Server side request forgery (ssrf)

An issue was discovered in Hyland org.alfresco:alfresco-content-services through 6.2.2.18 and org.alfresco:alfresco-transform-services through 1.3. A crafted HTML file, once uploaded, could trigger an unexpected request by the transformation engine. The response to the request is not available to...

CVE-2021-41790

An issue was discovered in Hyland org.alfresco:alfresco-content-services through 7.0.1.2. Script Action execution allows executing scripts uploaded outside of the Data Dictionary. This could allow a logged-in attacker to execute arbitrary code inside a sandboxed environment...

CVE-2021-41792

CVE-2021-41792 affects Hyland Alfresco components: org.alfresco:alfresco-content-services up to 6.2.2.18 and org.alfresco:alfresco-transform-services up to 1.3. A crafted HTML file uploaded to the system could trigger an unexpected request by the transformation engine, with the response not expos...

CVE-2021-41792

An issue was discovered in Hyland org.alfresco:alfresco-content-services through 6.2.2.18 and org.alfresco:alfresco-transform-services through 1.3. A crafted HTML file, once uploaded, could trigger an unexpected request by the transformation engine. The response to the request is not available to...

CVE-2021-41790

CVE-2021-41790 affects Hyland org.alfresco:alfresco-content-services up to version 7.0.1.2. The issue is Script Action execution that allows scripts uploaded outside the Data Dictionary to run, potentially enabling a logged-in attacker to execute arbitrary code inside a sandboxed environment. The...

CVE-2021-41790

An issue was discovered in Hyland org.alfresco:alfresco-content-services through 7.0.1.2. Script Action execution allows executing scripts uploaded outside of the Data Dictionary. This could allow a logged-in attacker to execute arbitrary code inside a sandboxed environment...

Cisco Content Services Switch Security Restriction Bypass Vulnerability

The Cisco CSS 11500 Content Services Switch is a load balancing device used to provide robust and measurable network services Layer 4-7 to data centers. The Cisco CSS 11500 device version 8.20.4.02 and earlier, has a security vulnerability in the management interface, which can be exploited by a...

CVE-2015-0667

The Management Interface on Cisco Content Services Switch CSS 11500 devices 8.20.4.02 and earlier allows remote attackers to bypass intended restrictions on local-network device access via crafted SSH packets, aka Bug ID CSCut14855...

Design/Logic Flaw

The Management Interface on Cisco Content Services Switch CSS 11500 devices 8.20.4.02 and earlier allows remote attackers to bypass intended restrictions on local-network device access via crafted SSH packets, aka Bug ID CSCut14855...

CVE-2015-0667

The CVE-2015-0667 issue affects Cisco Content Services Switch (CSS) 11500 devices running 8.20.4.02 and earlier, where the Management Interface allows bypassing restrictions on local-network device access via crafted SSH packets. Root cause: improper handling of SSH packets on the Management Inte...

CVE-2015-0667

The Management Interface on Cisco Content Services Switch CSS 11500 devices 8.20.4.02 and earlier allows remote attackers to bypass intended restrictions on local-network device access via crafted SSH packets, aka Bug ID CSCut14855...

Cisco Content Services Switch (11500) Unauthenticated Port Forwarding Vulnerability

A vulnerability in the Management Interface of the Cisco Content Services Switch 11500 could allow an unauthenticated, remote attacker to gain unauthorized access to other devices on the network. The vulnerability is due to improper handling of SSH packets. An attacker could exploit this...

CVE-2013-5552

Cisco IOS 12.424MDB9 and earlier on Content Services Gateway CSG devices does not properly implement the "parse error drop" feature, which allows remote attackers to bypass intended access restrictions via a crafted series of packets, aka Bug ID CSCug90143...

CVE-2013-5552

Cisco IOS 12.424MDB9 and earlier on Content Services Gateway CSG devices does not properly implement the "parse error drop" feature, which allows remote attackers to bypass intended access restrictions via a crafted series of packets, aka Bug ID CSCug90143...

CVE-2013-5552

CVE-2013-5552 affects Cisco IOS 12.4(24)MDB9 and earlier on Content Services Gateway (CSG). The vulnerability lies in the parse error drop function, where faulty processing could allow an unauthenticated, remote attacker to bypass configured access policies by sending a crafted sequence of packet...

Cisco Content Services Gateway Traffic Bypass Vulnerability

A vulnerability in the parse error drop function of the Cisco Content Services Gateway CSG could allow an unauthenticated, remote attacker to bypass configured policies. The vulnerability is due to invalid processing in the parse error drop function. An attacker could exploit this vulnerability b...

CVE-2011-2064

Cisco IOS 12.4MDA before 12.424MDA5 on the Cisco Content Services Gateway - Second Generation CSG2 allows remote attackers to cause a denial of service device reload via crafted ICMP packets, aka Bug ID CSCtl79577...

CVE-2011-2064

Cisco IOS 12.4MDA before 12.424MDA5 on the Cisco Content Services Gateway - Second Generation CSG2 allows remote attackers to cause a denial of service device reload via crafted ICMP packets, aka Bug ID CSCtl79577...

Cisco Content Services Gateway DoS

Device may be crashed via ICMP packets...

Cisco Security Advisory: Cisco Content Services Gateway Denial of Service Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Cisco Content Services Gateway Denial of Service Vulnerability Advisory ID: cisco-sa-20110706-csg Revision 1.0 For Public Release 2011 July 06 1600 UTC GMT +-------------------------------------------------------------------...