Threat Outbreak Alert RuleID32150: Email Messages Distributing Malicious Software on March 28, 2018

Medium Alert ID: 57294 First Published: 2018 March 28 17:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32150 may contain the following files: Name | Si...

SecurEnvoy SecurMail 9.1.501 XSS / CSRF / Traversal

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple Critical Vulnerabilities product: SecurEnvoy SecurMail vulnerable version: 9.1.501 fixed version: 9.2.501 or hotfix patch "1012018" CVE number: CVE-2018-7701,...

CVE-2017-14461

A specially crafted email delivered over SMTP and passed on to Dovecot by MTA can trigger an out of bounds read resulting in potential sensitive information disclosure and denial of service. In order to trigger this vulnerability, an attacker needs to send a specially crafted email message to the...

Cisco Email Security Appliance and Cisco Content Security Management Appliance Information Disclosure Vulnerability

Cisco Email Security Appliance ESA and Cisco Content Security Management Appliance SMA are both products of Cisco USA.Cisco ESA is a set of email security appliances, which provides spam protection, email encryption, data loss protection and other functions. Cisco ESA is an email security applian...

FBI Warns Of Spike In W-2 Phishing Campaigns

The Federal Bureau of Investigation is warning businesses about a spike in phishing campaigns requesting W-2 information from payroll personnel. In a recent security advisory the FBI warned it has seen an increase since January in reports of compromised or spoofed emails involving W-2 forms. Thes...

Threat Outbreak Alert RuleID32099: Email Messages Distributing Malicious Software on February 21, 2018

Medium Alert ID: 56898 First Published: 2018 February 21 20:02 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32099 may contain the following files: Name |...

Threat Outbreak Alert RuleID32081: Email Messages Distributing Malicious Software on February 21, 2018

Medium Alert ID: 56888 First Published: 2018 February 21 20:02 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32081 may contain the following files: Name |...

Threat Outbreak Alert RuleID32058: Email Messages Distributing Malicious Software on February 19, 2018

Medium Alert ID: 56864 First Published: 2018 February 19 20:01 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32058 may contain the following files: Name |...

Threat Outbreak Alert RuleID32057: Email Messages Distributing Malicious Software on February 19, 2018

Medium Alert ID: 56865 First Published: 2018 February 19 20:01 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32057 may contain the following files: Name |...

Threat Outbreak Alert RuleID31985: Email Messages Distributing Malicious Software on February 13, 2018

Medium Alert ID: 56802 First Published: 2018 February 13 15:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31985 may contain the following files: Name |...

Threat Outbreak Alert RuleID31961: Email Messages Distributing Malicious Software on February 9, 2018

Medium Alert ID: 56782 First Published: 2018 February 9 20:52 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31961 may contain the following files: Name |...

CVE-2018-0140

A vulnerability in the spam quarantine of Cisco Email Security Appliance and Cisco Content Security Management Appliance could allow an authenticated, remote attacker to download any message from the spam quarantine by modifying browser string information. The vulnerability is due to a lack of...

CVE-2018-0140

A vulnerability in the spam quarantine of Cisco Email Security Appliance and Cisco Content Security Management Appliance could allow an authenticated, remote attacker to download any message from the spam quarantine by modifying browser string information. The vulnerability is due to a lack of...

CVE-2018-0140

A vulnerability in the spam quarantine of Cisco Email Security Appliance and Cisco Content Security Management Appliance could allow an authenticated, remote attacker to download any message from the spam quarantine by modifying browser string information. The vulnerability is due to a lack of...

Design/Logic Flaw

A vulnerability in the spam quarantine of Cisco Email Security Appliance and Cisco Content Security Management Appliance could allow an authenticated, remote attacker to download any message from the spam quarantine by modifying browser string information. The vulnerability is due to a lack of...

CVE-2018-0140

A vulnerability in the spam quarantine of Cisco Email Security Appliance and Cisco Content Security Management Appliance could allow an authenticated, remote attacker to download any message from the spam quarantine by modifying browser string information. The vulnerability is due to a lack of...

CVE-2018-0140

A vulnerability in the spam quarantine of Cisco Email Security Appliance and Cisco Content Security Management Appliance could allow an authenticated, remote attacker to download any message from the spam quarantine by modifying browser string information. The vulnerability is due to a lack of...

CVE-2018-0140

The CVE-2018-0140 issue affects Cisco Email Security Appliance (ESA) and Cisco Content Security Management Appliance (CSMA). It stems from a lack of verification of authenticated user accounts, enabling an authenticated remote attacker to download arbitrary messages from the spam quarantine by mo...

Cisco Email Security Appliance and Cisco Content Security Management Appliance Spam Quarantine Vulnerability

A vulnerability in the spam quarantine of Cisco Email Security Appliance and Cisco Content Security Management Appliance could allow an authenticated, remote attacker to download any message from the spam quarantine by modifying browser string information. The vulnerability is due to a lack of...

Kaspersky Secure Mail Gateway Cross-Site Scripting Vulnerability

Kaspersky Secure Mail Gateway is an email security solution from Russia's Kaspersky Lab. The program is able to automatically filter spam, phishing sites and various malicious attachments. A cross-site scripting vulnerability exists in Kaspersky Secure Mail Gateway version 1.1. A remote attacker...