Design/Logic Flaw

The API web interface in Cisco Prime Infrastructure before 3.1 and Cisco Evolved Programmable Network Manager before 1.2.4 allows remote authenticated users to bypass intended RBAC restrictions and obtain sensitive information, and consequently gain privileges, via crafted JSON data, aka Bug ID...

CVE-2016-1406

The API web interface in Cisco Prime Infrastructure before 3.1 and Cisco Evolved Programmable Network Manager before 1.2.4 allows remote authenticated users to bypass intended RBAC restrictions and obtain sensitive information, and consequently gain privileges, via crafted JSON data, aka Bug ID...

PT-2016-2114

Name of the Vulnerable Software and Affected Versions Cisco Prime Infrastructure versions prior to 3.1 Cisco Evolved Programmable Network Manager versions prior to 1.2.4 Description The issue is related to a lack of proper access control in the API web interface, allowing remote authenticated use...

CVE-2016-1406: Improper Access Control

The API web interface in Cisco Prime Infrastructure before 3.1 and Cisco Evolved Programmable Network Manager before 1.2.4 allows remote authenticated users to bypass intended RBAC restrictions and obtain sensitive information, and consequently gain privileges, via crafted JSON data, aka Bug ID...

Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Privilege Gain Vulnerability

Cisco Prime Infrastructure PI and Cisco Evolved Programmable Network Manager EPNM are both products of the U.S. Cisco Cisco.PI is a set of solutions for wireless management through Cisco Prime LAN Management Solution LMS and Cisco Prime Network Control System NCS technologies; EPNM is a network...

Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager JSON Privilege Escalation Vulnerability

A vulnerability in the application programming interface API web interface of the Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager could allow an authenticated, remote attacker to perform privilege escalation on the affected device. The attacker can escalate privileges to...

The vulnerability of the Cisco Evolved Programmable Network Manager and the Cisco Prime Infrastructure network lifecycle management software allows attackers to circumvent existing RBAC restrictions and increase their privileges.

The vulnerability of the Cisco Evolved Programmable Network Manager and the Cisco Prime Infrastructure network lifecycle management software is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass existing RBAC restrictions and increase their...

The vulnerability of the Cisco Evolved Programmable Network Manager, a software tool for managing network services, and the Cisco Prime Infrastructure, a software tool for managing network lifecycles, allows a perpetrator to execute arbitrary code.

The vulnerabilities of the Cisco Evolved Programmable Network Manager and the Cisco Prime Infrastructure network lifecycle management software exist due to insufficient verification of input data. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code using specially...

WordPress SyntaxHighlighter Evolved Plugin <= 3.1.9 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Upgrade the plugin...

Cisco Prime Infrastructure elevation of privilege vulnerability (CNVD-2016-02072)

Cisco Prime Infrastructure is the United States Cisco Cisco company's set of wireless management through the Cisco Prime LAN Management Solution LMS and Cisco Prime Network Control System NCS technology solutions. An elevation of privilege vulnerability exists in Cisco Prime Infrastructure 1.2.0...

Cisco Prime Infrastructure and Evolved Programmable Network Manager Remote Code Execution Vulnerability

A vulnerability in the web interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager EPNM could allow an unauthenticated, remote attacker to execute arbitrary code on a targeted system. The vulnerability is due to insufficient sanitization of HTTP user-supplied input...

CVE-2016-1291: Improper Input Validation

Cisco Prime Infrastructure 1.2.0 through 2.22 and Cisco Evolved Programmable Network Manager EPNM 1.2 allow remote attackers to execute arbitrary code via crafted deserialized data in an HTTP POST request, aka Bug ID CSCuw03192...

CVE-2016-1290: Undefined Security Weakness

The web API in Cisco Prime Infrastructure 1.2.0 through 2.22 and Cisco Evolved Programmable Network Manager EPNM 1.2 allows remote authenticated users to bypass intended RBAC restrictions and gain privileges via an HTTP request that is inconsistent with a pattern filter, aka Bug ID CSCuy10227...

PT-2016-1646

Name of the Vulnerable Software and Affected Versions Cisco Evolved Programmable Network Manager versions 1.2 Cisco Prime Infrastructure versions 1.2.0 through 2.22 Description The issue exists due to insufficient input validation, allowing a remote attacker to execute arbitrary code by sending a...

PT-2016-1647

Name of the Vulnerable Software and Affected Versions Cisco Prime Infrastructure versions 1.2.0 through 2.22 Cisco Evolved Programmable Network Manager EPNM version 1.2 Description The issue is related to insufficient access control in the web API, allowing remote authenticated users to bypass...

Galaxy Empire: Evolved - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Galaxy Empire: Evolved published at the 'play' market has multiple vulnerabilities...

Dungeon Rush: Evolved - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Dungeon Rush: Evolved published at the 'play' market has multiple vulnerabilities...

Tutorial Ark Survival Evolved - Base64 encoded String, Exported ContentProvider, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Tutorial Ark Survival Evolved published at the 'play' market has multiple vulnerabilities...

WordPress SyntaxHighlighter Evolved Plugin <= 3.1.5 - Cross Site Scripting

This plugin is prone to a cross site scripting vulnerability in clipboard.swf. Solution Update the plugin...

Gearbox Software Halo Combat Evolved 1.x Game Server Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/11147/info The Halo Combat Evolved game server is reported prone to a remote denial of service vulnerability. A remote attacker may exploit this vulnerability to deny service for legitimate game players. Patches are...