CVE-2023-23954: Improper Neutralization of Input During Web Page Generation

Advanced Secure Gateway and Content Analysis, prior to 7.3.13.1 / 3.1.6.0, may be susceptible to a Stored Cross-Site Scripting vulnerability...

CVE-2023-23952

Advanced Secure Gateway and Content Analysis, prior to 7.3.13.1 / 3.1.6.0, may be susceptible to a Command Injection vulnerability...

CVE-2023-23952: Improper Neutralization of Special Elements used in a Command

Advanced Secure Gateway and Content Analysis, prior to 7.3.13.1 / 3.1.6.0, may be susceptible to a Command Injection vulnerability...

CVE-2023-23955: Server-Side Request Forgery (SSRF)

Advanced Secure Gateway and Content Analysis, prior to 7.3.13.1 / 3.1.6.0, may be susceptible to a Server-Side Request Forgery vulnerability...

PT-2023-19320 · Unknown · Advanced Secure Gateway/Content Analysis

Name of the Vulnerable Software and Affected Versions: Advanced Secure Gateway and Content Analysis versions prior to 7.3.13.1 / 3.1.6.0 Description: The issue is related to a Stored Cross-Site Scripting vulnerability. No information is provided about the estimated number of potentially affected...

CVE-2023-23954

Broadcom Advanced Secure Gateway (ASG) and Content Analysis are affected by CVE-2023-23954, a Stored Cross‑Site Scripting vulnerability in ASG prior to v7.3.13.1 and Content Analysis prior to v3.1.6.0. The description indicates a stored XSS issue but provides no exploitation details. Rationale an...

CVE-2023-23952

Advanced Secure Gateway and Content Analysis, prior to 7.3.13.1 / 3.1.6.0, may be susceptible to a Command Injection vulnerability...

PT-2023-19318 · Unknown · Advanced Secure Gateway/Content Analysis

Name of the Vulnerable Software and Affected Versions: Advanced Secure Gateway and Content Analysis versions prior to 7.3.13.1 / 3.1.6.0 Description: The issue is related to a Command Injection vulnerability. Recommendations: For versions prior to 7.3.13.1 / 3.1.6.0, update to version 7.3.13.1 /...

CVE-2023-23955

Advanced Secure Gateway and Content Analysis, prior to 7.3.13.1 / 3.1.6.0, may be susceptible to a Server-Side Request Forgery vulnerability...

CVE-2023-23955

CVE-2023-23955 affects Broadcom’s Advanced Secure Gateway and Content Analysis: versions prior to 7.3.13.1 and 3.1.6.0 are susceptible to a Server-Side Request Forgery (SSRF) vulnerability. The available connected documents confirm the product family and vulnerable version ranges, with remediatio...

Broadcom Advanced Secure Gateway 跨站脚本漏洞

Broadcom Advanced Secure Gateway ASG is a secure web gateway appliance from Broadcom. A cross-site scripting vulnerability exists in Broadcom Advanced Secure Gateway versions prior to 7.3.13.1, Content Analysis versions prior to 3.1.6.0, which stems from susceptibility to stored cross-site...

CVE-2023-23953: Undefined Security Weakness

Advanced Secure Gateway and Content Analysis, prior to 7.3.13.1 / 3.1.6.0, may be susceptible to an Elevation of Privilege vulnerability...

CVE-2023-23953

The CVE-2023-23953 entry applies to Broadcom Advanced Secure Gateway (ASG) and Content Analysis, affected before 7.3.13.1 and 3.1.6.0. The root cause is an Elevation of Privilege vulnerability reported across multiple sources. Impact is described as potential privilege escalation on affected appl...

PT-2023-19319 · Unknown · Advanced Secure Gateway/Content Analysis

Name of the Vulnerable Software and Affected Versions: Advanced Secure Gateway and Content Analysis versions prior to 7.3.13.1 / 3.1.6.0 Description: The issue is related to an Elevation of Privilege vulnerability. Recommendations: For versions prior to 7.3.13.1 / 3.1.6.0, update to version...

Sherloq - An Open-Source Digital Image Forensic Toolset

An open source image forensic toolset Introduction "Forensic ImageAnalysis is the application of image science and domain expertise to interpret the content of an image and/or the image itself in legal matters. Major subdisciplines of Forensic Image Analysis with law enforcement applications...

Symantec Content Analysis < 2.3.1.1 affected by Multiple Vulnerabilities (SYMSA1410)

The version of Symantec Content Analysis running on the remote host is prior to version 2.3.1.1. It is, therefore, affected by multiple vulnerabilities: - A vulnerability in Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, modmime can read one byte past the end of a buffer when sending a...

Symantec Content Analysis 2.3 < 2.3.1.1 affected by Multiple Vulnerabilities (SYMSA1377)

The version of Symantec Content Analysis running on the remote host is prior to version 2.3.1.1. It is, therefore, affected by a vulnerability in the xmlBufAttrSerializeTxtContent function in xmlsave.c in libxml2 allows context-dependent attackers to cause a denial of service out-of-bounds read a...

Symantec Content Analysis < 2.3.5.1 affected by Multiple Vulnerabilities (SYMSA1419)

The version of Symantec Content Analysis running on the remote host is prior to version 2.3.5.1. It is, therefore, affected by multiple vulnerabilities: - A bug in the handling of the pipelined requests in Apache Tomcat 9.0.0.M1 to 9.0.0.M18, 8.5.0 to 8.5.12, 8.0.0.RC1 to 8.0.42, 7.0.0 to 7.0.76,...

Symantec Content Analysis < 2.3.5.1 affected by Multiple Vulnerabilities (SYMSA1451)

The version of Symantec Content Analysis running on the remote host is prior to version 2.3.5.1. It is, therefore, affected by multiple vulnerabilities: - Buffer overflow in the decodearr function in ntpq in ntp 4.2.8p6 through 4.2.8p10 allows remote attackers to execute arbitrary code by...

Symantec Content Analysis < 2.3.5.1 affected by Multiple Vulnerabilities (SYMSA1463)

The version of Symantec Content Analysis running on the remote host is prior to version 2.3.5.1. It is, therefore, affected by multiple vulnerabilities: - An improper handing of overflow in the UTF-8 decoder with supplementary characters can lead to an infinite loop in the decoder causing a Denia...