Lucene search
+L

3599 matches found

Cisco Threats
Cisco Threats
•added 2015/02/09 8:39 p.m.•12 views

Threat Outbreak Alert RuleID13474: Email Messages Distributing Malicious Software on February 9, 2015

Medium Alert ID: 37399 First Published: 2015 February 9 20:39 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13474 may contain the following files: Name |...

0.4AI score
SaveExploits0
NVD
NVD
•added 2015/02/07 4:59 a.m.•29 views

CVE-2015-0605

The uuencode inspection engine in Cisco AsyncOS on Cisco Email Security Appliance ESA devices 8.5 and earlier allows remote attackers to bypass intended content restrictions via a crafted e-mail attachment with uuencode encoding, aka Bug ID CSCzv54343...

4.3CVSS6.7AI score0.01218EPSS
SaveExploits0References5
Prion
Prion
•added 2015/02/07 4:59 a.m.•29 views

Code injection

The uuencode inspection engine in Cisco AsyncOS on Cisco Email Security Appliance ESA devices 8.5 and earlier allows remote attackers to bypass intended content restrictions via a crafted e-mail attachment with uuencode encoding, aka Bug ID CSCzv54343...

4.3CVSS7.2AI score0.01218EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2015/02/07 2:00 a.m.•41 views

CVE-2015-0605

The uuencode inspection engine in Cisco AsyncOS on Cisco Email Security Appliance ESA devices 8.5 and earlier allows remote attackers to bypass intended content restrictions via a crafted e-mail attachment with uuencode encoding, aka Bug ID CSCzv54343...

6.7AI score0.01218EPSS
SaveExploits0References5
CVE
CVE
•added 2015/02/07 2:00 a.m.•60 views

CVE-2015-0605

Cisco AsyncOS on Cisco Email Security Appliance (ESA) devices prior to 8.6 (8.5 and earlier) contains a vulnerability in the uuencode inspection engine that can bypass content restrictions via a crafted uuencoded email attachment. Root cause: improper decoding logic for uuencoded content in the i...

4.3CVSS6.9AI score0.01218EPSS
SaveExploits0References5Affected Software1
Cisco
Cisco
•added 2015/02/06 9:45 p.m.•51 views

Cisco AsyncOS Software Uuencoded Email Filtering Bypass Vulnerability

A vulnerability in the uuencode inspection engine of Cisco AsyncOS for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass engine protection and deliver a malicious file as an email attachment. The vulnerability is due to improper implementation of the log...

5CVSS6.3AI score0.01218EPSS
SaveExploits0References1
Cisco Threats
Cisco Threats
•added 2015/02/05 2:15 p.m.•11 views

Threat Outbreak Alert RuleID13412: Email Messages Distributing Malicious Software on February 4, 2015

Medium Alert ID: 37353 First Published: 2015 February 5 14:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13412 may contain the following files: Name |...

0.6AI score
SaveExploits0
Cisco Threats
Cisco Threats
•added 2015/01/28 7:13 p.m.•11 views

Threat Outbreak Alert RuleID13303: Email Messages Distributing Malicious Software on January 28, 2015

Medium Alert ID: 37204 First Published: 2015 January 28 19:13 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13303 may contain the following files: Name |...

0.4AI score
SaveExploits0
Cisco Threats
Cisco Threats
•added 2015/01/26 4:27 p.m.•13 views

Threat Outbreak Alert RuleID13265: Email Messages Distributing Malicious Software on January 26, 2015

Medium Alert ID: 37157 First Published: 2015 January 26 16:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13265 may contain the following files: Name |...

SaveExploits0
Cisco Threats
Cisco Threats
•added 2015/01/26 4:25 p.m.•24 views

Threat Outbreak Alert RuleID13252: Email Messages Distributing Malicious Software on January 23, 2015

Medium Alert ID: 37145 First Published: 2015 January 26 16:25 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13252 may contain the following files: Name |...

