EUVD-2021-23382

Malware in sbrugna...

CVE-2021-36806

A reflected XSS vulnerability allows an open redirect when the victim clicks a malicious link to an error page on Sophos Email Appliance older than version 4.5.3.4...

CVE-2021-36806

A reflected XSS vulnerability allows an open redirect when the victim clicks a malicious link to an error page on Sophos Email Appliance older than version 4.5.3.4...

Cross site scripting

A reflected XSS vulnerability allows an open redirect when the victim clicks a malicious link to an error page on Sophos Email Appliance older than version 4.5.3.4...

CVE-2021-36806

A reflected XSS vulnerability allows an open redirect when the victim clicks a malicious link to an error page on Sophos Email Appliance older than version 4.5.3.4...

CVE-2021-36806

A reflected XSS vulnerability allows an open redirect when the victim clicks a malicious link to an error page on Sophos Email Appliance older than version 4.5.3.4...

CVE-2021-36806

CVE-2021-36806 describes a reflected Cross-Site Scripting (XSS) flaw in Sophos Email Appliance that enables an open redirect when a user visits a maliciously crafted link to an error page. Affected products are Sophos Email Appliance versions older than 4.5.3.4. The vulnerability arises from inad...

Sophos Email Appliance Cross-Site Scripting Vulnerability

Sophos Email Appliance is an email application from Sophos UK. A security vulnerability exists in Sophos Email Appliance versions prior to 4.5.3.4, which stems from the presence of a Reflective Cross-Site Scripting XSS vulnerability that allows open redirection...

Cisco Email Security Appliance DMARC Policy Handling Remote Denial of Service Vulnerability

The Cisco Email Security Appliance is a widely used email encryption gateway that seamlessly performs encryption, decryption, and digital signing of confidential email. A security vulnerability exists in the Cisco Email Security Appliance that allows a remote user to generate specially crafted...

Sophos Email Appliance 2.1 Web Interface Multiple Cross-Site Scripting Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/27813/info Sophos Email Appliance is prone to multiple cross-site scripting vulnerabilities that affect its web interface because it fails to properly sanitize user-supplied input before using it in dynamically generated...

Code injection

Sophos virus detection engine 2.75 on Linux and Unix, as used in Sophos Email Appliance, Pure Message for Unix, and Sophos Anti-Virus Interface SAVI, allows remote attackers to cause a denial of service engine crash via zero-length MIME attachments...

[INFIGO-2008-02-13]: SOPHOS Email Security Appliance Cross Site Scripting Vulnerability

INFIGO IS Security Advisory ADV-2008-02-13 http://www.infigo.hr/en/ Title: SOPHOS Email Security Appliance Cross Site Scripting Vulnerability Advisory ID: INFIGO-2008-02-13 Date: 2008-02-13 Advisory URL: http://www.infigo.hr/en/infocus/advisories/INFIGO-2008-02-13 Impact: Malicious JavaScript Cod...

Sophos Email Appliance 2.1 - Web Interface Multiple Cross-Site Scripting Vulnerabilities

Sophos Email Appliance 2.1 - Web Interface Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/27813/info Sophos Email Appliance is prone to multiple cross-site scripting vulnerabilities that affect its web interface because it fails to properly sanitize...

Sophos Email Appliance 2.1 - Web Interface Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/27813/info Sophos Email Appliance is prone to multiple cross-site scripting vulnerabilities that affect its web interface because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage...