CVE-2014-3289

Cross-site scripting XSS vulnerability in the web management interface in Cisco AsyncOS on the Email Security Appliance ESA 8.0, Web Security Appliance WSA 8.0 .5 Hot Patch 1 and earlier, and Content Security Management Appliance SMA 8.3 and earlier allows remote attackers to inject arbitrary web...

Cisco AsyncOS contains a reflected cross-site scripting (XSS) vulnerability

Overview Cisco AsyncOS contains a reflected cross-site scripting XSS vulnerability. Description CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' - CVE-2014-3289 Cisco AsyncOS, the underlying OS for the Cisco Email Security Appliance, Web Security Applianc...

Cisco Ironport Email Security Virtual Appliance 8.0.0-671 XSS

I. VULNERABILITY ------------------------- Reflected XSS Attacks vulnerabilities in Cisco Ironport Email Security Virtual Appliance Version: 8.0.0-671 II. BACKGROUND ------------------------- Cisco Systems, Inc. is an American multinational corporation headquartered in San Jose, California, that...

JavaMail SMTP Header Injection via method setSubject [CSNC-2014-001]

COMPASS SECURITY ADVISORY http://www.csnc.ch/en/downloads/advisories.html Product: JavaMail Vendor: Oracle CSNC ID: CSNC-2014-001 CVD ID: none Subject: SMTP Header Injection via method setSubject Risk: Medium Effect: Remotely exploitable Author: Alexandre Herzog [email protected] Date:...

Threat Outbreak Alert: Fake Scanned Document Delivery Email Messages on May 30, 2014

Medium Alert ID: 34430 First Published: 2014 May 30 19:29 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a scanned document for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Credit Card Statement Email Messages on May 30, 2014

Medium Alert ID: 34428 First Published: 2014 May 30 18:36 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a credit card statement for the recipient. The text in the email message attempts to convince the recipient to ope...

Threat Outbreak Alert: Fake Bank Statements Notification Email Messages on May 29, 2014

Medium Alert ID: 34416 First Published: 2014 May 29 18:57 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain bank statements for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Email Messages with Malicious Attachments on May 30, 2014

Medium Alert ID: 34405 First Published: 2014 May 29 13:19 GMT Last Updated: 2014 May 31 03:50 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an attachment for the recipient. The email message attempts to convince the...

Threat Outbreak Alert: Fake Payment Details Email Messages on May 28, 2014

Medium Alert ID: 34404 First Published: 2014 May 29 13:13 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain payment details for the recipient. The email message attempts to convince the recipient to open the attachment and...

Threat Outbreak Alert: Fake Malicious Attachment Notification Email Messages on May 28, 2014

Medium Alert ID: 34401 First Published: 2014 May 29 13:09 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an attachment for the recipient. The email message attempts to convince the recipient to open the attachment and...

Threat Outbreak Alert: Fake Late Payment Notification Email Messages on May 28, 2014

Medium Alert ID: 34397 First Published: 2014 May 28 18:51 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a late payment notice for the recipient. The text in the email message attempts to convince the recipient to open...

Threat Outbreak Alert: Fake Bank Account Transaction Notification Email Messages on May 25, 2014

Medium Alert ID: 34350 First Published: 2014 May 28 18:04 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain bank account transaction notification for the recipient. The email message attempts to convince the recipient to...

Threat Outbreak Alert: Fake Software Security Update Email Messages on May 28, 2014

Medium Alert ID: 34388 First Published: 2014 May 28 17:39 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a security update for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Bank Account Deposit Notification Email Messages on March 28, 2014

Medium Alert ID: 34391 First Published: 2014 May 28 16:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain a bank account deposit notification for the recipient. The text in the email message attempts ...

Threat Outbreak Alert: Fake Product Purchase Order Request Email Messages on May 28, 2014

Medium Alert ID: 34394 First Published: 2014 May 28 16:11 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product purchase order request for the recipient. The text in the email message attempts to convince the recipie...

Threat Outbreak Alert: Fake Purchase Order Confirmation Email Messages on May 27, 2014

Medium Alert ID: 34354 First Published: 2014 May 27 21:03 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a purchase order confirmation notice for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Product Purchase Order Quote Request Email Messages on May 27, 2014

Medium Alert ID: 34372 First Published: 2014 May 27 19:23 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product purchase order quote request for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Document Attachment Email Messages on May 27, 2014

Medium Alert ID: 34371 First Published: 2014 May 27 19:21 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain a document for the recipient. The text in the email message attempts to convince the recipient...

Threat Outbreak Alert: Fake Registration Application Notification Email Messages on May 27, 2014

Medium Alert ID: 34367 First Published: 2014 May 27 19:14 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a registration application for the recipient. The text in the email message attempts to convince the recipient to...

Threat Outbreak Alert: Fake Money Transfer Notification Email Messages on May 27, 2014

Medium Alert ID: 34363 First Published: 2014 May 27 19:04 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain a money transfer notice for the recipient. The text in the email message attempts to convince...