Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-6391 State: PUBLISHED Published: 2016-10-05T20:00:00 Last Updated: 2024-08-06T01:29:19.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 12.2 and 15.0 through 15.3 allows remote attackers to cause a denial of service (traffic-processing outage) via a crafted series of Common Industrial Protocol (CIP) requests, aka Bug ID CSCur69036. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036914 - http://www.securityfocus.com/bid/93197 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160928-cip
CVE ID: CVE-2016-6392 State: PUBLISHED Published: 2016-10-05T17:00:00 Last Updated: 2024-08-06T01:29:19.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 12.2 and 15.0 through 15.3 and IOS XE 3.1 through 3.9 allow remote attackers to cause a denial of service (device restart) via a crafted IPv4 Multicast Source Discovery Protocol (MSDP) Source-Active (SA) message, aka Bug ID CSCud36767. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036914 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160928-msdp - http://www.securityfocus.com/bid/93211
CVE ID: CVE-2016-6393 State: PUBLISHED Published: 2016-10-05T20:00:00 Last Updated: 2024-08-06T01:29:19.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AAA service in Cisco IOS 12.0 through 12.4 and 15.0 through 15.6 and IOS XE 2.1 through 3.18 and 16.2 allows remote attackers to cause a denial of service (device reload) via a failed SSH connection attempt that is mishandled during generation of an error-log message, aka Bug ID CSCuy87667. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93196 - http://www.securitytracker.com/id/1036914 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160928
.securitytracker.com/id/1036914 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160928-aaados - https://ics-cert.us-cert.gov/advisories/ICSA-16-287-04
CVE ID: CVE-2016-6394 State: PUBLISHED Published: 2016-09-12T10:00:00 Last Updated: 2024-08-06T01:29:19.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in Cisco Firepower Management Center and Cisco FireSIGHT System Software through 6.1.0 allows remote attackers to hijack web sessions via a session identifier, aka Bug ID CSCuz80503. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92825 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160907-fsmc - http://www.securitytracker.com/id/1036757
CVE ID: CVE-2016-6395 State: PUBLISHED Published: 2016-09-12T10:00:00 Last Updated: 2024-08-06T01:29:19.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the web-based management interface in Cisco Firepower Management Center before 6.1 and FireSIGHT System Software before 6.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuz58658. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036755 - http://www.securityfocus.com/bid/92824 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160907-fsss
CVE ID: CVE-2016-6396 State: PUBLISHED Published: 2016-09-12T10:00:00 Last Updated: 2024-08-06T01:29:19.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Firepower Management Center before 6.1 and FireSIGHT System Software before 6.1, when certain malware blocking options are enabled, allow remote attackers to bypass malware detection via crafted fields in HTTP headers, aka Bug ID CSCuz44482. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92826 - http://www.securitytracker.com/id/1036756 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160907-fsss1
CVE ID: CVE-2016-6397 State: PUBLISHED Published: 2016-10-28T10:00:00 Last Updated: 2024-08-06T01:29:19.582Z Vendors: n/a Products: Cisco IPICS 4.8(1) to 4.10(1) Problem Types: unspecified Description: A vulnerability in the interdevice communications interface of the Cisco IP Interoperability and Collaboration System (IPICS) Universal Media Services (UMS) could allow an unauthenticated, remote attacker to modify configuration parameters of the UMS and cause the system to become unavailable. Affected Products: This vulnerability affects Cisco IPICS releases 4.8(1) to 4.10(1). More Information: CSCva46644. Known Affected Releases: 4.10(1) 4.8(1) 4.8(2) 4.9(1) 4.9(2). Additional Analyst Notes:
). More Information: CSCva46644. Known Affected Releases: 4.10(1) 4.8(1) 4.8(2) 4.9(1) 4.9(2). Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161026-ipics - http://www.securityfocus.com/bid/93913
CVE ID: CVE-2016-6398 State: PUBLISHED Published: 2016-09-12T10:00:00 Last Updated: 2024-08-06T01:29:19.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PPTP server in Cisco IOS 15.5(3)M does not properly initialize packet buffers, which allows remote attackers to obtain sensitive information from earlier network communication by reading packet data, aka Bug ID CSCvb16274. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92734 - http://www.securitytracker.com/id/1036732 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160902-ios
