The vulnerability of the detection mechanism of Cisco Email Security Appliance (ESA) allows attackers to bypass the configured content filters and compromise the integrity of the protected information.

The vulnerability of the detection mechanism of Cisco Email Security Appliance’s email security system is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass the configured content filters and compromise the integrity of the protected...

CVE-2013-6242

CVE-2013-6242 describes a cross-site scripting (XSS) flaw in the frontend of Open-Xchange (OX) AppSuite. It affects Open-Xchange AppSuite 6.22.3 before 6.22.3-rev5 and 6.22.4 before 6.22.4-rev12, where an attacker can inject arbitrary script/HTML via the subject of an email sent to the frontend. ...

SonicWall Email Security Appliance Trust Management Issue Vulnerability

SonicWall Email Security Appliance is an email security appliance from SonicWall USA. A vulnerability with trust management issues exists in SonicWall Email Security Appliance version 10.0.2 and earlier. The vulnerability stems from the lack of an effective trust management mechanism in a network...

CVE-2019-7488

Weak default password cause vulnerability in SonicWall Email Security appliance which leads to attacker gain access to appliance database. This vulnerability affected Email Security Appliance version 10.0.2 and earlier...

CVE-2019-7488

Weak default password cause vulnerability in SonicWall Email Security appliance which leads to attacker gain access to appliance database. This vulnerability affected Email Security Appliance version 10.0.2 and earlier...

CVE-2019-7489

A vulnerability in SonicWall Email Security appliance allow an unauthenticated user to perform remote code execution. This vulnerability affected Email Security Appliance version 10.0.2 and earlier...

CVE-2019-7489

A vulnerability in SonicWall Email Security appliance allow an unauthenticated user to perform remote code execution. This vulnerability affected Email Security Appliance version 10.0.2 and earlier...

Default credentials

Weak default password cause vulnerability in SonicWall Email Security appliance which leads to attacker gain access to appliance database. This vulnerability affected Email Security Appliance version 10.0.2 and earlier...

Remote code execution

A vulnerability in SonicWall Email Security appliance allow an unauthenticated user to perform remote code execution. This vulnerability affected Email Security Appliance version 10.0.2 and earlier...

CVE-2019-7488

Weak default password cause vulnerability in SonicWall Email Security appliance which leads to attacker gain access to appliance database. This vulnerability affected Email Security Appliance version 10.0.2 and earlier...

CVE-2019-7488

SonicWall Email Security Appliance (affected up to version 10.0.2 and earlier) is vulnerable to CVE-2019-7488 due to a weak/default credential/credentials issue, allowing an attacker to gain access to the appliance database. Multiple connected sources (Red Hat advisory, CNVD entry, NVD record, an...

CVE-2019-7489

CVE-2019-7489 : SonicWall Email Security Appliance suffers unauthenticated remote code execution on the device, affecting version 10.0.2 and earlier. The vulnerability enables an attacker with network access to execute arbitrary code with high impact on confidentiality, integrity, and availabilit...

CVE-2019-7489

A vulnerability in SonicWall Email Security appliance allow an unauthenticated user to perform remote code execution. This vulnerability affected Email Security Appliance version 10.0.2 and earlier...

Email Security Weak Default Credential

Weak default password cause vulnerability in SonicWall Email Security appliance which leads to attacker gain access to appliance database. This vulnerability affected Email Security Appliance up to 10.0.2, 9.2.3 and earlier. CVE: CVE-2019-7488 Last updated: Dec. 23, 2019, 8 p.m...

Email Security Unauthenticated Remote Code Execution

A vulnerability in SonicWall Email Security appliance allow an unauthenticated user to perform remote code execution. This vulnerability affected Email Security Appliance version 10.0.2 and earlier. CVE: CVE-2019-7489 Last updated: Dec. 23, 2019, 8 p.m...

CVE-2019-8599

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 12.3. A person with physical access to an iOS device may be able to see the email address used for iTunes...

The vulnerability of the Secure/Multipurpose Internet Mail Extentions (S/MIME) and PGP email client Thunderbird functions allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Secure/Multipurpose Internet Mail Extentions S/MIME and PGP email client Thunderbird lies in the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through...

Spear phishing campaigns—they’re sharper than you think

Even your most security-savvy users may have difficulty identifying honed spear phishing campaigns. Unlike traditional phishing campaigns that are blasted to a large email list in hopes that just one person will bite, advanced spear phishing campaigns are highly targeted and personal. They are so...

CVE-2019-15971

A vulnerability in the MP3 detection engine of Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass configured content filters on the device. The vulnerability is due to improper validation of certain MP3 file types. An attacker...

CVE-2019-15988

A vulnerability in the antispam protection mechanisms of Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass the URL reputation filters on an affected device. The vulnerability is due to insufficient input validation of URLs. An...