Skip to contentCitrix vulnerabilities
Products
Show 34 moreShow less
Newest
- xen, citrix xenserver +1 moreXen 4.5.x through 4.7.x do not implement Supervisor Mode Access Prevention (SMAP) whitelisting in...CVE-2016-6259Fix available6.2 Medium
- xen, citrix xenserver +1 moreThe PV pagetable code in arch/x86/mm.c in Xen 4.7.x and earlier allows local 32-bit PV guest OS...CVE-2016-6258Fix available8.8 High
- citrix worx home, xenmobile mdx toolkit +1 moreCitrix Worx Home for iOS before 10.3.6 and XenMobile MDX Toolkit for iOS before 10.3.6 might...CVE-2016-51094.3 Medium
- citrix ios receiverCitrix iOS Receiver before 7.0 allows attackers to cause TLS certificates to be incorrectly...CVE-2016-54336.1 Medium
- citrix xenserverCitrix XenServer 7.0 before Hotfix XS70E003, when a deployment has been upgraded from an earlier...CVE-2016-53029.8 Critical
- citrix netscaler gateway 11.0 firmwareCross-site scripting (XSS) vulnerability in vpn/js/gateway_login_form_view.js in Citrix NetScaler...CVE-2016-49456.1 Medium
- citrix xenapp, xendesktop +1 moreCitrix Studio before 7.6.1000, Citrix XenDesktop 7.x before 7.6 LTSR Cumulative Update 1 (CU1),...CVE-2016-48107.5 High
- qemu, canonical ubuntu linux, citrix xenserver +8 more +10 moreInteger overflow in the VGA module in QEMU allows local guest OS users to cause a denial of...CVE-2016-3712Fix available5.5 Medium
- qemu, canonical ubuntu linux, citrix xenserver +11 more +13 moreThe VGA module in QEMU improperly performs bounds checking on banked access to video memory,...CVE-2016-3710Fix available8.8 High
- citrix command centerMultiple SQL injection vulnerabilities in the Administration Web UI servlets in Citrix Command...CVE-2015-79998.1 High
- citrix xenmobile serverCross-site scripting (XSS) vulnerability in the Web User Interface in Citrix XenMobile Server 10...CVE-2016-27896.1 Medium
- xen, citrix xenserver +1 moreXen 4.6.x, 4.5.x, 4.4.x, 4.3.x, and earlier do not initialize x86 FPU stack and XMM registers...CVE-2015-8555Fix available8.6 High
- citrix netscalerThe Administrative Web Interface in Citrix NetScaler Application Delivery Controller (ADC) and...CVE-2016-20726.1 Medium
- citrix netscalerCitrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 11.x before 11.0...CVE-2016-20719.8 Critical
- xen, citrix xenserver +1 moreThe paging_invlpg function in include/asm-x86/paging.h in Xen 3.3.x through 4.6.x, when using...CVE-2016-1571Fix available6.3 Medium
- citrix netscaler service delivery appliance service vm, netscaler application delivery controller firmware, netscaler gateway firmware +2 moreThe administration UI in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler...CVE-2015-79985.0 Medium
- citrix netscaler service delivery appliance service vm, netscaler application delivery controller firmware, netscaler gateway firmware +2 moreMultiple cross-site scripting (XSS) vulnerabilities in the Nitro API in Citrix NetScaler...CVE-2015-79974.3 Medium
- citrix netscaler service delivery appliance service vm, netscaler application delivery controller firmware, netscaler gateway firmware +2 moreThe Nitro API in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway...CVE-2015-79965.0 Medium
- ntp, citrix xenserver, netapp clustered data ontap +5 more +7 moreThe rate limiting feature in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote...CVE-2015-7705Fix availableEPSS 12.2%9.8 Critical
- ntp, citrix xenserver, debian linux +11 more +13 moreThe ntpd client in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to...CVE-2015-7704Fix availableEPSS 10.7%7.5 High
- citrix netscaler application delivery controller firmware, netscaler gateway firmware +1 moreCross-site scripting (XSS) vulnerability in the Administrative Web Interface in Citrix NetScaler...CVE-2015-66724.3 Medium
- citrix netscaler application delivery controller firmware, netscaler gateway firmware +1 moreMultiple unspecified vulnerabilities in Citrix NetScaler Application Delivery Controller (ADC)...CVE-2015-553810.0 High
- citrix netscaler application delivery controller firmware, netscaler gateway firmware +1 moreThe Management Interface in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler...CVE-2015-50809.0 High
- qemu, canonical ubuntu linux, citrix xenserver +5 more +7 moreQEMU does not properly restrict write access to the PCI config space for certain PCI pass-through...CVE-2015-4106Fix available4.6 Medium