CVE ID: CVE-2016-6399 State: PUBLISHED Published: 2016-09-12T10:00:00 Last Updated: 2024-08-06T01:29:19.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco ACE30 Application Control Engine Module through A5 3.3 and ACE 4700 Application Control Engine appliances through A5 3.3 allow remote attackers to cause a denial of service (device reload) via crafted (1) SSL or (2) TLS packets, aka Bug ID CSCvb16317. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160908-ace - http://www.securityfocus.com/bid/92867 - http://www.securitytracker.com/id/1036748
CVE ID: CVE-2016-6401 State: PUBLISHED Published: 2016-09-17T01:00:00 Last Updated: 2024-08-06T01:29:19.775Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Carrier Routing System (CRS) 5.1 and 5.1.4, as used in CRS Carrier Grade Services for CRS-1 and CRS-3 devices, allows remote attackers to cause a denial of service (line-card reload) via crafted IPv6-over-MPLS packets, aka Bug ID CSCva32494. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160914-crs - http://www.securitytracker.com/id/1036830 - http://www.securityfocus.com/bid/92964
CVE ID: CVE-2016-6402 State: PUBLISHED Published: 2016-09-18T22:00:00 Last Updated: 2024-08-06T01:29:19.748Z Vendors: n/a Products: n/a Problem Types: n/a Description: UCS Manager and UCS 6200 Fabric Interconnects in Cisco Unified Computing System (UCS) through 3.0(2d) allow local users to obtain OS root access via crafted CLI input, aka Bug ID CSCuz91263. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036831 - http://www.securityfocus.com/bid/92956 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160914-ucs
CVE ID: CVE-2016-6403 State: PUBLISHED Published: 2016-09-18T22:00:00 Last Updated: 2024-08-06T01:29:20.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Data in Motion (DMo) application in Cisco IOS 15.6(1)T and IOS XE, when the IOx feature set is enabled, allows remote attackers to cause a denial of service via a crafted packet, aka Bug IDs CSCuy82904, CSCuy82909, and CSCuy82912. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160914-ios-xe - http://www.securityfocus.com/bid/92960 - http://www.securitytracker.com/id/1036833
CVE ID: CVE-2016-6404 State: PUBLISHED Published: 2016-09-18T22:00:00 Last Updated: 2024-08-06T01:29:20.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the web framework in Cisco IOx Local Manager in IOS 15.5(2)T and IOS XE allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuy19854. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92963 - http://www.securitytracker.com/id/1036834 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160914-ios
CVE ID: CVE-2016-6405 State: PUBLISHED Published: 2016-09-18T22:00:00 Last Updated: 2024-08-06T01:29:20.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Fog Director 1.0(0) for IOx allows remote authenticated users to bypass intended access restrictions and write to arbitrary files via the Cartridge interface, aka Bug ID CSCuz89368. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160914-ioxfd - http://www.securityfocus.com/bid/92958
CVE ID: CVE-2016-6406 State: PUBLISHED Published: 2016-09-22T22:00:00 Last Updated: 2024-08-06T01:29:20.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IronPort AsyncOS 9.1.2-023, 9.1.2-028, 9.1.2-036, 9.7.2-046, 9.7.2-047, 9.7.2-054, 10.0.0-124, and 10.0.0-125 on Email Security Appliance (ESA) devices, when Enrollment Client before 1.0.2-065 is installed, allows remote attackers to obtain root access via a connection to the testing/debugging interface, aka Bug ID CSCvb26017. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93116 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160922-esa
ecurityfocus.com/bid/93116 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160922-esa - http://www.securitytracker.com/id/1036881
CVE ID: CVE-2016-6407 State: PUBLISHED Published: 2016-09-17T01:00:00 Last Updated: 2024-08-06T01:29:20.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco AsyncOS through 9.5.0-444 on Web Security Appliance (WSA) devices allows remote attackers to cause a denial of service (link saturation) by making many HTTP requests for overlapping byte ranges simultaneously, aka Bug ID CSCuz27219. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160914-wsa - http://www.securitytracker.com/id/1036829 - http://www.securityfocus.com/bid/92955
CVE ID: CVE-2016-6408 State: PUBLISHED Published: 2016-09-24T01:00:00 Last Updated: 2024-08-06T01:29:20.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Prime Home 5.2.0 allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka Bug ID CSCvb17814. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93092 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160921-cph
CVE ID: CVE-2016-6409 State: PUBLISHED Published: 2016-09-24T01:00:00 Last Updated: 2024-08-06T01:29:20.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Data in Motion (DMo) component in Cisco IOS 15.6(1)T and IOS XE, when the IOx feature set is enabled, allows remote attackers to cause a denial of service (out-of-bounds access) via crafted traffic, aka Bug ID CSCuy54015. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036875 - http://www.securityfocus.com/bid/93094 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160921-dmo
