Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
cisco content security management appliance 9.1.0 vulnerabilities and exploits
(subscribe to this query)
6.5
CVSSv3
CVE-2015-7973
NTP prior to 4.2.8p6 and 4.3.x prior to 4.3.90, when configured in broadcast mode, allows man-in-the-middle malicious users to conduct replay attacks by sniffing the network.
Ntp Ntp 4.2.8
Ntp Ntp
Siemens Tim 4r-ie Firmware
Siemens Tim 4r-ie Dnp3 Firmware
Freebsd Freebsd 9.3
Freebsd Freebsd 10.2
Freebsd Freebsd 10.1
Freebsd Freebsd
Netapp Oncommand Balance -
Netapp Clustered Data Ontap -
Canonical Ubuntu Linux 16.04
Canonical Ubuntu Linux 14.04
Canonical Ubuntu Linux 12.04
6.2
CVSSv3
CVE-2015-7975
The nextvar function in NTP prior to 4.2.8p6 and 4.3.x prior to 4.3.90 does not properly validate the length of its input, which allows an malicious user to cause a denial of service (application crash).
Ntp Ntp 4.3.80
Ntp Ntp 4.3.51
Ntp Ntp 4.3.17
Ntp Ntp 4.3.30
Ntp Ntp 4.3.74
Ntp Ntp 4.3.67
Ntp Ntp 4.3.14
Ntp Ntp 4.3.27
Ntp Ntp 4.3.13
Ntp Ntp 4.3.36
Ntp Ntp 4.3.16
Ntp Ntp 4.3.35
Ntp Ntp 4.3.53
Ntp Ntp 4.3.64
Ntp Ntp 4.3.20
Ntp Ntp 4.3.40
Ntp Ntp 4.3.68
Ntp Ntp 4.3.46
Ntp Ntp 4.3.77
Ntp Ntp 4.3.1
Ntp Ntp 4.3.6
Ntp Ntp 4.3.2
5.9
CVSSv3
CVE-2021-45105
Apache Log4j2 versions 2.0-alpha1 up to and including 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted strin...
Apache Log4j
Netapp Cloud Manager -
Debian Debian Linux 10.0
Debian Debian Linux 11.0
Sonicwall Network Security Manager
Sonicwall Email Security
Sonicwall Web Application Firewall
Sonicwall 6bk1602-0aa12-0tp0 Firmware
Sonicwall 6bk1602-0aa22-0tp0 Firmware
Sonicwall 6bk1602-0aa32-0tp0 Firmware
Sonicwall 6bk1602-0aa42-0tp0 Firmware
Sonicwall 6bk1602-0aa52-0tp0 Firmware
Oracle E-business Suite 12.2
Oracle Retail Back Office 14.1
Oracle Weblogic Server 12.2.1.3.0
Oracle Webcenter Portal 12.2.1.3.0
Oracle Webcenter Sites 12.2.1.3.0
Oracle Managed File Transfer 12.2.1.3.0
Oracle Retail Order Broker 16.0
Oracle Retail Integration Bus 14.1.3
Oracle Retail Returns Management 14.1
Oracle Retail Central Office 14.1
75 Github repositories
5 Articles
5.9
CVSSv3
CVE-2016-1411
A vulnerability in the update functionality of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA), Cisco Web Security Appliance (WSA), and Cisco Content Management Security Appliance (SMA) could allow an unauthenticated, remote malicious user to impersonate the updat...
Cisco Content Security Management Appliance 9.6.0
Cisco Email Security Appliance 7.5.2-201
Cisco Email Security Appliance 7.5.2-hp2-303
Cisco Email Security Appliance 8.0.1-023
Cisco Email Security Appliance 7.6.3-025
Cisco Email Security Appliance 8.5.1-021
Cisco Content Security Management Appliance 9.1.0-004
Cisco Web Security Appliance 7.7.0-608
Cisco Web Security Appliance 8.8.0-000
Cisco Content Security Management Appliance 9.1.0-103
Cisco Email Security Appliance 8.5.0-000
Cisco Web Security Appliance 7.7.5-835
Cisco Content Security Management Appliance 9.1.0-033
Cisco Content Security Management Appliance 9.1.0-031
Cisco Content Security Management Appliance 9.1.0
Cisco Email Security Appliance 8.5.0-er1-198
5.9
CVSSv3
CVE-2016-6416
The FTP service in Cisco AsyncOS on Email Security Appliance (ESA) devices 9.6.0-000 up to and including 9.9.6-026, Web Security Appliance (WSA) devices 9.0.0-162 up to and including 9.5.0-444, and Content Security Management Appliance (SMA) devices allows remote malicious users ...
