Threat Outbreak Alert RuleID29975: Email Messages Distributing Malicious Software on July 26, 2017

Medium Alert ID: 54593 First Published: 2017 July 26 15:07 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29975 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID29947: Email Messages Distributing Malicious Software on July 26, 2017

Medium Alert ID: 54588 First Published: 2017 July 26 12:35 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29947 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID29942: Email Messages Distributing Malicious Software on July 26, 2017

Medium Alert ID: 54587 First Published: 2017 July 26 12:35 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29942 may contain the following files: Name | Siz...

Cisco Web Security Appliance CLI Parser Elevation of Privilege Vulnerability

Cisco Web Security Appliance is the United States Cisco Cisco company's set of Web security appliances. A vulnerability in the Cisco Web Security Appliance CLI parser allows local attackers to submit a special request injection command to elevate privileges to root...

Cisco Cloud Web Security Alert Service Cross-Site Scripting Vulnerability

Cisco Cloud Web Security is a set of network security protection software from Cisco USA.Alert Service is one of the alert services. A cross-site scripting vulnerability exists in Alert Service in Cisco Cloud Web Security, which stems from the program failing to perform input validation adequatel...

[ASA-201707-25] webkit2gtk: multiple issues

Arch Linux Security Advisory ASA-201707-25 ========================================== Severity: Critical Date : 2017-07-26 CVE-ID : CVE-2017-7018 CVE-2017-7030 CVE-2017-7034 CVE-2017-7037 CVE-2017-7039 CVE-2017-7046 CVE-2017-7048 CVE-2017-7055 CVE-2017-7056 CVE-2017-7061 CVE-2017-7064 Package :...

Cisco Web Security Appliance Cross-Site Scripting Vulnerability (CNVD-2017-26110)

Cisco Web Security Appliance is the United States Cisco Cisco company's set of Web security appliances. A cross-site scripting vulnerability exists in the Cisco Web Security Appliance WEB interface, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code...

Cisco Web Security Appliance Unauthorized Access Vulnerability

Cisco Web Security Appliance is the United States Cisco Cisco company's set of Web security appliances. An access restriction bypass vulnerability exists in the Cisco Web Security Appliance Web proxy feature, which could be exploited by remote attackers to submit a special request to access the...

Cisco Web Security Appliance AsyncOS Static Password Preservation Vulnerability

Cisco Web Security Appliance is the United States Cisco Cisco company's set of Web security appliances. The Cisco Web Security Appliance AsyncOS contains a default static password that allows remote attackers to exploit vulnerabilities to gain unauthorized access to the account...

CVE-2017-6746

A vulnerability in the web interface of the Cisco Web Security Appliance WSA could allow an authenticated, remote attacker to perform command injection and elevate privileges to root. The attacker must authenticate with valid administrator credentials. Affected Products: Cisco AsyncOS Software 10...

Improper access control

A vulnerability in the web proxy functionality of the Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to forward traffic from the web proxy interface of an affected device to the administrative management interface of an affected device, aka an Access Control Bypa...

Cross site scripting

A vulnerability in AsyncOS for the Cisco Web Security Appliance WSA could allow an unauthenticated, local attacker to log in to the device with the privileges of a limited user or an unauthenticated, remote attacker to authenticate to certain areas of the web GUI, aka a Static Credentials...

CVE-2017-6748

A vulnerability in the CLI parser of the Cisco Web Security Appliance WSA could allow an authenticated, local attacker to perform command injection and elevate privileges to root. The attacker must authenticate with valid operator-level or administrator-level credentials. Affected Products: virtu...

CVE-2017-6746

A vulnerability in the web interface of the Cisco Web Security Appliance WSA could allow an authenticated, remote attacker to perform command injection and elevate privileges to root. The attacker must authenticate with valid administrator credentials. Affected Products: Cisco AsyncOS Software 10...

CVE-2017-6750

A vulnerability in AsyncOS for the Cisco Web Security Appliance WSA could allow an unauthenticated, local attacker to log in to the device with the privileges of a limited user or an unauthenticated, remote attacker to authenticate to certain areas of the web GUI, aka a Static Credentials...

CVE-2017-6749

A vulnerability in the web-based management interface of Cisco Web Security Appliance WSA could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the web-based management interface of an affected device. Affected Products: virtual and...

CVE-2017-6751

A vulnerability in the web proxy functionality of the Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to forward traffic from the web proxy interface of an affected device to the administrative management interface of an affected device, aka an Access Control Bypa...

CVE-2017-6750

A vulnerability in AsyncOS for the Cisco Web Security Appliance WSA could allow an unauthenticated, local attacker to log in to the device with the privileges of a limited user or an unauthenticated, remote attacker to authenticate to certain areas of the web GUI, aka a Static Credentials...

Command injection

A vulnerability in the web interface of the Cisco Web Security Appliance WSA could allow an authenticated, remote attacker to perform command injection and elevate privileges to root. The attacker must authenticate with valid administrator credentials. Affected Products: Cisco AsyncOS Software 10...

CVE-2017-6751

A vulnerability in the web proxy functionality of the Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to forward traffic from the web proxy interface of an affected device to the administrative management interface of an affected device, aka an Access Control Bypa...