https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 19:22:40 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-02985 bdu:2023-02985 https://cve.radiocsirt.org/vuln/bdu:2023-02985 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0138 certfr-2023-avi-0138 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0138 https://cve.radiocsirt.org/vuln/cisco-sa-esa-sma-privesc-9dvkfpj8 <p>Multiple vulnerabilities in the web UI and CLI of Cisco Email Security Appliance (ESA) and Cisco Secure Email and Web Manager could allow an authenticated attacker to perform injection attacks or elevate privileges. For more information about these vulnerabilities, see the Details [&#34;#details&#34;] section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.</p> <p>Multiple vulnerabilities in the web UI and CLI of Cisco Email Security Appliance (ESA) and Cisco Secure Email and Web Manager could allow an authenticated attacker to perform injection attacks or elevate privileges. For more information about these vulnerabilities, see the Details [&#34;#details&#34;] section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.</p> https://cve.radiocsirt.org/vuln/cisco-sa-esa-sma-privesc-9dvkfpj8 https://cve.radiocsirt.org/vuln/euvd-2026-7911 EUVD-2026-7911 https://cve.radiocsirt.org/vuln/euvd-2026-7911 https://cve.radiocsirt.org/vuln/fkie_cve-2023-20075 <p>Vulnerability in the CLI of Cisco Secure Email Gateway could allow an authenticated, remote attacker to execute arbitrary commands. These vulnerability is due to improper input validation in the CLI. An attacker could exploit this vulnerability by injecting operating system commands into a legitimate command. A successful exploit could allow the attacker to escape the restricted command prompt and execute arbitrary commands on the underlying operating system. To successfully exploit this vulnerability, an attacker would need valid Administrator credentials.</p> <p>Vulnerability in the CLI of Cisco Secure Email Gateway could allow an authenticated, remote attacker to execute arbitrary commands. These vulnerability is due to improper input validation in the CLI. An attacker could exploit this vulnerability by injecting operating system commands into a legitimate command. A successful exploit could allow the attacker to escape the restricted command prompt and execute arbitrary commands on the underlying operating system. To successfully exploit this vulnerability, an attacker would need valid Administrator credentials.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-20075 https://cve.radiocsirt.org/vuln/ghsa-vwv2-hg2h-447m <p>Vulnerability in the CLI of Cisco Secure Email Gateway could allow an authenticated, remote attacker to execute arbitrary commands. These vulnerability is due to improper input validation in the CLI. An attacker could exploit this vulnerability by injecting operating system commands into a legitimate command. A successful exploit could allow the attacker to escape the restricted command prompt and execute arbitrary commands on the underlying operating system. To successfully exploit this vulnerability, an attacker would need valid Administrator credentials.</p> <p>Vulnerability in the CLI of Cisco Secure Email Gateway could allow an authenticated, remote attacker to execute arbitrary commands. These vulnerability is due to improper input validation in the CLI. An attacker could exploit this vulnerability by injecting operating system commands into a legitimate command. A successful exploit could allow the attacker to escape the restricted command prompt and execute arbitrary commands on the underlying operating system. To successfully exploit this vulnerability, an attacker would need valid Administrator credentials.</p> https://cve.radiocsirt.org/vuln/ghsa-vwv2-hg2h-447m https://cve.radiocsirt.org/vuln/gsd-2023-20075 gsd-2023-20075 https://cve.radiocsirt.org/vuln/gsd-2023-20075 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0399 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Cisco Email Security Appliance und Cisco AsyncOS ausnutzen, um seine Privilegien zu erhöhen und beliebige Befehle auszuführen.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Cisco Email Security Appliance und Cisco AsyncOS ausnutzen, um seine Privilegien zu erhöhen und beliebige Befehle auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0399