Vulnerabilities > Citrix

DATE CVE VULNERABILITY TITLE RISK
2018-10-23 CVE-2018-17444 Path Traversal vulnerability in Citrix Netscaler Sd-Wan and Sd-Wan
A Directory Traversal issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4.
network
low complexity
citrix CWE-22
5.0
2018-09-26 CVE-2018-16969 Information Exposure vulnerability in Citrix Sharefile Storagezones Controller
Citrix ShareFile StorageZones Controller before 5.4.2 has Information Exposure Through an Error Message.
network
low complexity
citrix CWE-200
4.0
2018-09-26 CVE-2018-16968 Path Traversal vulnerability in Citrix Sharefile Storagezones Controller
Citrix ShareFile StorageZones Controller before 5.4.2 allows Directory Traversal.
network
citrix CWE-22
3.5
2018-08-15 CVE-2018-14007 Path Traversal vulnerability in Citrix Xenserver 7.1/7.4/7.5
Citrix XenServer 7.1 and newer allows Directory Traversal.
network
low complexity
citrix CWE-22
critical
10.0
2018-07-27 CVE-2016-9603 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
A heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display driver support before 2.9; the issue could occur when a VNC client attempted to update its display after a VGA operation is performed by a guest.
network
low complexity
qemu redhat citrix debian CWE-119
critical
9.9
2018-07-27 CVE-2017-2620 Out-of-bounds Write vulnerability in multiple products
Quick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue.
network
low complexity
qemu redhat citrix debian xen CWE-787
critical
9.9
2018-07-03 CVE-2017-2615 Out-of-bounds Write vulnerability in multiple products
Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access issue.
network
low complexity
qemu redhat citrix debian xen CWE-787
critical
9.1
2018-06-21 CVE-2018-3665 Information Exposure vulnerability in multiple products
System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially allow a local process to infer data from another process through a speculative execution side channel.
4.7
2018-05-23 CVE-2018-10654 Deserialization of Untrusted Data vulnerability in Citrix Xenmobile Server 10.7/10.8
There is a Hazelcast Library Java Deserialization Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3.
network
citrix CWE-502
6.8
2018-05-23 CVE-2018-10653 XXE vulnerability in Citrix Xenmobile Server 10.7/10.8
There is an XML External Entity (XXE) Processing Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3.
network
low complexity
citrix CWE-611
7.5