Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cisco secure desktop 3.6.6020 vulnerabilities and exploits

(subscribe to this query)
828
VMScore
CVE-2015-0691
A certain Cisco JAR file, as distributed in Cache Cleaner in Cisco Secure Desktop (CSD), allows remote malicious users to execute arbitrary commands via a crafted web site, aka Bug ID CSCup83001.
Cisco Secure Desktop 3.1.1Cisco Secure Desktop 3.0 BaseCisco Secure Desktop 3.4.1108Cisco Secure Desktop 3.5 BaseCisco Secure Desktop 3.5.841Cisco Secure Desktop 3.6 BaseCisco Secure Desktop 3.6.6228Cisco Secure Desktop 3.6.6210Cisco Secure Desktop 3.6.6203Cisco Secure Desktop 3.6.6104Cisco Secure Desktop 3.1 BaseCisco Secure Desktop 3.4.2048Cisco Secure Desktop 3.2.1.126Cisco Secure Desktop 3.3.0.151Cisco Secure Desktop 3.5.2001Cisco Secure Desktop 3.5.2008Cisco Secure Desktop 3.6.3002Cisco Secure Desktop 3.6.5005Cisco Secure Desktop 3.6.6249Cisco Secure Desktop 3.6.6020Cisco Secure Desktop 3.1.0.31Cisco Secure Desktop 3.1.1.45
828
VMScore
CVE-2012-4655
The WebLaunch feature in Cisco Secure Desktop prior to 3.6.6020 does not properly validate binaries that are received by the downloader process, which allows remote malicious users to execute arbitrary code via vectors involving (1) ActiveX or (2) Java components, aka Bug IDs CSC...
Cisco Secure Desktop 3.4Cisco Secure Desktop 3.1.1.45Cisco Secure Desktop 3.6.3002Cisco Secure Desktop 3.2Cisco Secure Desktop 3.6Cisco Secure Desktop 3.5.2008Cisco Secure Desktop 3.4.2Cisco Secure Desktop 3.6.181Cisco Secure Desktop 3.1.1Cisco Secure Desktop 3.6.185Cisco Secure Desktop 3.1Cisco Secure Desktop 3.5.841Cisco Secure Desktop 3.4.2048Cisco Secure Desktop 3.4.1Cisco Secure Desktop 3.2.1Cisco Secure Desktop 3.5Cisco Secure Desktop 3.6.4021Cisco Secure Desktop 3.1.1.27Cisco Secure Desktop 3.1.1.33Cisco Secure Desktop 3.6.1001Cisco Secure Desktop 3.3Cisco Secure Desktop 3.6.2002
383
VMScore
CVE-2012-2495
The HostScan downloader implementation in Cisco AnyConnect Secure Mobility Client 3.x prior to 3.0 MR8 and Cisco Secure Desktop prior to 3.6.6020 does not compare the timestamp of offered software to the timestamp of installed software, which allows remote malicious users to forc...
Cisco Anyconnect Secure Mobility Client 3.0Cisco Secure Desktop 3.1.1.33Cisco Secure Desktop 3.4Cisco Secure Desktop 3.3Cisco Secure Desktop 3.5.2001Cisco Secure Desktop 3.2.1Cisco Secure Desktop 3.2Cisco Secure Desktop 3.1Cisco Secure Desktop 3.5.841Cisco Secure Desktop 3.4.2Cisco Secure Desktop 3.4.1Cisco Secure Desktop 3.4.2048Cisco Secure Desktop 3.1.1.45Cisco Secure Desktop 3.1.1.27Cisco Secure Desktop 3.1.1Cisco Secure Desktop 3.5Cisco Secure Desktop 3.5.1077Cisco Secure Desktop
383
VMScore
CVE-2012-2494
The VPN downloader implementation in the WebLaunch feature in Cisco AnyConnect Secure Mobility Client 2.x prior to 2.5 MR6 and 3.x prior to 3.0 MR8 does not compare the timestamp of offered software to the timestamp of installed software, which allows remote malicious users to fo...
Cisco Anyconnect Secure Mobility Client 2.1Cisco Anyconnect Secure Mobility Client 2.3.185Cisco Anyconnect Secure Mobility Client 2.3.254Cisco Anyconnect Secure Mobility Client 2.4.0202Cisco Anyconnect Secure Mobility Client 2.4.1012Cisco Anyconnect Secure Mobility Client 2.5Cisco Anyconnect Secure Mobility Client 3.0Cisco Anyconnect Secure Mobility Client 2.2.128Cisco Anyconnect Secure Mobility Client 2.2.133Cisco Anyconnect Secure Mobility Client 2.2.136Cisco Anyconnect Secure Mobility Client 2.2.140Cisco Anyconnect Secure Mobility Client 2.3Cisco Anyconnect Secure Mobility Client 2.0Cisco Anyconnect Secure Mobility Client 2.2Cisco Anyconnect Secure Mobility Client 2.3.2016Cisco Anyconnect Secure Mobility Client 2.4
828
VMScore
CVE-2012-2493
The VPN downloader implementation in the WebLaunch feature in Cisco AnyConnect Secure Mobility Client 2.x prior to 2.5 MR6 on Windows, and 2.x prior to 2.5 MR6 and 3.x prior to 3.0 MR8 on Mac OS X and Linux, does not properly validate binaries that are received by the downloader ...
Cisco Anyconnect Secure Mobility Client 2.2.136Cisco Anyconnect Secure Mobility Client 2.3Cisco Anyconnect Secure Mobility Client 2.4.0202Cisco Anyconnect Secure Mobility Client 2.5Cisco Anyconnect Secure Mobility Client 2.3.185Cisco Anyconnect Secure Mobility Client 2.3.2016Cisco Anyconnect Secure Mobility Client 2.3.254Cisco Anyconnect Secure Mobility Client 2.4Cisco Anyconnect Secure Mobility Client 2.0Cisco Anyconnect Secure Mobility Client 2.1Cisco Anyconnect Secure Mobility Client 2.2Cisco Anyconnect Secure Mobility Client 2.2.128Cisco Anyconnect Secure Mobility Client 2.2.133Cisco Anyconnect Secure Mobility Client 2.2.140Cisco Anyconnect Secure Mobility Client 2.4.1012Cisco Anyconnect Secure Mobility Client 3.0
605
VMScore
CVE-2012-2496
A certain Java applet in the VPN downloader implementation in the WebLaunch feature in Cisco AnyConnect Secure Mobility Client 3.x prior to 3.0 MR7 on 64-bit Linux platforms does not properly restrict use of Java components, which allows remote malicious users to execute arbitrar...
Cisco Anyconnect Secure Mobility Client 3.0
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
path traversalCVE-2024-26978CVE-2024-26982wirelessCVE-2023-6949CVE-2024-26980CVE-2024-32766CVE-2024-26939cache poisoning
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook