Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
content gateway vulnerabilities and exploits
(subscribe to this query)
6.1
CVSSv3
CVE-2023-0214
A cross-site scripting vulnerability in Skyhigh SWG in main releases 11.x before 11.2.6, 10.x before 10.2.17, and controlled release 12.x before 12.0.1 allows a remote malicious user to craft SWG-specific internal requests with URL paths to any third-party website, causing arbitr...
Trellix Skyhigh Secure Web Gateway 12.0.0
Trellix Skyhigh Secure Web Gateway
5.4
CVSSv3
CVE-2022-25630
An authenticated user can embed malicious content with XSS into the admin group policy page.
Symantec Messaging Gateway
5.4
CVSSv3
CVE-2022-25629
An authenticated user who has the privilege to add/edit annotations on the Content tab, can craft a malicious annotation that can be executed on the annotations page (Annotation Text Column).
Symantec Messaging Gateway
6.5
CVSSv3
CVE-2022-20922
Multiple vulnerabilities in the Server Message Block Version 2 (SMB2) processor of the Snort detection engine on multiple Cisco products could allow an unauthenticated, remote malicious user to bypass the configured policies or cause a denial of service (DoS) condition on an affe...
Cisco Firepower Threat Defense 7.1.0
Cisco Firepower Threat Defense 7.2.0.1
Cisco Firepower Threat Defense 7.1.0.1
Cisco Firepower Threat Defense 7.1.0.2
Cisco Firepower Threat Defense 7.2.0
Cisco Umbrella Insights Virtual Appliance 1.5.5
Cisco Umbrella Insights Virtual Appliance 1.5.6
Cisco Umbrella Insights Virtual Appliance 2.0.0
Cisco Umbrella Insights Virtual Appliance 2.0.2
Cisco Umbrella Insights Virtual Appliance 2.0.3
Cisco Umbrella Insights Virtual Appliance 2.1.0
Cisco Umbrella Insights Virtual Appliance 2.1.2
Cisco Umbrella Insights Virtual Appliance 2.1.5
Cisco Umbrella Insights Virtual Appliance 2.1.4
Cisco Umbrella Insights Virtual Appliance 2.4.12
Cisco Umbrella Insights Virtual Appliance 2.4.6
Cisco Umbrella Insights Virtual Appliance 2.4
Cisco Umbrella Insights Virtual Appliance 2.4.4
Cisco Umbrella Insights Virtual Appliance 2.5
Cisco Umbrella Insights Virtual Appliance 2.5.4
Cisco Umbrella Insights Virtual Appliance 2.5.5
Cisco Umbrella Insights Virtual Appliance 2.5.6
5.8
CVSSv3
CVE-2022-20943
Multiple vulnerabilities in the Server Message Block Version 2 (SMB2) processor of the Snort detection engine on multiple Cisco products could allow an unauthenticated, remote malicious user to bypass the configured policies or cause a denial of service (DoS) condition on an affe...
Cisco Firepower Threat Defense 7.0.0
Cisco Firepower Threat Defense 7.0.1
Cisco Firepower Threat Defense 7.0.0.1
Cisco Firepower Threat Defense 7.0.1.1
Cisco Cyber Vision 4.0.2
Cisco Cyber Vision 3.0.0
Cisco Cyber Vision 3.0.1
Cisco Cyber Vision 3.0.2
Cisco Cyber Vision 3.0.3
Cisco Cyber Vision 3.0.5
Cisco Cyber Vision 3.0.6
Cisco Cyber Vision 3.1.0
Cisco Cyber Vision 3.1.2
Cisco Cyber Vision 3.1.1
Cisco Cyber Vision 3.2.3
Cisco Cyber Vision 3.2.1
Cisco Cyber Vision 3.2.4
Cisco Cyber Vision 3.2.0
Cisco Cyber Vision 3.2.2
Cisco Cyber Vision 4.0.0
Cisco Cyber Vision 4.0.1
Cisco Cyber Vision 4.0.3
8.6
CVSSv3
CVE-2022-20933
A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z3 Teleworker Gateway devices could allow an unauthenticated, remote malicious user to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient...
Cisco Meraki Mx64 Firmware
Cisco Meraki Mx64w Firmware
Cisco Meraki Mx65 Firmware
Cisco Meraki Mx65w Firmware
Cisco Meraki Mx67 Firmware
Cisco Meraki Mx67cw Firmware
Cisco Meraki Mx67w Firmware
Cisco Meraki Mx68 Firmware
Cisco Meraki Mx68cw Firmware
Cisco Meraki Mx68w Firmware
Cisco Meraki Mx75 Firmware
Cisco Meraki Mx84 Firmware
Cisco Meraki Mx85 Firmware
Cisco Meraki Mx95 Firmware
Cisco Meraki Mx100 Firmware
Cisco Meraki Mx105 Firmware
Cisco Meraki Mx250 Firmware
Cisco Meraki Mx400 Firmware
Cisco Meraki Mx450 Firmware
Cisco Meraki Mx600 Firmware
Cisco Meraki Vmx Firmware
Cisco Meraki Z3c Firmware -
8.6
CVSSv3
CVE-2022-20837
A vulnerability in the DNS application layer gateway (ALG) functionality that is used by Network Address Translation (NAT) in Cisco IOS XE Software could allow an unauthenticated, remote malicious user to cause an affected device to reload. This vulnerability is due to a logic er...
Cisco Ios Xe -
NA
CVE-2022-20849
A vulnerability in the Broadband Network Gateway PPP over Ethernet (PPPoE) feature of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause the PPPoE process to continually crash. This vulnerability exists because the PPPoE feature does not properly han...
9.8
CVSSv3
CVE-2022-1700
Improper Restriction of XML External Entity Reference ('XXE') vulnerability in the Policy Engine of Forcepoint Data Loss Prevention (DLP), which is also leveraged by Forcepoint One Endpoint (F1E), Web Security Content Gateway, Email Security with DLP enabled, and Cloud ...
Forcepoint Cloud Security Gateway
Forcepoint Email Security
Forcepoint One Endpoint With Policy Engine
Forcepoint Data Loss Prevention
Forcepoint Web Security Content Gateway
6.5
CVSSv3
CVE-2022-31041
Open Forms is an application for creating and publishing smart forms. Open Forms supports file uploads as one of the form field types. These fields can be configured to allow only certain file extensions to be uploaded by end users (e.g. only PDF / Excel / ...). The input validat...
Maykinmedia Open Forms
Maykinmedia Open Forms 1.1.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322
cross-site request forgery
unauthorized
CVE-2024-33925
reflected XSS
CVE-2023-51580
CVE-2023-51579
CVE-2015-2051
CVE-2023-51609
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
NEXT »