Show filters
160 Total Results
Displaying 111-120 of 160
Sort by:
Attacker Value
Unknown
CVE-2013-5559
Disclosure Date: November 04, 2013 (last updated October 05, 2023)
Buffer overflow in the Active Template Library (ATL) framework in the VPNAPI COM module in Cisco AnyConnect Secure Mobility Client 2.x allows user-assisted remote attackers to execute arbitrary code via a crafted HTML document, aka Bug ID CSCuj58139.
0
Attacker Value
Unknown
CVE-2013-1130
Disclosure Date: September 20, 2013 (last updated October 05, 2023)
Cisco AnyConnect Secure Mobility Client on Mac OS X uses weak permissions for a library directory, which allows local users to gain privileges via a crafted library file, aka Bug ID CSCue33619.
0
Attacker Value
Unknown
CVE-2013-1172
Disclosure Date: April 11, 2013 (last updated October 05, 2023)
The Cisco Security Service in Cisco AnyConnect Secure Mobility Client (aka AnyConnect VPN Client) does not properly verify files, which allows local users to gain privileges via unspecified vectors, aka Bug ID CSCud14153.
0
Attacker Value
Unknown
CVE-2013-1173
Disclosure Date: April 11, 2013 (last updated October 05, 2023)
Heap-based buffer overflow in ciscod.exe in the Cisco Security Service in Cisco AnyConnect Secure Mobility Client (aka AnyConnect VPN Client) allows local users to gain privileges via unspecified vectors, aka Bug ID CSCud14143.
0
Attacker Value
Unknown
CVE-2012-3088
Disclosure Date: September 16, 2012 (last updated October 05, 2023)
Cisco AnyConnect Secure Mobility Client 3.1.x before 3.1.00495, and 3.2.x, does not check whether an HTTP request originally contains ScanSafe headers, which allows remote attackers to have an unspecified impact via a crafted request, aka Bug ID CSCua13166.
0
Attacker Value
Unknown
CVE-2012-3094
Disclosure Date: September 16, 2012 (last updated October 05, 2023)
The VPN downloader in the download_install component in Cisco AnyConnect Secure Mobility Client 3.1.x before 3.1.00495 on Linux accepts arbitrary X.509 server certificates without user interaction, which allows remote attackers to obtain sensitive information via vectors involving an invalid certificate, aka Bug ID CSCua11967.
0
Attacker Value
Unknown
CVE-2010-5203
Disclosure Date: September 06, 2012 (last updated October 05, 2023)
Multiple untrusted search path vulnerabilities in NCP Secure Enterprise Client before 9.21 Build 68, Secure Entry Client before 9.23 Build 18, and Secure Client - Juniper Edition before 9.23 Build 18 allow local users to gain privileges via a Trojan horse (1) dvccsabase002.dll, (2) conman.dll, (3) kmpapi32.dll, or (4) ncpmon2.dll file in the current working directory, as demonstrated by a directory that contains a .pcf or .spd file. NOTE: some of these details are obtained from third party information.
0
Attacker Value
Unknown
CVE-2012-2500
Disclosure Date: August 06, 2012 (last updated October 04, 2023)
Cisco AnyConnect Secure Mobility Client 3.0 before 3.0.08057 does not verify the certificate name in an X.509 certificate during WebLaunch of IPsec, which allows man-in-the-middle attackers to spoof servers via a crafted certificate, aka Bug ID CSCtz29470.
0
Attacker Value
Unknown
CVE-2012-2499
Disclosure Date: August 06, 2012 (last updated October 04, 2023)
The IPsec implementation in Cisco AnyConnect Secure Mobility Client 3.0 before 3.0.08057 does not verify the certificate name in an X.509 certificate, which allows man-in-the-middle attackers to spoof servers via a crafted certificate, aka Bug ID CSCtz26985.
0
Attacker Value
Unknown
CVE-2012-2498
Disclosure Date: August 06, 2012 (last updated October 04, 2023)
Cisco AnyConnect Secure Mobility Client 3.0 through 3.0.08066 does not ensure that authentication makes use of a legitimate certificate, which allows user-assisted man-in-the-middle attackers to spoof servers via a crafted certificate, aka Bug ID CSCtz29197.
0
