https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-09T02:46:34.439864+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/CERTA-2013-AVI-378 CERTA-2013-AVI-378 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Cisco Web Security Appliance</span>. Elles perm… 2026-10-09T02:46:34.514662+00:00 CERTA-2013-AVI-378 https://vulnerability.circl.lu/vuln/fkie_cve-2013-3383 fkie_cve-2013-3383 2026-10-09T02:46:34.514774+00:00

The web framework in IronPort AsyncOS on Cisco Web Security Appliance devices before 7.1.3-013, 7.5 before 7.5.0-838, and 7.7 before 7.7.0-550 allows remote authenticated users to execute arbitrary commands via crafted command-line input in a URL sent over IPv4, aka Bug ID CSCzv69294.

 https://vulnerability.circl.lu/vuln/ghsa-gfqw-7q63-8qv4 GHSA-gfqw-7q63-8qv4 2026-10-09T02:46:34.514843+00:00

The web framework in IronPort AsyncOS on Cisco Web Security Appliance devices before 7.1.3-013, 7.5 before 7.5.0-838, and 7.7 before 7.7.0-550 allows remote authenticated users to execute arbitrary commands via crafted command-line input in a URL sent over IPv4, aka Bug ID CSCzv69294.

 https://vulnerability.circl.lu/vuln/gsd-2013-3383 gsd-2013-3383 2026-10-09T02:46:34.514876+00:00 gsd-2013-3383 https://vulnerability.circl.lu/vuln/var-201306-0166 VAR-201306-0166 2026-10-09T02:46:34.514897+00:00

The web framework in IronPort AsyncOS on Cisco Web Security Appliance devices before 7.1.3-013, 7.5 before 7.5.0-838, and 7.7 before 7.7.0-550 allows remote authenticated users to execute arbitrary commands via crafted command-line input in a URL sent over IPv4, aka Bug ID CSCzv69294. Successfully exploiting this issue may allow an attacker to execute arbitrary commands with elevated privileges in context of the affected application. This issue being tracked by Cisco bug ID CSCzv69294. The appliance provides SaaS-based access control, real-time network reporting and tracking, and security policy formulation. This vulnerability stems from the failure to correctly filter the special URL submitted by the user