3575 matches found
Threat Outbreak Alert RuleID31473: Email Messages Distributing Malicious Software on December 11, 2017
Medium Alert ID: 56221 First Published: 2017 December 11 17:58 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31473 may contain the following files: Name |...
Threat Outbreak Alert RuleID31500: Email Messages Distributing Malicious Software on December 4, 2017
Medium Alert ID: 56120 First Published: 2017 December 4 15:05 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31500 may contain the following files: Name |...
Cisco Email Security Appliance Security Bypass Vulnerability (CNVD-2017-36396)
The Cisco Email Security Appliance ESA is an email security appliance from Cisco in the U.S. AsyncOS Software is the operating system used in it.Multipurpose Internet Mail Extensions MIME AsyncOS Software is the operating system used in it. Multipurpose Internet Mail Extensions MIME scanner is on...
CVE-2017-12353
A vulnerability in the Multipurpose Internet Mail Extensions MIME scanner of Cisco AsyncOS Software for Cisco Email Security Appliances ESA could allow an unauthenticated, remote attacker to bypass configured user filters on the device. The vulnerability is due to improper error handling of a...
Input validation
A vulnerability in the Multipurpose Internet Mail Extensions MIME scanner of Cisco AsyncOS Software for Cisco Email Security Appliances ESA could allow an unauthenticated, remote attacker to bypass configured user filters on the device. The vulnerability is due to improper error handling of a...
CVE-2017-12353
A vulnerability in the Multipurpose Internet Mail Extensions MIME scanner of Cisco AsyncOS Software for Cisco Email Security Appliances ESA could allow an unauthenticated, remote attacker to bypass configured user filters on the device. The vulnerability is due to improper error handling of a...
CVE-2017-12353
The CVE-2017-12353 issue affects Cisco AsyncOS Software on Cisco Email Security Appliances (ESA). The MIME scanner component fails to properly handle malformed MIME headers in email attachments, enabling an unauthenticated, remote attacker to bypass configured user filters by sending a crafted MI...
Cisco Email Security Appliance Header Bypass Vulnerability
A vulnerability in the Simple Mail Transfer Protocol SMTP header filtering functionality of Cisco AsyncOS Software for Cisco Email Security Appliances ESA could allow an unauthenticated, remote attacker to bypass configured user filters on the device. The vulnerability is due to improper handling...
Android Gmail < 7.11.5.176568039 - Directory Traversal in Attachment Download
''' Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1342 There is a directory traversal issue in attachment downloads in Gmail. For non-gmail accounts, there is no path sanitization on the attachment filename in the email, so when attachments are downloaded, a file with any name...
Cisco Email Security Appliance HTTP Response Splitting Vulnerability
Cisco Email Security Appliance ESA is a set of e-mail security appliances from the American company Cisco Cisco. The appliance provides spam protection, email encryption, data loss prevention and other features. An HTTP response splitting vulnerability exists in the Cisco Email Security Appliance...
Threat Outbreak Alert RuleID31355: Email Messages Distributing Malicious Software on November 20, 2017
Medium Alert ID: 55979 First Published: 2017 November 20 13:48 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31355 may contain the following files: Name |...
CVE-2017-14077
CVE-2017-14077 affects Securimage 3.6.4 and earlier. The root issue is HTML injection in the email body triggered by untrusted input from $_SERVER['HTTP_USER_AGENT'] passed to example_form.ajax.php or example_form.php. The vulnerability allows remote attackers to inject arbitrary HTML into messag...
CVE-2017-12309
A vulnerability in the Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to conduct a HTTP response splitting attack. The vulnerability is due to the failure of the application or its environment to properly sanitize input values. An attacker could exploit this...
Cross site scripting
A vulnerability in the Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to conduct a HTTP response splitting attack. The vulnerability is due to the failure of the application or its environment to properly sanitize input values. An attacker could exploit this...
CVE-2017-12309
A vulnerability in the Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to conduct a HTTP response splitting attack. The vulnerability is due to the failure of the application or its environment to properly sanitize input values. An attacker could exploit this...
CVE-2017-12309
The CVE-2017-12309 issue affects Cisco Email Security Appliance (ESA) and Content Security Management Appliance (SMA). The root cause is improper input sanitization that enablesHTTP response splitting by an unauthenticated remote attacker, allowing potential cross-site scripting, cross-user defac...
CVE-2017-12309
A vulnerability in the Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to conduct a HTTP response splitting attack. The vulnerability is due to the failure of the application or its environment to properly sanitize input values. An attacker could exploit this...
Threat Outbreak Alert RuleID31281: Email Messages Distributing Malicious Software on November 15, 2017
Medium Alert ID: 55933 First Published: 2017 November 15 20:16 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31281 may contain the following files: Name |...
CVE-2017-15806
The send function in the ezcMailMtaTransport class in Zeta Components Mail before 1.8.2 does not properly restrict the set of characters used in the ezcMail returnPath property, which might allow remote attackers to execute arbitrary code via a crafted email address, as demonstrated by one...
Cisco Email Security Appliance and Content Security Management Appliance HTTP Response Splitting Vulnerability
A vulnerability in the Cisco Email Security Appliance ESA and Content Security Management Appliance SMA software could allow an unauthenticated, remote attacker to conduct a HTTP response splitting attack. The vulnerability is due to the failure of the application or its environment to properly...