9 matches found
EUVD-2016-2492
Malware in sbrugna...
CVE-2016-1441
Cisco Cloud Network Automation Provisioner CNAP 1.00 in Cisco Configuration Assistant CCA allows remote attackers to bypass intended filesystem and administrative-endpoint restrictions via GET API calls, aka Bug ID CSCuy77145...
Code injection
Cisco Cloud Network Automation Provisioner CNAP 1.00 in Cisco Configuration Assistant CCA allows remote attackers to bypass intended filesystem and administrative-endpoint restrictions via GET API calls, aka Bug ID CSCuy77145...
CVE-2016-1441
Cisco Cloud Network Automation Provisioner CNAP 1.00 in Cisco Configuration Assistant CCA allows remote attackers to bypass intended filesystem and administrative-endpoint restrictions via GET API calls, aka Bug ID CSCuy77145...
CVE-2016-1441
CVE-2016-1441 affects Cisco Cloud Network Automation Provisioner (CNAP) 1.0(0) within Cisco Configuration Assistant (CCA). The vulnerability lets unauthenticated remote attackers bypass filesystem and administrative-endpoint restrictions by issuing GET API calls to CNAP’s API endpoints. Root caus...
CVE-2016-1393
SQL injection vulnerability in Cisco Cloud Network Automation Provisioner CNAP 1.0 and 1.1 allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCuy72175...
Sql injection
SQL injection vulnerability in Cisco Cloud Network Automation Provisioner CNAP 1.0 and 1.1 allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCuy72175...
CVE-2016-1393
SQL injection vulnerability in Cisco Cloud Network Automation Provisioner CNAP 1.0 and 1.1 allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCuy72175...
CVE-2016-1393
Cisco CNAP (Cloud Network Automation Provisioner) 1.0–1.1 contains a SQL injection vulnerability exploitable by an authenticated, remote attacker via crafted URLs. The underlying issue is failure to validate user-supplied input in SQL queries, enabling manipulation or disclosure of database data....