https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2021-35650.htmlhttps://patchthecve.com/cve/CVE-2021-35650.htmlWed, 17 Jun 2026 03:57:55 +0000MEDIUM 4.6: Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Client). The supported version that is affected is 5.6. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise Oracle Secure Global Desktophttps://patchthecve.com/cve/CVE-2021-35649.htmlhttps://patchthecve.com/cve/CVE-2021-35649.htmlWed, 17 Jun 2026 03:57:55 +0000MEDIUM 5.4: Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Server). The supported version that is affected is 5.6. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise Oracle Secure Global Desktophttps://patchthecve.com/cve/CVE-2021-2447.htmlhttps://patchthecve.com/cve/CVE-2021-2447.htmlWed, 17 Jun 2026 03:49:31 +0000CRITICAL 9.9: Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Server). The supported version that is affected is 5.6. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise Oracle Secure Global Desktophttps://patchthecve.com/cve/CVE-2021-2446.htmlhttps://patchthecve.com/cve/CVE-2021-2446.htmlWed, 17 Jun 2026 03:49:31 +0000CRITICAL 9.6: Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Client). The supported version that is affected is 5.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Secure Global Desktohttps://patchthecve.com/cve/CVE-2021-2248.htmlhttps://patchthecve.com/cve/CVE-2021-2248.htmlWed, 17 Jun 2026 03:49:07 +0000CRITICAL 10.0: Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Server). The supported version that is affected is 5.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Secure Global Desktohttps://patchthecve.com/cve/CVE-2021-2221.htmlhttps://patchthecve.com/cve/CVE-2021-2221.htmlWed, 17 Jun 2026 03:49:04 +0000CRITICAL 9.6: Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Client). The supported version that is affected is 5.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Secure Global Desktohttps://patchthecve.com/cve/CVE-2021-2177.htmlhttps://patchthecve.com/cve/CVE-2021-2177.htmlWed, 17 Jun 2026 03:48:58 +0000CRITICAL 10.0: Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Gateway). The supported version that is affected is 5.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Secure Global Deskthttps://patchthecve.com/cve/CVE-2018-19439.htmlhttps://patchthecve.com/cve/CVE-2018-19439.htmlWed, 17 Jun 2026 01:49:18 +0000MEDIUM 6.1: XSS exists in the Administration Console in Oracle Secure Global Desktop 4.4 20080807152602 (but was fixed in later versions including 5.4). helpwindow.jsp has reflected XSS via all parameters, as demonstrated by the sgdadmin/faces/com_sun_web_ui/help/helpwindow.jsp windowTitle parameter.https://patchthecve.com/cve/CVE-2016-5580.htmlhttps://patchthecve.com/cve/CVE-2016-5580.htmlWed, 17 Jun 2026 00:49:41 +0000CRITICAL 9.6: Unspecified vulnerability in the Secure Global Desktop component in Oracle Virtualization 4.7 and 5.2 allows remote authenticated users to affect confidentiality and availability via vectors through Web Services.https://patchthecve.com/cve/CVE-2016-3613.htmlhttps://patchthecve.com/cve/CVE-2016-3613.htmlWed, 17 Jun 2026 00:46:04 +0000CRITICAL 9.8: Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 4.63, 4.71, and 5.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to OpenSSL.https://patchthecve.com/cve/CVE-2016-0501.htmlhttps://patchthecve.com/cve/CVE-2016-0501.htmlWed, 17 Jun 2026 00:37:39 +0000MEDIUM 5.0: Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5.2 allows remote attackers to affect availability via vectors related to SGD Core.https://patchthecve.com/cve/CVE-2014-0226.htmlhttps://patchthecve.com/cve/CVE-2014-0226.htmlWed, 17 Jun 2026 00:02:34 +0000MEDIUM 6.8: Race condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote attackers to cause a denial of service (heap-based buffer overflow), or possibly obtain sensitive credential information or execute arbitrary code, via a crafted request that triggers improper scoreboard hahttps://patchthecve.com/cve/CVE-2014-0098.htmlhttps://patchthecve.com/cve/CVE-2014-0098.htmlWed, 17 Jun 2026 00:02:15 +0000MEDIUM 5.0: The log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP Server before 2.4.8 allows remote attackers to cause a denial of service (segmentation fault and daemon crash) via a crafted cookie that is not properly handled during truncation.https://patchthecve.com/cve/CVE-2013-2064.htmlhttps://patchthecve.com/cve/CVE-2013-2064.htmlTue, 16 Jun 2026 23:52:40 +0000MEDIUM 6.8: Integer overflow in X.org libxcb 1.9 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the read_packet function.https://patchthecve.com/cve/CVE-2006-5201.htmlhttps://patchthecve.com/cve/CVE-2006-5201.htmlTue, 16 Jun 2026 22:30:43 +0000MEDIUM 4.0: Multiple packages on Sun Solaris, including (1) NSS; (2) Java JDK and JRE 5.0 Update 8 and earlier, SDK and JRE 1.4.x up to 1.4.2_12, and SDK and JRE 1.3.x up to 1.3.1_19; (3) JSSE 1.0.3_03 and earlier; (4) IPSec/IKE; (5) Secure Global Desktop; and (6) StarOffice, when using an RSA key with exponenthttps://patchthecve.com/cve/CVE-2006-4959.htmlhttps://patchthecve.com/cve/CVE-2006-4959.htmlTue, 16 Jun 2026 22:30:12 +0000MEDIUM 5.0: Sun Secure Global Desktop (SSGD, aka Tarantella) before 4.3 allows remote attackers to obtain sensitive information, including hostnames, versions, and settings details, via unspecified vectors, possibly involving (1) taarchives.cgi, (2) ttaAuthentication.jsp, (3) ttalicense.cgi, (4) ttawlogin.cgi, https://patchthecve.com/cve/CVE-2006-4958.htmlhttps://patchthecve.com/cve/CVE-2006-4958.htmlTue, 16 Jun 2026 22:30:12 +0000MEDIUM 6.8: Multiple cross-site scripting (XSS) vulnerabilities in Sun Secure Global Desktop (SSGD, aka Tarantella) before 4.20.983 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving (1) taarchives.cgi, (2) ttaAuthentication.jsp, (3) ttalicense.cgi, (4) tthttps://patchthecve.com/cve/CVE-2005-0486.htmlhttps://patchthecve.com/cve/CVE-2005-0486.htmlTue, 16 Jun 2026 22:11:13 +0000MEDIUM 5.0: Tarantella Secure Global Desktop Enterprise Edition 4.00 and 3.42, and Tarantella Enterprise 3 3.40 and 3.30, when using RSA SecurID and multiple users have the same username, reveals sensitive information during authentication, which allows remote attackers to identify valid usernames and the authe