Lucene search
K

24 matches found

Packet Storm News
Packet Storm News
added 2026/04/21 12:0 a.m.1 views

Adobe DNG File Security Scanner

This program is a defensive security tool designed to analyze DNG Digital Negative image files and detect potential signs of malicious manipulation or exploit attempts. It performs a low-level inspection of the file structure by parsing the TIFF header and scanning raw binary content for suspicio...

5.7AI score
Exploits0
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2002-0437

Malware in sbrugna...

7.5CVSS6.4AI score0.02482EPSS
Exploits0References5
NVD
NVD
added 2025/07/23 9:15 p.m.6 views

CVE-2025-32019

Harbor is an open source trusted cloud native registry project that stores, signs, and scans content. Versions 2.11.2 and below, as well as versions 2.12.0-rc1 and 2.13.0-rc1, contain a vulnerability where the markdown field in the info tab page can be exploited to inject XSS code. This is fixed ...

4.1CVSS0.0016EPSS
Exploits0References4
OSV
OSV
added 2024/07/17 5:15 p.m.0 views

CVE-2024-20401

A vulnerability in the content scanning and message filtering features of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to overwrite arbitrary files on the underlying operating system. This vulnerability is due to improper handling of email attachments when file...

9.8CVSS6AI score0.07664EPSS
Exploits0References1
Cisco
Cisco
added 2024/07/17 4:0 p.m.27 views

Cisco Secure Email Gateway Arbitrary File Write Vulnerability

A vulnerability in the content scanning and message filtering features of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to overwrite arbitrary files on the underlying operating system. This vulnerability is due to improper handling of email attachments when file...

9.8CVSS9.6AI score0.07664EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/07/17 12:0 a.m.3 views

PT-2024-4846 · Cisco · Cisco Secure Email Gateway

Name of the Vulnerable Software and Affected Versions: Cisco Secure Email Gateway affected versions not specified Description: A vulnerability in the content scanning and message filtering features could allow an unauthenticated, remote attacker to overwrite arbitrary files on the underlying...

10CVSS7.6AI score0.07664EPSS
Exploits0References8
Prion
Prion
added 2020/01/26 5:15 a.m.13 views

Input validation

A vulnerability in the zip decompression engine of Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper validation of zip files. An...

6.4CVSS6.5AI score0.00584EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2020/01/26 4:31 a.m.8 views

CVE-2020-3134 Cisco Email Security Appliance Zip Decompression Engine Denial of Service Vulnerability

A vulnerability in the zip decompression engine of Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper validation of zip files. An...

6.5CVSS7.1AI score0.00584EPSS
Exploits0References1
Cvelist
Cvelist
added 2020/01/26 4:31 a.m.11 views

CVE-2020-3134 Cisco Email Security Appliance Zip Decompression Engine Denial of Service Vulnerability

A vulnerability in the zip decompression engine of Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper validation of zip files. An...

6.5CVSS6.5AI score0.00584EPSS
Exploits0References1
CNVD
CNVD
added 2020/01/23 12:0 a.m.1 views

Cisco Email Security Appliance zip decompression engine denial of service vulnerability

The Cisco Email Security Appliance ESA is an all-in-one appliance that defends against spam, advanced malware, phishing, and data loss.Cisco AsyncOS is the base operating system OS, device drivers, memory management, process scheduling, and a collection of all application and scanning software. A...

6.5CVSS6.7AI score0.00584EPSS
Exploits0References1
Cisco
Cisco
added 2020/01/22 4:0 p.m.22 views

Cisco Email Security Appliance Zip Decompression Engine Denial of Service Vulnerability

A vulnerability in the zip decompression engine of Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper validation of zip files. An...

6.5CVSS1.6AI score0.00584EPSS
Exploits0References1
NVD
NVD
added 2017/01/26 7:59 a.m.13 views

CVE-2017-3800

A vulnerability in the content scanning engine of Cisco AsyncOS Software for Cisco Email Security Appliances ESA could allow an unauthenticated, remote attacker to bypass configured message or content filters on the device. Affected Products: This vulnerability affects all releases prior to the...

