CVE-2026-108710 NornicDB through 1.4.1 Missing Authorization via Vector Search Endpoints

NornicDB through 1.4.1 contains a missing authorization vulnerability that allows authenticated users to bypass per-database read restrictions on the /nornicdb/search and /nornicdb/similar endpoints. Viewer-role users allowlisted for a database but denied read can submit search queries or node ID...

EUVD-2015-4328

Malware in sbrugna...

CVE-2015-4305: Undefined Security Weakness

The web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote authenticated users to bypass intended system-database read restrictions, and discover credentials or SNMP communities for arbitrary tenant domains, via a crafted URL, aka Bug ID CSCus62656...

PT-2015-6513

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Assurance versions prior to 10.5.1.53684-1 Description The issue allows remote authenticated users to bypass intended system-database read restrictions. This can lead to the discovery of credentials or SNMP communitie...