CVE-2023-20032

CVE-2023-20032 affects ClamAV HFS+ parser: vulnerable in versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier due to a missing buffer size check that can cause a heap buffer overflow. An unauthenticated, remote attacker could trigger arbitrary code execution with the ClamAV sc...

CVE-2019-15969

CVE-2019-15969 : Cisco Web Security Appliance (WSA) web UI has an input validation flaw allowing unauthenticated remote XSS via a crafted link. Impact is execution of script/HTML in the interface, potentially exposing browser-based data. Root cause: insufficient input validation in the management...

CVE-2021-1490

CVE-2021-1490 : Cisco Web Security Appliance (WSA) uses Cisco AsyncOS with a web-based management interface vulnerable to cross-site scripting (XSS) due to improper validation of user-supplied input. An unauthenticated, remote attacker can lure a user to upload a crafted file containing a malicio...

CVE-2018-0093

CVE-2018-0093 affects Cisco Web Security Appliance (WSA) and is a reflected XSS in the web-based management interface caused by insufficient input validation. An unauthenticated, remote attacker could lure a user to click a crafted link, enabling execution of script code in the interface context ...