Malicious code in @zalastax/nolb-esa (npm)

The package @zalastax/nolb-esa was found to contain malicious code...

MAL-2025-11288 Malicious code in @zalastax/nolb-esa (npm)

The package @zalastax/nolb-esa was found to contain malicious code...

CVE-2023-49488

A cross-site scripting XSS vulnerability in Openfiler ESA v2.99.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the nic parameter...

CISCO-SA-20190703-ESA

creationtimestamp| type| source ---|---|--- 2024-12-17 06:41:52+00:00| seen| https://social.circl.lu/users/vulnerabilitylookup/statuses/113666794652216265...

CISCO-SA-20190417-ESA

creationtimestamp| type| source ---|---|--- 2024-12-17 06:41:42+00:00| seen| https://social.circl.lu/users/vulnerabilitylookup/statuses/113666793539871871...

CVE-2020-3548: Inefficient Algorithmic Complexity

A vulnerability in the Transport Layer Security TLS protocol implementation of Cisco AsyncOS software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to cause high CPU usage on an affected device, resulting in a denial of service DoS condition. The...

CVE-2024-10659

CVE-2024-10659 affects ESAFENET CDG 5. The vulnerability lies in the delSystemEncryptPolicy function of /com/esafenet/servlet/document/CDGAuthoriseTempletService.java, where manipulation of the id argument enables SQL injection. The issue can be exploited remotely and, per the initial records, th...

CVE-2024-10069 ESAFENET CDG MailDecryptApplicationService.java actionPassMainApplication sql injection

A vulnerability was found in ESAFENET CDG 5. It has been rated as critical. Affected by this issue is the function actionPassMainApplication of the file /com/esafenet/servlet/client/MailDecryptApplicationService.java. The manipulation of the argument id leads to sql injection. The attack may be...

CVE-2024-42885

SQL Injection vulnerability in ESAFENET CDG 5.6 and before allows an attacker to execute arbitrary code via the id parameter of the data.jsp page...

Cisco Ironport Bruteforce Login Utility

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Cisco Ironport Bruteforce Login Utility', 'Description' = % This module scans for Cisco Ironport SMA, WSA and ESA web login portals, finds AsyncO...

Kibana 7.7.x < 7.17.23 / 8.0.x < 8.14.2 (ESA-2024-22)

The version of Kibana installed on the remote host is prior to 7.17.23 or 8.14.2. It is, therefore, affected by a vulnerability as referenced in the ESA-2024-22 advisory. - A flaw allowing arbitrary code execution was discovered in Kibana. An attacker with access to ML and Alerting connector...

Kibana 8.6.3 < 8.14 (ESA-2024-15)

The version of Kibana installed on the remote host is between 8.6.3 and 8.13.4. It is, therefore, affected by a vulnerability as referenced in the ESA-2024-15 advisory. - A flaw was discovered in Kibana, allowing view-only users of alerting to use the runsoon API making the alerting rule run...

Cisco Secure Email and Web Manager, Secure Email Gateway, and Secure Web Appliance Cross-Site Scripting Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager; Secure Email Gateway, formerly Email Security Appliance ESA; and Secure Web Appliance could allow a remote attacker to conduct a cross-site scripting XSS attack against...

CVE-2023-49488

A cross-site scripting XSS vulnerability in Openfiler ESA v2.99.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the nic parameter...

CVE-2023-49488

A cross-site scripting XSS vulnerability in Openfiler ESA v2.99.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the nic parameter...

Cross site scripting

A cross-site scripting XSS vulnerability in Openfiler ESA v2.99.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the nic parameter...

CVE-2023-49488

CVE-2023-49488 describes a cross-site scripting (XSS) vulnerability in Openfiler ESA v2.99.1. The issue permits injection of crafted payloads into the nic parameter to execute arbitrary web scripts or HTML. Documented impacts are user interaction is required and affected confidentiality/ integrit...

CVE-2023-49488: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in Openfiler ESA v2.99.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the nic parameter...

CVE-2023-49488

A cross-site scripting XSS vulnerability in Openfiler ESA v2.99.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the nic parameter...

PT-2023-31241

Name of the Vulnerable Software and Affected Versions Openfiler ESA version 2.99.1 Description A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML by injecting a crafted payload into the nic parameter. This enables the execution of malicious code on the...