402 matches found
CVE-2024-1889
CVE-2024-1889 affects SMA Cluster Controller (version 01.05.01.R). The vulnerability is a Cross-Site Request Forgery (CSRF) that can be triggered when an authenticated user visits a malicious link, allowing actions with the user’s permissions on the affected device. Impact is described as high fo...
Cross site scripting
A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager, formerly known as Content Security Management Appliance SMA could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the...
CVE-2023-20119
CVE-2023-20119 affects Cisco AsyncOS Software for Cisco Secure Email and Web Manager (formerly Content Security Management Appliance). The web-based management interface is vulnerable to cross-site scripting (XSS) due to insufficient input validation. An unauthenticated, remote attacker can entic...
CVE-2023-30347
Cross Site Scripting XSS vulnerability in Neox Contact Center 2.3.9, via the serachsmsapiname parameter to the SMA API search...
CVE-2023-30347
Cross Site Scripting XSS vulnerability in Neox Contact Center 2.3.9, via the serachsmsapiname parameter to the SMA API search...
Cross site scripting
Cross Site Scripting XSS vulnerability in Neox Contact Center 2.3.9, via the serachsmsapiname parameter to the SMA API search...
CVE-2023-30347
Cross Site Scripting XSS vulnerability in Neox Contact Center 2.3.9, via the serachsmsapiname parameter to the SMA API search...
CVE-2023-30347
CVE-2023-30347 is an XSS vulnerability in Neox Contact Center 2.3.9, triggered via the serach_sms_api_name parameter of the SMA API search. The connected documents consistently describe the issue as a Cross Site Scripting flaw in the SMA API search path, but do not provide concrete details on aff...
CVE-2023-30347
Cross Site Scripting XSS vulnerability in Neox Contact Center 2.3.9, via the serachsmsapiname parameter to the SMA API search...
Malware targeting SonicWall devices could survive firmware updates
Researchers at Mandiant have identified a malware campaign targeting SonicWall SMA 100 Series appliances, thought to be of Chinese origin. The malware was likely deployed in 2021, and was able to persist on the appliances tenaciously, even surviving firmware upgrades. The malware was able to stea...
CVE-2022-38220
An XSS vulnerability exists within Quest KACE Systems Management Appliance SMA through 12.1 that may allow remote injection of arbitrary web script or HTML...
CVE-2022-38220
CVE-2022-38220 affects Quest KACE Systems Management Appliance (SMA) up to and including version 12.1. The vulnerability is an XSS that could allow a remote attacker to inject arbitrary web script or HTML. The common references across sources (NVD/Red Hat/CNNVD/CVE list) corroborate the vulnerabl...
CVE-2023-20009
CVE-2023-20009 affects Cisco’s Web UI and administrative CLI on the Cisco Secure Email Gateway (ESA) and Cisco Secure Email and Web Manager (SMA). The issue stems from processing of a specially crafted SNMP configuration file, which, if uploaded by an authenticated user with at least operator pri...
SonicWall Secure Mobile Access (SMA) < 10.2.1.5-34sv Buffer Overflow (SNWLID-2022-0019)
The remote host is a SonicWall Secure Mobile Access SMA device with a version number 10.2.1.5-34sv. It is, therefore, affected by a buffer overflow vulnerability that allows a remote authenticated attacker to cause Denial of Service DoS on the appliance or potentially lead to code execution. Note...
The vulnerability of SonicWall SMA 100 network firewall microprogramming software, caused by buffer overflow in dynamic memory, allows attackers to execute arbitrary code or cause a service failure.
The vulnerability of SonicWall SMA 100 network firewall microprogramming software is caused by buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure...
PT-2022-4430 · Sonicwall · Sonicwall Sma 100 Series
Name of the Vulnerable Software and Affected Versions: SonicWall SMA 100 series affected versions not specified Description: The issue is related to a disclosure of information in the SonicWall SMA 100 series firewalls' firmware. It allows a remote attacker to gain unauthorized access to protecte...
Exploit for Out-of-bounds Write in Sonicwall Sma_200_Firmware
SonicWallSSL-VPNRCE CVE-2021-20038...
CVE-2022-29807
A SQL injection vulnerability exists within Quest KACE Systems Management Appliance SMA through 12.0 that can allow for remote code execution via downloadagentinstaller.php...
CVE-2022-29807
The CVE-2022-29807 entry affects Quest KACE Systems Management Appliance (SMA). The vulnerability is a SQL injection in the download_agent_installer.php endpoint that can lead to remote code execution. Affected are SMA versions prior to 12.0; versions 12.0 or later are patched. Remediation: updat...