Cisco Email Security Appliance 9.9 Base
Cisco Web Security Appliance 9.5.0-284
Cisco Content Security Management Appliance 9.6.0
Cisco Web Security Appliance 9.5.0-235
Cisco Content Security Management Appliance 9.5.0
Cisco Email Security Appliance 9.6.0-000
Cisco Web Security Appliance 9.0.0-162
Cisco Email Security Appliance 9.6.0-051
Cisco Content Security Management Appliance 9.1.0-004
Cisco Email Security Appliance 9.7.1-066
Cisco Email Security Appliance 9.9.6-026
Cisco Web Security Appliance 9.1 Base
Cisco Web Security Appliance 9.1.0-000
Cisco Content Security Management Appliance 9.1.0-103
Cisco Email Security Appliance 9.6.0-042
Cisco Web Security Appliance 9.5 Base
Cisco Content Security Management Appliance 9.1.0-033
Cisco Content Security Management Appliance 9.1.0-031
Cisco Web Security Appliance 9.1.0-070
Cisco Content Security Management Appliance 9.1.0
Cisco Web Security Appliance 9.5.0-444
5.3
CVSSv3
CVE-2017-6781
A vulnerability in the management of shell user accounts for Cisco Policy Suite (CPS) Software for CPS appliances could allow an authenticated, local malicious user to gain elevated privileges on an affected system. The affected privilege level is not at the root level. The vulne...
Cisco Policy Suite 12.0.0
Cisco Policy Suite 9.0.0
Cisco Policy Suite 10.0.0
Cisco Policy Suite 11.0.0
Cisco Policy Suite 9.1.0
5.3
CVSSv3
CVE-2015-8139
ntpq in NTP prior to 4.2.8p7 allows remote malicious users to obtain origin timestamps and then impersonate peers via unspecified vectors.
Ntp Ntp
4.8
CVSSv3
CVE-2015-8140
The ntpq protocol in NTP prior to 4.2.8p7 allows remote malicious users to conduct replay attacks by sniffing the network.
Ntp Ntp
4.3
CVSSv3
CVE-2015-7976
The ntpq saveconfig command in NTP 4.1.2, 4.2.x prior to 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77 does not properly filter special characters, which allows malicious users to cause unspecified impact via a crafted filename.
Ntp Ntp 4.1.2
Ntp Ntp
Ntp Ntp 4.3.80
Ntp Ntp 4.3.51
Ntp Ntp 4.3.17
Ntp Ntp 4.3.30
Ntp Ntp 4.3.74
Ntp Ntp 4.3.67
Ntp Ntp 4.3.14
Ntp Ntp 4.3.27
Ntp Ntp 4.3.13
Ntp Ntp 4.3.36
Ntp Ntp 4.3.16
Ntp Ntp 4.3.35
Ntp Ntp 4.3.53
Ntp Ntp 4.3.64
Ntp Ntp 4.3.20
Ntp Ntp 4.3.40
Ntp Ntp 4.3.68
Ntp Ntp 4.3.46
Ntp Ntp 4.3.77
Ntp Ntp 4.3.1
NA
CVE-2015-6291
Cisco AsyncOS prior to 8.5.7-043, 9.x prior to 9.1.1-023, and 9.5.x and 9.6.x prior to 9.6.0-046 on Email Security Appliance (ESA) devices mishandles malformed fields during body-contains, attachment-contains, every-attachment-contains, attachment-binary-contains, dictionary-matc...
Cisco Email Security Appliance 8.5.6-073
Cisco Email Security Appliance 9.1.0-032
Cisco Email Security Appliance 7.7.0-000
Cisco Email Security Appliance 8.0 Base
Cisco Email Security Appliance 9.0.0-461
Cisco Email Security Appliance 9.0.0-212
Cisco Email Security Appliance 8.5.6-052
Cisco Email Security Appliance 8.5.6-074
Cisco Email Security Appliance 8.5.6-106
Cisco Email Security Appliance 8.5.6-113
Cisco Email Security Appliance 9.6.0-042
Cisco Email Security Appliance 9.0.0
Cisco Email Security Appliance 8.5.7-042
Cisco Email Security Appliance 8.5 Base
Cisco Email Security Appliance 7.7.1-000
Cisco Email Security Appliance 9.0.5-000
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
privilege
CVE-2022-48762
CVE-2022-48751
CVE-2024-37079
CVE-2024-30848
LFI
man-in-the-middle
CVE-2022-48736
CVE-2024-30103
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »