CVE-2019-1831: Improper Input Validation

A vulnerability in the email message scanning of Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass configured content filters on the device. The vulnerability is due to improper input validation of the email body. An attacker...

PT-2019-2127

Name of the Vulnerable Software and Affected Versions Cisco Email Security Appliance ESA versions affected versions not specified Description The issue is related to insufficient input validation in the email message scanning function. This could allow a remote attacker to bypass configured conte...

CVE-2018-15460

CVE-2018-15460 affects Cisco AsyncOS Software for Cisco Email Security Appliances (ESA). The flaw is in the email message filtering feature, caused by improper filtering of messages that reference whitelisted URLs. An unauthenticated, remote attacker can send a malicious email containing a large ...

CVE-2018-15460: Improper Input Validation

A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliances ESA could allow an unauthenticated, remote attacker to cause the CPU utilization to increase to 100 percent, causing a denial of service DoS condition on an affected device. The...

PT-2019-1184

Name of the Vulnerable Software and Affected Versions Cisco AsyncOS Software for Cisco Email Security Appliances ESA affected versions not specified Description The issue is related to insufficient input processing in the email message filtering feature, which could allow a remote attacker to cau...

PT-2019-1185

Name of the Vulnerable Software and Affected Versions Cisco Email Security Appliance ESA affected versions not specified Description The issue is related to improper input validation of S/MIME-signed emails in the Secure/Multipurpose Internet Mail Extensions S/MIME Decryption and Verification or...

CVE-2018-0447: Improper Access Control

A vulnerability in the anti-spam protection mechanisms of Cisco AsyncOS Software for the Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass certain content filters on an affected device. The vulnerability is due to incomplete input and validation checking...

PT-2018-2795

Name of the Vulnerable Software and Affected Versions Cisco Email Security Appliance ESA affected versions not specified Description A vulnerability in the anti-spam protection mechanisms of Cisco AsyncOS Software for the Cisco Email Security Appliance ESA could allow an unauthenticated, remote...

Elasticsearch ESA-2017-18

An error was found in the X-Pack Security privilege enforcement. If a user has either delete or index permissions on an index in a cluster, they may be able to issue both delete and index requests against that index. C Tenable Network Security, Inc. include"compat.inc"; if description...

Elasticsearch ESA-2018-11

A sensitive data disclosure flaw was found in the Elasticsearch repository-azure formerly elasticsearch-cloud-azure plugin. When the repository-azure plugin is set to log at TRACE level Azure credentials can be inadvertently logged. C Tenable Network Security, Inc. include"compat.inc"; if...

CVE-2018-0419

The CVE-2018-0419 issue involves Cisco Email Security Appliance (ESA). Affected component: attachment detection/filtration mechanisms. Root cause (as described): improper detection of content within executable (EXE) files, enabling a bypass of the ESA’s filtering. Exploitation scenario: unauthent...

CVE-2018-0419: Improper Input Validation

A vulnerability in certain attachment detection mechanisms of Cisco Email Security Appliances ESA could allow an unauthenticated, remote attacker to bypass the filtering functionality of an affected system. The vulnerability is due to the improper detection of content within executable EXE files...

Open redirect

The fix in Kibana for ESA-2017-23 was incomplete. With X-Pack security enabled, Kibana versions before 6.1.3 and 5.6.7 have an open redirect vulnerability on the login page that would enable an attacker to craft a link that redirects to an arbitrary website...

Elastic Stack 6.1.3 and 5.6.7 security update

Kibana incomplete fix for ESA-2017-23 ESA-2018-03 The fix in Kibana for ESA-2017-23 was incomplete. With X-Pack security enabled, Kibana versions before 6.1.3 and 5.6.7 have an open redirect vulnerability on the login page that would enable an attacker to craft a link that redirects to an arbitra...

siakad.esaunggul.ac.id XSS vulnerability

Open Bug Bounty ID: OBB-531200 Description| Value ---|--- Affected Website:| siakad.esaunggul.ac.id Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-0095: Undefined Security Weakness

A vulnerability in the administrative shell of Cisco AsyncOS on Cisco Email Security Appliance ESA and Content Security Management Appliance SMA could allow an authenticated, local attacker to escalate their privilege level and gain root access. The attacker has to have a valid user credential wi...

CVE-2017-12353

The CVE-2017-12353 issue affects Cisco AsyncOS Software on Cisco Email Security Appliances (ESA). The MIME scanner component fails to properly handle malformed MIME headers in email attachments, enabling an unauthenticated, remote attacker to bypass configured user filters by sending a crafted MI...

PT-2017-12518

Name of the Vulnerable Software and Affected Versions Cisco Email Security Appliances ESA affected versions not specified Description A vulnerability in the Multipurpose Internet Mail Extensions MIME scanner could allow an unauthenticated, remote attacker to bypass configured user filters on the...

Cisco Email Security Appliance Header Bypass Vulnerability

A vulnerability in the Simple Mail Transfer Protocol SMTP header filtering functionality of Cisco AsyncOS Software for Cisco Email Security Appliances ESA could allow an unauthenticated, remote attacker to bypass configured user filters on the device. The vulnerability is due to improper handling...

CVE-2017-12309

The CVE-2017-12309 issue affects Cisco Email Security Appliance (ESA) and Content Security Management Appliance (SMA). The root cause is improper input sanitization that enablesHTTP response splitting by an unauthenticated remote attacker, allowing potential cross-site scripting, cross-user defac...