Secure Desktop
Approved changes feed: RSS · Atom
cpe:2.3:a:cisco:secure_desktop:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Cisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5) |
|---|---|
| Product | Secure Desktop (9ce4646d-c21c-5eca-add7-9a46f906d4c4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2012-2495 |
vulnerable | 2026-06-08 05:02:04.691690 |
Details available
The HostScan downloader implementation in Cisco AnyConnect Secure Mobility Client 3.x before 3.0 MR8 and Cisco Secure Desktop before 3.6.6020 does not compare the timestamp of offered software to the timestamp of installed software, which allows remote attackers to force a version downgrade by using (1) ActiveX or (2) Java components to offer signed code that corresponds to an older software release, aka Bug ID CSCtx74235.
Published: 2012-06-20T20:00:00.000Z
Updated: 2024-09-16T18:28:53.930Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-0926 |
vulnerable | 2026-06-08 04:56:40.260004 |
Details available
A certain ActiveX control in CSDWebInstaller.ocx in Cisco Secure Desktop (CSD) does not properly verify the signature of an unspecified downloaded program, which allows remote attackers to execute arbitrary code by spoofing the CSD installation process, a different vulnerability than CVE-2010-0589.
Published: 2011-02-25T17:00:00.000Z
Updated: 2024-08-06T22:14:26.442Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-0925 |
vulnerable | 2026-06-08 04:56:40.259559 |
Details available
The CSDWebInstallerCtrl ActiveX control in CSDWebInstaller.ocx in Cisco Secure Desktop (CSD) allows remote attackers to download an unintended Cisco program onto a client machine, and execute this program, by identifying a Cisco program with a Cisco digital signature and then renaming this program to inst.exe, a different vulnerability than CVE-2010-0589 and CVE-2011-0926.
Published: 2011-02-28T15:00:00.000Z
Updated: 2024-08-06T22:05:54.658Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-0589 |
vulnerable | 2026-06-08 04:52:03.514018 |
Details available
The Web Install ActiveX control (CSDWebInstaller) in Cisco Secure Desktop (CSD) before 3.5.841 does not properly verify the signatures of downloaded programs, which allows remote attackers to force the download and execution of arbitrary files via a crafted web page, aka Bug ID CSCta25876.
Published: 2010-04-15T17:00:00.000Z
Updated: 2024-08-07T00:52:19.797Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-0440 |
vulnerable | 2026-06-08 04:52:02.637871 |
Details available
Cross-site scripting (XSS) vulnerability in +CSCOT+/translation in Cisco Secure Desktop 3.4.2048, and other versions before 3.5; as used in Cisco ASA appliance before 8.2(1), 8.1(2.7), and 8.0(5); allows remote attackers to inject arbitrary web script or HTML via a crafted POST parameter, which is not properly handled by an eval statement in binary/mainv.js that writes to start.html.
Published: 2010-02-03T18:00:00.000Z
Updated: 2024-08-07T00:52:17.345Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-5008 |
vulnerable | 2026-06-08 04:51:50.639522 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-5808 |
vulnerable | 2026-06-08 04:49:21.325404 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-5807 |
vulnerable | 2026-06-08 04:49:21.324995 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-5806 |
vulnerable | 2026-06-08 04:49:21.324608 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-5394 |
vulnerable | 2026-06-08 04:49:20.404016 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-5393 |
vulnerable | 2026-06-08 04:49:20.403594 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.