Lucene search
+L

48 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/07/03 12:00 a.m.•6 views

CVE-2016-1441: Improper Input Validation

Cisco Cloud Network Automation Provisioner CNAP 1.00 in Cisco Configuration Assistant CCA allows remote attackers to bypass intended filesystem and administrative-endpoint restrictions via GET API calls, aka Bug ID CSCuy77145...

8.2CVSS7.7AI score0.0112EPSS
SaveExploits0References2
CNVD
CNVD
•added 2016/07/01 12:00 a.m.•9 views

Cisco Configuration Assistant Cloud Network Automation Provisioner Information Disclosure Vulnerability

Cisco Configuration Assistant CCA is a suite of solutions from Cisco that simplifies the configuration, deployment, and management of Cisco intelligent business communications systems.Cisco Cloud Network Automation Provisioner CNAP is one of the cloud network Automation Provisioning Software. An...

8.2CVSS6.4AI score0.0112EPSS
SaveExploits0References1
Cisco
Cisco
•added 2016/06/30 5:30 p.m.•69 views

Cisco Configuration Assistant Request Processing Unauthorized Access Vulnerability

A vulnerability in Cisco Configuration Assistant CCA could allow an unauthenticated, remote attacker to access sensitive file systems and administrative endpoints without user authentication. The vulnerability is due to lack of controller mechanisms and input validation checks. An attacker could...

5.8CVSS8.4AI score0.0112EPSS
SaveExploits0References1
OSV
OSV
•added 2016/05/12 1:59 a.m.•10 views

CVE-2016-1393

SQL injection vulnerability in Cisco Cloud Network Automation Provisioner CNAP 1.0 and 1.1 allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCuy72175...

7.1CVSS6.1AI score0.00861EPSS
SaveExploits0References2
NVD
NVD
•added 2016/05/12 1:59 a.m.•29 views

CVE-2016-1393

SQL injection vulnerability in Cisco Cloud Network Automation Provisioner CNAP 1.0 and 1.1 allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCuy72175...

7.1CVSS7.2AI score0.00861EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/05/12 12:00 a.m.•5 views

CVE-2016-1393: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Cisco Cloud Network Automation Provisioner CNAP 1.0 and 1.1 allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCuy72175...

7.1CVSS7.4AI score0.00861EPSS
SaveExploits0References2
Cisco
Cisco
•added 2016/05/10 9:30 a.m.•101 views

Cisco Cloud Network Automation Provisioner SQL Injection Vulnerability

A vulnerability in the web framework of Cisco Cloud Network Automation Provisioner CNAP could allow an authenticated, remote attacker to impact the integrity of an affected system by executing arbitrary SQL queries. The vulnerability is due to a failure to validate user-supplied input in SQL...

5.5CVSS7.1AI score0.00861EPSS
SaveExploits0References1
Openbugbounty
Openbugbounty
•added 2016/03/09 10:30 p.m.•12 views

feedback.cloud.net XSS vulnerability

Vulnerable URL: http://feedback.cloud.net/knowledge-base/search/999%22%3E%3Csvg%2Fonload%3Dprompt%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / No...

6.2AI score
SaveExploits0
Rows per page
Query Builder