ICO)...CVE-2010-29919.3 High
- citrix ica client for linux, ica client for solaris, receiver for windows mobile +2 more +4 moreCitrix Online Plug-in for Windows for XenApp & XenDesktop before 11.2, Citrix Online Plug-in for...CVE-2010-29909.3 High
- citrix xenserverCitrix XenServer 5.0 Update 2 and earlier, and 5.5 Update 1 and earlier, when using a pvops...CVE-2010-26191.9 Low
- citrix xenserverUnspecified vulnerability in Citrix XenServer 5.0 Update 3 and earlier, and 5.5, allows local...CVE-2010-06334.6 Medium
- citrix xencenterwebStatic code injection vulnerability in config/writeconfig.php in the sample code in the XenServer...CVE-2009-3760Public exploit7.5 High
- citrix xencenterwebMultiple cross-site request forgery (CSRF) vulnerabilities in sample code in the XenServer...CVE-2009-3759Public exploit8.8 High
- citrix xencenterwebSQL injection vulnerability in login.php in sample code in the XenServer Resource Kit in Citrix...CVE-2009-3758Public exploit7.5 High
- citrix xencenterwebMultiple cross-site scripting (XSS) vulnerabilities in sample code in the XenServer Resource Kit...CVE-2009-3757Public exploit4.3 Medium
- Show moreLoading…