eea.spaceflight.esa.int Cross Site Scripting vulnerability OBB-1306904

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

CVE-2020-3546

CVE-2020-3546 affects Cisco Email Security Appliance (ESA) running Cisco AsyncOS. The issue stems from insufficient validation of requests to the web-based management interface, allowing an unauthenticated, remote attacker to access sensitive information. Exploitation could disclose IP addresses ...

CVE-2020-3546: Improper Input Validation

A vulnerability in the web-based management interface of Cisco AsyncOS software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to access sensitive information on an affected device. The vulnerability is due to insufficient validation of requests that are se...

PT-2020-4264

Name of the Vulnerable Software and Affected Versions: Cisco Email Security Appliance ESA affected versions not specified Description: A vulnerability in the web-based management interface of Cisco AsyncOS software could allow an unauthenticated, remote attacker to access sensitive information on...

CVE-2020-3368 Cisco Email Security Appliance URL Filtering Bypass Vulnerability

A vulnerability in the antispam protection mechanisms of Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass the URL reputation filters on an affected device. The vulnerability is due to insufficient input validation of URLs. An...

PT-2020-2977

Name of the Vulnerable Software and Affected Versions Cisco Email Security Appliance ESA affected versions not specified Description A vulnerability in the antispam protection mechanisms of Cisco AsyncOS Software could allow an unauthenticated, remote attacker to bypass the URL reputation filters...

Cisco Email Security Appliance Uncontrolled Resource Exhaustion Vulnerability

According to its self-reported version, Cisco Email Security Appliance ESA is affected by a vulnerability. Please see the included Cisco BIDs and Cisco Security Advisory for more information. TRUSTED...

Cisco Email Security Appliance (ESA) GUI Denial of Service Vulnerability

According to its self-reported version, the Cisco Email Security Appliance ESA is affected by a Denial of Service vulnerability. The vulnerability is due to improper validation of specific HTTP request headers. An attacker could exploit this vulnerability by sending a malformed HTTP request to an...

Cisco ESA, Cisco WSA, and Cisco SMA GUI Denial of Service Vulnerability

A vulnerability in the web-based management interface of Cisco AsyncOS for Cisco Email Security Appliance ESA, Cisco Web Security Appliance WSA, and Cisco Content Security Management Appliance SMA could allow an unauthenticated remote attacker to cause high CPU usage on an affected device,...

Cisco Email Security Appliance Denial of Service Vulnerability (CSCvo89192)

According to its self-reported version, Cisco Email Security Appliance ESA is affected by an input-validation flaw related to the email message filtering feature that allows denial of service attacks. Please see the included Cisco BID and Cisco Security Advisory for more information TRUSTED...

CVE-2020-3132 Cisco Email Security Appliance Shortened URL Denial of Service Vulnerability

A vulnerability in the email message scanning feature of Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to cause a temporary denial of service DoS condition on an affected device. The vulnerability is due to inadequate parsing...

CVE-2020-3132

Cisco AsyncOS for Cisco Email Security Appliance (ESA) is affected by CVE-2020-3132, a Denial of Service vulnerability in the email message scanning component caused by inadequate parsing of specific email body components. An unauthenticated, remote attacker can trigger a temporary DoS by sending...

PT-2020-1731

Name of the Vulnerable Software and Affected Versions Cisco Email Security Appliance ESA affected versions not specified Description A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote...

CVE-2020-3132: Uncontrolled Resource Consumption

A vulnerability in the email message scanning feature of Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to cause a temporary denial of service DoS condition on an affected device. The vulnerability is due to inadequate parsing...

PT-2020-7898

Name of the Vulnerable Software and Affected Versions: Exynos Seiren Audio driver affected versions not specified Description: The issue concerns multiple buffer overflows in the esa write function, located in /dev/seiren, which is part of the Exynos Seiren Audio driver used in devices such as th...

CVE-2020-3134

Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) is affected by CVE-2020-3134 due to an improper validation of zip files in the zip decompression engine. The issue can be exploited by sending an email with a crafted zip- compressed attachment, potentially triggering a restart of th...

CVE-2020-3134: Improper Input Validation

A vulnerability in the zip decompression engine of Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper validation of zip files. An...

Cisco Email Security Appliance Content Filter Bypass Vulnerability

A vulnerability in the email message scanning of Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass configured filters on the device. The vulnerability is due to improper validation of incoming emails. An attacker could exploit...

PT-2020-1649

Name of the Vulnerable Software and Affected Versions Cisco Email Security Appliance ESA affected versions not specified Description A vulnerability in the email message scanning of Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to...

PT-2020-1648

Name of the Vulnerable Software and Affected Versions Cisco Email Security Appliance ESA affected versions not specified Description A vulnerability in the web-based management interface of Cisco Email Security Appliance ESA exists due to improper validation of user-supplied input. This could all...