CVE ID: CVE-2016-6410 State: PUBLISHED Published: 2016-09-24T01:00:00 Last Updated: 2024-08-06T01:29:20.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cisco Application-hosting Framework (CAF) component in Cisco IOS 15.6(1)T1 and IOS XE, when the IOx feature set is enabled, allows remote authenticated users to read arbitrary files via unspecified vectors, aka Bug ID CSCuy19856. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93090 - http://www.securitytracker.com/id/1036873 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160921-caf
CVE ID: CVE-2016-6411 State: PUBLISHED Published: 2016-09-24T01:00:00 Last Updated: 2024-08-06T01:29:20.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Firepower Management Center and FireSIGHT System Software 6.0.1 mishandle comparisons between URLs and X.509 certificates, which allows remote attackers to bypass intended do-not-decrypt settings via a crafted URL, aka Bug ID CSCva50585. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036877 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160921-fmc
CVE ID: CVE-2016-6412 State: PUBLISHED Published: 2016-09-24T01:00:00 Last Updated: 2024-08-06T01:29:20.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cisco Application-hosting Framework (CAF) component in Cisco IOS 15.6(1)T1 and IOS XE, when the IOx feature set is enabled, allows man-in-the-middle attackers to trigger arbitrary downloads via crafted HTTP headers, aka Bug ID CSCuz84773. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93088 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160921-caf1 - http://www.securitytracker.com/id/1036874
CVE ID: CVE-2016-6413 State: PUBLISHED Published: 2016-09-24T01:00:00 Last Updated: 2024-08-06T01:29:20.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: The installation procedure on Cisco Application Policy Infrastructure Controller (APIC) devices 1.3(2f) mishandles binary files, which allows local users to obtain root access via unspecified vectors, aka Bug ID CSCva50496. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160921-apic - http://www.securitytracker.com/id/1036872
CVE ID: CVE-2016-6414 State: PUBLISHED Published: 2016-09-22T22:00:00 Last Updated: 2024-08-06T01:29:20.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: iox in Cisco IOS, possibly 15.6 and earlier, and IOS XE, possibly 3.18 and earlier, allows local users to execute arbitrary IOx Linux commands on the guest OS via crafted iox command-line options, aka Bug ID CSCuz59223. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036876 - http://www.securityfocus.com/bid/93091 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160921-iox
CVE ID: CVE-2016-6415 State: PUBLISHED Published: 2016-09-19T01:00:00.000Z Last Updated: 2025-10-21T23:55:49.758Z Vendors: n/a Products: n/a Problem Types: n/a Description: The server IKEv1 implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.6, IOS XE through 3.18S, IOS XR 4.3.x and 5.0.x through 5.2.x, and PIX before 7.0 allows remote attackers to obtain sensitive information from device memory via a Security Association (SA) negotiation request, aka Bug IDs CSCvb29204 and CSCvb36055 or BENIGNCERTAIN. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securitytracker.com/id/1036841 - http://tools.cisco.com/security/center/conte
ADP Vulnrichment: References: - http://www.securitytracker.com/id/1036841 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160916-ikev1 - http://www.securityfocus.com/bid/93003
CVE ID: CVE-2016-6416 State: PUBLISHED Published: 2016-10-05T17:00:00 Last Updated: 2024-08-06T01:29:20.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FTP service in Cisco AsyncOS on Email Security Appliance (ESA) devices 9.6.0-000 through 9.9.6-026, Web Security Appliance (WSA) devices 9.0.0-162 through 9.5.0-444, and Content Security Management Appliance (SMA) devices allows remote attackers to cause a denial of service via a flood of FTP traffic, aka Bug IDs CSCuz82907, CSCuz84330, and CSCuz86065. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036915 - http://www.securityfocus.com/bid/93198 - http://www.securitytrac
ferences: - http://www.securitytracker.com/id/1036915 - http://www.securityfocus.com/bid/93198 - http://www.securitytracker.com/id/1036916 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160928-aos - http://www.securitytracker.com/id/1036917
CVE ID: CVE-2016-6417 State: PUBLISHED Published: 2016-10-05T17:00:00 Last Updated: 2024-08-06T01:29:20.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Cisco FireSIGHT System Software 4.10.2 through 6.1.0 and Firepower Management Center allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCva21636. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036918 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160928-fmc - http://www.securityfocus.com/bid/93199
