New Alerts for Cisco, WithSecure, Mitel, and Wireshark.
Cisco
A vulnerability in the URL filtering mechanism of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass the URL reputation filters on an affected device. CVSSv3 score of 4.7
More info.
A DoS vulnerability was discovered in WithSecure products whereby the aerdl.dll unpacker handler crashes. This can lead to a possible scanning engine crash. The exploit can be triggered remotely by an attacker.
More info.
A vulnerability in the ccmweb component of MiContact Center Business server could allow an unauthenticated attacker to download arbitrary files due to insufficient restriction of URL parameters. A successful exploit could allow access to sensitive information.
More info.
Wireshark has published 7 new bulletins identifying memory leaks and software crash vulnerabilities. Highest CVSSv3 score of 4.3
More info.
Comments