5.8CVSS5.8AI score0.00207EPSS
Exploits0References3
OSV
OSV
added 2017/01/26 7:59 a.m.0 views

CVE-2017-3800

A vulnerability in the content scanning engine of Cisco AsyncOS Software for Cisco Email Security Appliances ESA could allow an unauthenticated, remote attacker to bypass configured message or content filters on the device. Affected Products: This vulnerability affects all releases prior to the...

5.8CVSS5.8AI score
Exploits0References3
Cvelist
Cvelist
added 2017/01/26 7:45 a.m.20 views

CVE-2017-3800

A vulnerability in the content scanning engine of Cisco AsyncOS Software for Cisco Email Security Appliances ESA could allow an unauthenticated, remote attacker to bypass configured message or content filters on the device. Affected Products: This vulnerability affects all releases prior to the...

5.7AI score0.00207EPSS
Exploits0References3
CVE
CVE
added 2017/01/26 7:45 a.m.45 views

CVE-2017-3800

CVE-2017-3800 affects Cisco AsyncOS for the Email Security Appliance (ESA) content scanning engine. An unauthenticated, remote attacker could bypass configured message or content filters on attachments. Affected releases are all prior to the first fixed AsyncOS release; known affected: 9.7.1-066,...

5.8CVSS5.7AI score0.00207EPSS
Exploits0References3Affected Software1
OpenVAS
OpenVAS
added 2017/01/19 12:0 a.m.20 views

Cisco Email Security Appliance Filter Bypass Vulnerability

A vulnerability in the content scanning engine of Cisco AsyncOS Software for Cisco Email Security Appliances ESA could allow an unauthenticated, remote attacker to bypass configured message or content filters on the device. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be...

5.8CVSS5.9AI score0.00207EPSS
Exploits0References1
Cisco
Cisco
added 2017/01/18 4:0 p.m.29 views

Cisco Email Security Appliance Filter Bypass Vulnerability

A vulnerability in the content scanning engine of Cisco AsyncOS Software for Cisco Email Security Appliances ESA could allow an unauthenticated, remote attacker to bypass configured message or content filters on the device. The vulnerability is due to incomplete input validation of email message...

5.8CVSS5.8AI score0.00207EPSS
Exploits0References1
Cisco
Cisco
added 2014/05/14 8:9 p.m.27 views

Cisco IOS Software ScanSafe Vulnerability

A vulnerability in the content scanning module of Cisco IOS Software could allow an unauthenticated, remote attacker to cause a reload of the affected device. The vulnerability occurs when processing HTTPS packets that need to be redirected to a ScanSafe tower. An attacker could exploit this...

5.4CVSS6.3AI score0.00773EPSS
Exploits0References1
securityvulns
securityvulns
added 2007/05/16 12:0 a.m.59 views

GS07-01 Full-Width and Half-Width Unicode Encoding IDS/IPS/WAF Bypass Vulnerability

GS07-01 Full-Width and Half-Width Unicode Encoding IDS/IPS/WAF Bypass Vulnerability Date & Version : 04/14/2007 - 1.0 Description : Various HTTP content scanning systems fail to properly scan full-width/half-width Unicode encoded traffic. This may allow malicious content to bypass HTTP content...

Exploits0
CERT
CERT
added 2007/05/14 12:0 a.m.22 views

HTTP content scanning systems full-width/half-width Unicode encoding bypass

Overview Various HTTP content scanning systems fail to properly scan full-width/half-width Unicode encoded traffic. This may allow malicious HTTP traffic to bypass content scanning systems. Description Full-width and half-width encoding is a technique for encoding Unicode characters. Various HTTP...

6.8AI score
Exploits0References11
Rows per page
Query Builder