EUVD-2015-0945

Malware in sbrugna...

EUVD-2015-4543

Malware in sbrugna...

CVE-2015-4523: Undefined Security Weakness

Blue Coat Malware Analysis Appliance MAA before 4.2.5 and Malware Analyzer G2 allow remote attackers to bypass a virtual machine protection mechanism and consequently write to arbitrary files, cause a denial of service host reboot or reset to factory defaults, or execute arbitrary code via vector...

CVE-2015-0937

Cross-site scripting XSS vulnerability in search.php on the Blue Coat Malware Analysis appliance with software before 4.2.4.20150312-RELEASE allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Code injection

search.php on the Blue Coat Malware Analysis appliance with software before 4.2.4.20150312-RELEASE allows remote attackers to bypass intended access restrictions, and list or read arbitrary documents, by providing matching keywords in conjunction with a crafted parameter...

CVE-2015-0938

CVE-2015-0938 affects Blue Coat Malware Analysis Appliance (MAA). The vulnerability arises in search.php and allows an unauthenticated or non-authenticated user to bypass access restrictions and read or list arbitrary documents by supplying crafted parameters with matching keywords. Impact is inf...

CVE-2015-0937

Cross-site scripting XSS vulnerability in search.php on the Blue Coat Malware Analysis appliance with software before 4.2.4.20150312-RELEASE allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-0937

CVE-2015-0937 is an XSS vulnerability affecting Blue Coat Malware Analysis Appliance (search.php) in versions prior to 4.2.4.20150312-RELEASE. The issue allows remote attackers to inject arbitrary web script via unspecified vectors. Connected documents confirm an associated information-disclosure...

CVE-2015-0938: Exposure of Sensitive Information to an Unauthorized Actor

search.php on the Blue Coat Malware Analysis appliance with software before 4.2.4.20150312-RELEASE allows remote attackers to bypass intended access restrictions, and list or read arbitrary documents, by providing matching keywords in conjunction with a crafted parameter...

CVE-2015-0937: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in search.php on the Blue Coat Malware Analysis appliance with software before 4.2.4.20150312-RELEASE allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...