CVE ID: CVE-2016-6418 State: PUBLISHED Published: 2016-10-05T17:00:00 Last Updated: 2024-08-06T01:29:20.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Cisco Videoscape Distribution Suite Service Manager (VDS-SM) 3.0 through 3.4.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCva14552. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93207 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160928-vds
CVE ID: CVE-2016-6419 State: PUBLISHED Published: 2016-10-05T10:00:00 Last Updated: 2024-08-06T01:29:19.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Cisco Firepower Management Center 4.10.3 through 5.4.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCur25485. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93206 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160928-fpmc
CVE ID: CVE-2016-6420 State: PUBLISHED Published: 2016-10-05T10:00:00 Last Updated: 2024-08-06T01:29:20.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco FireSIGHT System Software 4.10.3 through 5.4.0 in Firepower Management Center allows remote authenticated users to bypass authorization checks and gain privileges via a crafted HTTP request, aka Bug ID CSCur25467. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036919 - http://www.securityfocus.com/bid/93204 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160928-fmc1
CVE ID: CVE-2016-6421 State: PUBLISHED Published: 2016-10-05T20:00:00 Last Updated: 2024-08-06T01:29:20.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS XR 5.2.2 allows remote attackers to cause a denial of service (process restart) via a crafted OSPF Link State Advertisement (LSA) update, aka Bug ID CSCvb05643. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160928-ospf - http://www.securityfocus.com/bid/93212 - http://www.securitytracker.com/id/1036909
CVE ID: CVE-2016-6422 State: PUBLISHED Published: 2016-10-06T10:00:00 Last Updated: 2024-08-06T01:29:20.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 12.2(33)SXJ9 on Supervisor Engine 32 and 720 modules for 6500 and 7600 devices mishandles certain operators, flags, and keywords in TCAM share ACLs, which allows remote attackers to bypass intended access restrictions by sending packets that should have been recognized by a filter, aka Bug ID CSCuy64806. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-catalyst - http://www.securitytracker.com/id/1036954 - http://ww
/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-catalyst - http://www.securitytracker.com/id/1036954 - http://www.securityfocus.com/bid/93404
CVE ID: CVE-2016-6423 State: PUBLISHED Published: 2016-10-05T20:00:00 Last Updated: 2024-08-06T01:29:19.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IKEv2 client and initiator implementations in Cisco IOS 15.5(3)M and IOS XE allow remote IKEv2 servers to cause a denial of service (device reload) via crafted IKEv2 packets, aka Bug ID CSCux97540. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036955 - http://www.securityfocus.com/bid/93411 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-ios-ikev
CVE ID: CVE-2016-6424 State: PUBLISHED Published: 2016-10-06T10:00:00 Last Updated: 2024-08-06T01:29:20.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DHCP Relay implementation in Cisco Adaptive Security Appliance (ASA) Software 8.4.7.29 and 9.1.7.4 allows remote attackers to cause a denial of service (interface wedge) via a crafted rate of DHCP packet transmission, aka Bug ID CSCuy66942. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-asa-dhcp - http://www.securityfocus.com/bid/93408 - http://www.securitytracker.com/id/1036961
CVE ID: CVE-2016-6425 State: PUBLISHED Published: 2016-10-06T10:00:00 Last Updated: 2024-08-06T01:29:20.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Cisco Unified Intelligence Center (CUIC) 8.5.4 through 9.1(1), as used in Unified Contact Center Express 10.0(1) through 11.0(1), allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug IDs CSCuy75020 and CSCuy81652. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93422 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-ucis1 - http://www.securitytracker.com/id/10
s.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-ucis1 - http://www.securitytracker.com/id/1036951
CVE ID: CVE-2016-6426 State: PUBLISHED Published: 2016-10-05T21:00:00 Last Updated: 2024-08-06T01:29:20.011Z Vendors: n/a Products: n/a Problem Types: n/a Description: The j_spring_security_switch_user function in Cisco Unified Intelligence Center (CUIC) 8.5.4 through 9.1(1), as used in Unified Contact Center Express 10.0(1) through 11.0(1), allows remote attackers to create user accounts by visiting an unspecified web page, aka Bug IDs CSCuy75027 and CSCuy81653. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-ucis2 - http://www.securitytracker.com/id/1036952 - http://www.securityfocus.com
CiscoSecurityAdvisory/cisco-sa-20161005-ucis2 - http://www.securitytracker.com/id/1036952 - http://www.securityfocus.com/bid/93420