Authorization

A vulnerability in the key store of Cisco Application Services Engine Software could allow an authenticated, local attacker to read sensitive information of other users on an affected device. The vulnerability is due to insufficient authorization limitations. An attacker could exploit this...

PT-2020-2899

Name of the Vulnerable Software and Affected Versions Cisco Application Services Engine Software affected versions not specified Description A vulnerability in the key store of Cisco Application Services Engine Software could allow an authenticated, local attacker to read sensitive information of...

CVE-2020-3335: Missing Authentication for Critical Function

A vulnerability in the key store of Cisco Application Services Engine Software could allow an authenticated, local attacker to read sensitive information of other users on an affected device. The vulnerability is due to insufficient authorization limitations. An attacker could exploit this...

CVE-2020-3333: Missing Authentication for Critical Function

A vulnerability in the API of Cisco Application Services Engine Software could allow an unauthenticated, remote attacker to update event policies on an affected device. The vulnerability is due to insufficient authentication of users who modify policies on an affected device. An attacker could...

CVE-2018-8390

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8353, CVE-2018-8355, CVE-2018-8359,...

CVE-2013-1125

Summary: CVE-2013-1125 affects Cisco Identity Services Engine Software, Secure Access Control System (ACS), Application Networking Manager (ANM), Prime LAN Management Solution (LMS), Prime Network Control System, Quad, Context Directory Agent, Prime Collaboration, Unified Provisioning Manager, an...

PT-2013-2897

Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine Software affected versions not specified Cisco Secure Access Control System ACS affected versions not specified Cisco Application Networking Manager ANM affected versions not specified Cisco Prime LAN Management...

CVE-2013-1125: Improper Input Validation

The command-line interface in Cisco Identity Services Engine Software, Secure Access Control System ACS, Application Networking Manager ANM, Prime LAN Management Solution LMS, Prime Network Control System, Quad, Context Directory Agent, Prime Collaboration, Unified Provisioning Manager, and Netwo...

Exhibit Engine 1.22 - fetchsettings.php?toroot Remote File Inclusion

Exhibit Engine 1.22 - fetchsettings.php?toroot Remote File Inclusion source: https://www.securityfocus.com/bid/20793/info Exhibit Engine Software is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. A successful exploit of these issue...

Exhibit Engine 1.22 - 'fstyles.php?toroot' Remote File Inclusion

source: https://www.securityfocus.com/bid/20793/info Exhibit Engine Software is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. A successful exploit of these issues allows an attacker to execute arbitrary server-side script code on ...

Exhibit Engine 1.22 - 'fetchsettings.php?toroot' Remote File Inclusion

source: https://www.securityfocus.com/bid/20793/info Exhibit Engine Software is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. A successful exploit of these issues allows an attacker to execute arbitrary server-side script code on ...

Vulnerability in Scan Engine Software

//-------------------------------------- // Vulnerability in Scan Engine Software // Release Date : 2005-09-15 // Version: Currents may be all priors versions // Tested on: Windows 2000 SP2 & SP4 // Tested on: Windows 2000 Server SP4 // // Discovered by: fRoGGz, maew, shadok & mogwai // Credit to...