- citrix netscaler application delivery controller firmware, netscaler gateway firmware +1 moreCitrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.5 Build 53...CVE-2015-28297.8 High
- citrix netscalerCitrix NetScaler AppFirewall, as used in NetScaler 10.5, allows remote attackers to bypass...CVE-2015-2841Public exploit5.0 Medium
- citrix netscalerCross-site scripting (XSS) vulnerability in help/rt/large_search.html in Citrix NetScaler before...CVE-2015-28404.3 Medium
- citrix netscalerThe Nitro API in Citrix NetScaler before 10.5 build 52.3nc uses an incorrect Content-Type when...CVE-2015-28394.3 Medium
- citrix netscalerCross-site request forgery (CSRF) vulnerability in Nitro API in Citrix NetScaler before 10.5...CVE-2015-2838Public exploit6.8 Medium
- citrix command centerCitrix Command Center before 5.1 Build 35.4 and 5.2 before Build 42.7 does not properly restrict...CVE-2015-26837.5 High
- citrix command centerCitrix Command Center before 5.1 Build 35.4 and 5.2 before Build 42.7 allows remote attackers to...CVE-2015-2682Public exploitEPSS 10.7%5.0 Medium
- citrix netscaler application delivery controller firmware, netscaler gateway firmware +1 moreCitrix NetScaler Application Delivery Controller and NetScaler Gateway 10.5.50.10 before 10.5-52...CVE-2014-85804.9 Medium
- citrix xenmobileCitrix XenMobile MDX Toolkit before 9.0.4, when used to wrap iOS 8 applications, does not...CVE-2014-84955.0 Medium
- citrix netscaler application delivery controller firmwareUnspecified vulnerability in the management interface in Citrix NetScaler Application Delivery...CVE-2014-7140Public exploitEPSS 16.2%7.5 High
- gnu bash, apple mac os x, arista eos +71 more +73 moreGNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function...CVE-2014-7169In KEVPublic exploitFix availableEPSS 99.9%9.8 Critical
- gnu bash, apple mac os x, arista eos +71 more +73 moreGNU Bash through 4.3 processes trailing strings after function definitions in the values of...CVE-2014-6271In KEVPublic exploitFix availableEPSS 100.0%9.8 Critical
- citrix access gateway plug-inInteger overflow in the StartEpa method in the nsepacom ActiveX control (nsepa.exe) in Citrix...CVE-2011-25936.8 Medium
- citrix xenserverUnspecified vulnerability in Citrix XenServer 6.2 Service Pack 1 and earlier allows attackers to...CVE-2014-49486.4 Medium
- citrix xenserverBuffer overflow in the HVM graphics console support in Citrix XenServer 6.2 Service Pack 1 and...CVE-2014-494710.0 High
- citrix netscaler application delivery controller, netscaler access gateway, netscaler access gateway firmware +1 more +3 moreCitrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway (formerly Access...CVE-2014-43475.0 Medium
- citrix netscaler application delivery controller, netscaler access gateway, netscaler access gateway firmware +1 more +3 moreCross-site scripting (XSS) vulnerability in administration user interface in Citrix NetScaler...CVE-2014-43464.3 Medium
- citrix xendesktopCitrix XenDesktop 7.x, 5.x, and 4.x, when pooled random desktop groups is enabled and...CVE-2014-47004.9 Medium
- citrix access gateway plug-inHeap-based buffer overflow in the StartEpa method in the nsepacom ActiveX control (nsepa.exe) in...CVE-2011-2592EPSS 14.9%9.3 High
- citrix vdi-in-a-boxUnspecified vulnerability in Citrix VDI-In-A-Box 5.3.x before 5.3.8 and 5.4.x before 5.4.4 allows...CVE-2014-37807.5 High
- apache cloudstack, citrix cloudplatform +1 moreApache CloudStack 4.0.0 before 4.0.2 and Citrix CloudPlatform (formerly Citrix CloudStack) 3.0.x...CVE-2013-27585.0 Medium
- citrix cloudplatformCitrix CloudPlatform (formerly Citrix CloudStack) 3.0.x before 3.0.6 Patch C does not properly...CVE-2013-27577.5 High
- apache cloudstack, citrix cloudplatform +1 moreApache CloudStack 4.0.0 before 4.0.2 and Citrix CloudPlatform (formerly Citrix CloudStack) 3.0.x...CVE-2013-27565.0 Medium
- citrix netscaler access gateway, netscaler access gateway firmware +1 moreCross-site scripting (XSS) vulnerability in Citrix NetScaler Gateway (formerly Citrix Access...CVE-2014-18994.3 Medium
- citrix netscaler application delivery controller, netscaler access gateway, netscaler access gateway firmware +1 more +3 moreUnspecified vulnerability in the management GUI in Citrix NetScaler Application Delivery...CVE-2014-288210.0 High
- citrix netscaler application delivery controller, netscaler access gateway, netscaler access gateway firmware +1 more +3 moreUnspecified vulnerability in the Diffie-Hellman key agreement implementation in the management...CVE-2014-288110.0 High
- Show moreLoading…