CVE-2017-12215

A vulnerability in the email message filtering feature of Cisco AsyncOS Software for the Cisco Email Security Appliance could allow an unauthenticated, remote attacker to cause an affected device to run out of memory and stop scanning and forwarding email messages. When system memory is depleted,...

Microsoft Exchange Server Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access OWA fails to properly handle web requests. An attacker who successfully exploited this vulnerability could perform script/content injection attacks and attempt to trick the user into disclosing sensitive...

CVE-2017-6418

libclamav/message.c in ClamAV 0.99.2 allows remote attackers to cause a denial of service out-of-bounds read via a crafted e-mail message...

Threat Outbreak Alert RuleID29961: Email Messages Distributing Malicious Software on July 27, 2017

Medium Alert ID: 54603 First Published: 2017 July 27 16:21 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29961 may contain the following files: Name | Siz...

Microsoft Exchange Server Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access OWA fails to properly handle web requests. An attacker who successfully exploited this vulnerability could perform script/content injection attacks and attempt to trick the user into disclosing sensitive...

Cisco Email Security Appliance Attachment Filter Bypass Vulnerability

A vulnerability in the email message scanning of Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass configured filters on the device. The vulnerability is due to improper input validation of an email with an attachment and...

Threat Outbreak Alert RuleID29169: Email Messages Distributing Malicious Software on May 17, 2017

Medium Alert ID: 53869 First Published: 2017 May 17 17:19 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29169 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID29036: Email Messages Distributing Malicious Software on May 5, 2017

Medium Alert ID: 53735 First Published: 2017 May 5 19:40 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29036 may contain the following files: Name | Size ...

Code injection

Kerio Connect 8.0.0 through 9.2.2, and Kerio Connect Client desktop application for Windows and Mac 9.2.0 through 9.2.2, when e-mail preview is enabled, allows remote attackers to conduct clickjacking attacks via a crafted e-mail message...

Threat Outbreak Alert RuleID28551: Email Messages Distributing Malicious Software on March 31, 2017

Medium Alert ID: 53244 First Published: 2017 March 31 15:00 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28551 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID28352: Email Messages Distributing Malicious Software on March 23, 2017

Medium Alert ID: 53137 First Published: 2017 March 23 16:00 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28352 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID28097: Email Messages Distributing Malicious Software on March 2, 2017

Medium Alert ID: 52856 First Published: 2017 March 2 19:50 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28097 may contain the following files: Name | Siz...

CVE-2016-4552

Cross-site scripting XSS vulnerability in Roundcube Webmail before 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the href attribute in an area tag in an e-mail message...

CVE-2016-4552

Cross-site scripting XSS vulnerability in Roundcube Webmail before 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the href attribute in an area tag in an e-mail message...

CVE-2016-4552

Cross-site scripting XSS vulnerability in Roundcube Webmail before 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the href attribute in an area tag in an e-mail message...

Threat Outbreak Alert RuleID25685: Email Messages Distributing Malicious Software on October 20, 2016

Medium Alert ID: 49365 First Published: 2016 October 20 14:39 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25685 may contain the following files: Name |...

CVE-2016-4575

Cross-site scripting XSS vulnerability in the email APP in Huawei PLK smartphones with software AL10C00 before AL10C00B211 and AL10C92 before AL10C92B211; ATH smartphones with software AL00C00 before AL00C00B361, CL00C92 before CL00C92B361, TL00HC01 before TL00HC01B361, and UL00C00 before...

Design/Logic Flaw

Cybozu Office 10.3.0 allows remote attackers to read image files via a crafted e-mail message, a different vulnerability than CVE-2015-8487...

Cisco Advanced Malware Protection and Email Security Appliance Proxy Engine Security Bypass Vulnerability

A vulnerability in the proxy engine of the Cisco Advanced Malware Protection AMP and the Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass security restrictions. The vulnerability is due to improper handling of malformed file methods. An attacker could...

CVE-2016-0059

The Hyperlink Object Library in Microsoft Internet Explorer 9 through 11 allows remote attackers to obtain sensitive information from process memory via a crafted URL in a 1 e-mail message or 2 Office document, aka "Internet Explorer Information Disclosure Vulnerability."...