Mailspect Control Panel 4.0.5 Code Execution / File Read / XSS

Document Title: ============ Mailspect Control Panel version 4.0.5 Multiple Vulnerabilities Release Date: =========== June 21, 2014 Product & Service Introduction: ======================== Mailspect is the email security and archiving brand of RAE Internet Inc., Tarrytown, New York. The Mailspect...

CVE-2012-2569

CVE-2012-2569 concerns Synametrics Technologies Xeams 4.4 Build 5720. The vulnerability is a Cross-Site Scripting (XSS) flaw that allows an attacker to inject arbitrary web script or HTML via the body of an email. The connected documents corroborate the affected product/version and the XSS root c...

CVE-2012-2592

CVE-2012-2592 affects Axigen Mail Server 8.0.1 and is a Cross-site Scripting (XSS) vulnerability where an attacker can inject arbitrary web script or HTML via the body of an email. Connected sources confirm the affected product and vulnerability class, but do not provide a patch version or remedi...

Threat Outbreak Alert RuleID10350: Email Messages Distributing Malicious Software on June 17, 2014

Medium Alert ID: 34632 First Published: 2014 June 17 17:13 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID10350 may contain the following files: Name | Siz...

CVE-2014-3289

Cross-site scripting XSS vulnerability in the web management interface in Cisco AsyncOS on the Email Security Appliance ESA 8.0, Web Security Appliance WSA 8.0 .5 Hot Patch 1 and earlier, and Content Security Management Appliance SMA 8.3 and earlier allows remote attackers to inject arbitrary web...

Cross site scripting

Cross-site scripting XSS vulnerability in the web management interface in Cisco AsyncOS on the Email Security Appliance ESA 8.0, Web Security Appliance WSA 8.0 .5 Hot Patch 1 and earlier, and Content Security Management Appliance SMA 8.3 and earlier allows remote attackers to inject arbitrary web...

CVE-2014-3289

Cross-site scripting XSS vulnerability in the web management interface in Cisco AsyncOS on the Email Security Appliance ESA 8.0, Web Security Appliance WSA 8.0 .5 Hot Patch 1 and earlier, and Content Security Management Appliance SMA 8.3 and earlier allows remote attackers to inject arbitrary web...

CVE-2014-3289

CVE-2014-3289 is a reflected XSS vulnerability in Cisco AsyncOS used by ESA, WSA, and SMA. The issue stems from insufficient input validation of the date_range parameter on the web management interface (notably monitor/reports/overview). A remote attacker can inject arbitrary script by tricking a...

Cisco AsyncOS contains a reflected cross-site scripting (XSS) vulnerability

Overview Cisco AsyncOS contains a reflected cross-site scripting XSS vulnerability. Description CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' - CVE-2014-3289 Cisco AsyncOS, the underlying OS for the Cisco Email Security Appliance, Web Security Applianc...

Cisco Ironport Email Security Virtual Appliance 8.0.0-671 XSS

I. VULNERABILITY ------------------------- Reflected XSS Attacks vulnerabilities in Cisco Ironport Email Security Virtual Appliance Version: 8.0.0-671 II. BACKGROUND ------------------------- Cisco Systems, Inc. is an American multinational corporation headquartered in San Jose, California, that...

JavaMail SMTP Header Injection via method setSubject [CSNC-2014-001]

COMPASS SECURITY ADVISORY http://www.csnc.ch/en/downloads/advisories.html Product: JavaMail Vendor: Oracle CSNC ID: CSNC-2014-001 CVD ID: none Subject: SMTP Header Injection via method setSubject Risk: Medium Effect: Remotely exploitable Author: Alexandre Herzog [email protected] Date:...

Threat Outbreak Alert: Fake Scanned Document Delivery Email Messages on May 30, 2014

Medium Alert ID: 34430 First Published: 2014 May 30 19:29 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a scanned document for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Credit Card Statement Email Messages on May 30, 2014

Medium Alert ID: 34428 First Published: 2014 May 30 18:36 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a credit card statement for the recipient. The text in the email message attempts to convince the recipient to ope...

Threat Outbreak Alert: Fake Bank Statements Notification Email Messages on May 29, 2014

Medium Alert ID: 34416 First Published: 2014 May 29 18:57 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain bank statements for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Email Messages with Malicious Attachments on May 30, 2014

Medium Alert ID: 34405 First Published: 2014 May 29 13:19 GMT Last Updated: 2014 May 31 03:50 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an attachment for the recipient. The email message attempts to convince the...

Threat Outbreak Alert: Fake Payment Details Email Messages on May 28, 2014

Medium Alert ID: 34404 First Published: 2014 May 29 13:13 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain payment details for the recipient. The email message attempts to convince the recipient to open the attachment and...

Threat Outbreak Alert: Fake Malicious Attachment Notification Email Messages on May 28, 2014

Medium Alert ID: 34401 First Published: 2014 May 29 13:09 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an attachment for the recipient. The email message attempts to convince the recipient to open the attachment and...

Threat Outbreak Alert: Fake Late Payment Notification Email Messages on May 28, 2014

Medium Alert ID: 34397 First Published: 2014 May 28 18:51 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a late payment notice for the recipient. The text in the email message attempts to convince the recipient to open...

Threat Outbreak Alert: Fake Bank Account Transaction Notification Email Messages on May 25, 2014

Medium Alert ID: 34350 First Published: 2014 May 28 18:04 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain bank account transaction notification for the recipient. The email message attempts to convince the recipient to...

Threat Outbreak Alert: Fake Software Security Update Email Messages on May 28, 2014

Medium Alert ID: 34388 First Published: 2014 May 28 17:39 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a security update for the recipient. The text in the email message attempts to convince the recipient to open the...