0.4AI score
SaveExploits0
Cisco Threats
Cisco Threats
•added 2015/01/20 5:18 p.m.•13 views

Threat Outbreak Alert RuleID13162: Email Messages Distributing Malicious Software on January 20, 2015

Medium Alert ID: 37061 First Published: 2015 January 20 17:18 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13162 may contain the following files: Name |...

0.5AI score
SaveExploits0
Cisco Threats
Cisco Threats
•added 2015/01/16 5:07 p.m.•12 views

Threat Outbreak Alert RuleID13139: Email Messages Distributing Malicious Software on January 15, 2015

Medium Alert ID: 37033 First Published: 2015 January 16 17:07 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13139 may contain the following files: Name |...

0.3AI score
SaveExploits0
Prion
Prion
•added 2015/01/14 7:59 p.m.•27 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the IronPort Spam Quarantine ISQ page in Cisco AsyncOS, as used on the Cisco Email Security Appliance ESA and Content Security Management Appliance SMA, allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, a...

4.3CVSS6.1AI score0.01161EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2015/01/14 7:00 p.m.•48 views

CVE-2015-0577

Multiple cross-site scripting XSS vulnerabilities in the IronPort Spam Quarantine ISQ page in Cisco AsyncOS, as used on the Cisco Email Security Appliance ESA and Content Security Management Appliance SMA, allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, a...

5.8AI score0.01161EPSS
SaveExploits0References5
CVE
CVE
•added 2015/01/14 7:00 p.m.•62 views

CVE-2015-0577

Cisco AsyncOS ISQ (IronPort Spam Quarantine) XSS: multiple vulnerabilities in the ISQ web page on ESA/SMA due to insufficient input validation, enabling remote attackers to inject arbitrary script/HTML via unspecified parameters. Root cause: input validation gaps in the web page. Impact: cross-si...

4.3CVSS5.9AI score0.01161EPSS
SaveExploits0References5Affected Software1
Cisco Threats
Cisco Threats
•added 2015/01/13 3:36 p.m.•16 views

Threat Outbreak Alert RuleID13083: Email Messages Distributing Malicious Software on January 12, 2015

Medium Alert ID: 36985 First Published: 2015 January 13 15:36 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13083 may contain the following files: Name |...

0.2AI score
SaveExploits0
Cisco Threats
Cisco Threats
•added 2015/01/05 3:05 p.m.•10 views

Threat Outbreak Alert RuleID12969: Email Messages Distributing Malicious Software on December 24, 2014

Medium Alert ID: 36890 First Published: 2015 January 5 15:05 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12969 may contain the following files: Name |...

0.5AI score
SaveExploits0
CVE
CVE
•added 2014/12/24 6:00 p.m.•140 views

CVE-2004-2771

CVE-2004-2771 affects mailx (Heirloom mailx <=12.5 and BSD mailx <=8.1.2). The vulnerability arises from parsing of email addresses, allowing a local attacker to cause mailx to execute arbitrary shell commands via shell metacharacters in the address. Several connected records corroborate im...

7.5CVSS7.8AI score0.06858EPSS
SaveExploits1References8Affected Software1
NVD
NVD
•added 2014/12/19 2:59 a.m.•23 views

CVE-2014-8016

The Cisco IronPort Email Security Appliance ESA allows remote attackers to cause a denial of service CPU consumption via long Subject headers in e-mail messages, aka Bug ID CSCzv93864...

5CVSS6.6AI score0.01232EPSS
SaveExploits0References1
Prion
Prion
•added 2014/12/19 2:59 a.m.•18 views

Code injection

The Cisco IronPort Email Security Appliance ESA allows remote attackers to cause a denial of service CPU consumption via long Subject headers in e-mail messages, aka Bug ID CSCzv93864...

5CVSS7.1AI score0.01232EPSS
SaveExploits0References1
Rows per page
Query Builder