Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-4236 State: PUBLISHED Published: 2015-07-10T19:00:00 Last Updated: 2024-08-06T06:11:11.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco AsyncOS on Email Security Appliance (ESA) devices with software 8.5.6-073, 8.5.6-074, and 9.0.0-461, when clustering is enabled, allows remote attackers to cause a denial of service (clustering and SSH outage) via a packet flood, aka Bug IDs CSCur13704 and CSCuq05636. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032855 - http://www.securityfocus.com/bid/75703 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39785
CVE ID: CVE-2015-4237 State: PUBLISHED Published: 2015-07-03T10:00:00 Last Updated: 2024-08-06T06:11:12.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CLI parser in Cisco NX-OS 4.1(2)E1(1), 6.2(11b), 6.2(12), 7.2(0)ZZ(99.1), 7.2(0)ZZ(99.3), and 9.1(1)SV1(3.1.8) on Nexus devices allows local users to execute arbitrary OS commands via crafted characters in a filename, aka Bug IDs CSCuv08491, CSCuv08443, CSCuv08480, CSCuv08448, CSCuu99291, CSCuv08434, and CSCuv08436. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032775 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39583
CVE ID: CVE-2015-4238 State: PUBLISHED Published: 2015-07-02T14:42:00 Last Updated: 2024-08-06T06:11:12.175Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SNMP implementation in Cisco Adaptive Security Appliance (ASA) Software 8.4(7) and 8.6(1.2) allows remote authenticated users to cause a denial of service (device reload) by sending many SNMP requests during a time of high network traffic, aka Bug ID CSCul02601. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032776 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39611
CVE ID: CVE-2015-4239 State: PUBLISHED Published: 2015-07-03T10:00:00 Last Updated: 2024-08-06T06:11:12.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Adaptive Security Appliance (ASA) Software 9.3(2.243) and 100.13(0.21) allows remote attackers to cause a denial of service (device reload) by sending crafted OSPFv2 packets on the local network, aka Bug ID CSCus84220. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032780 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39612
CVE ID: CVE-2015-4240 State: PUBLISHED Published: 2015-07-08T14:00:00 Last Updated: 2024-08-06T06:11:12.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IP Communicator 8.6(4) allows remote attackers to cause a denial of service (service outage) via an unspecified URL in a GET request, aka Bug ID CSCuu37656. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032807 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39623
CVE ID: CVE-2015-4241 State: PUBLISHED Published: 2015-07-08T14:00:00 Last Updated: 2024-08-06T06:11:11.782Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Adaptive Security Appliance (ASA) Software 9.3(2) allows remote attackers to cause a denial of service (system reload) by sending crafted OSPFv2 packets on the local network, aka Bug ID CSCut52679. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=39641 - http://www.securitytracker.com/id/1032808
CVE ID: CVE-2015-4242 State: PUBLISHED Published: 2015-07-08T14:00:00 Last Updated: 2024-08-06T06:11:12.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Cisco FireSIGHT System Software 5.4.1.2 and 6.0.0 in FireSIGHT Management Center allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu94721. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=39643 - http://www.securitytracker.com/id/1032806
CVE ID: CVE-2015-4243 State: PUBLISHED Published: 2015-07-08T14:00:00 Last Updated: 2024-08-06T06:11:11.774Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PPPoE establishment implementation in Cisco IOS XE 3.5.0S on ASR 1000 devices allows remote attackers to cause a denial of service (device reload) by sending malformed PPPoE Active Discovery Request (PADR) packets on the local network, aka Bug ID CSCty94202. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032805 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39675
CVE ID: CVE-2015-4244 State: PUBLISHED Published: 2015-07-10T10:00:00 Last Updated: 2024-08-06T06:11:12.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: The boot implementation on Cisco ASR 5000 and 5500 devices with software 14.0 allows local users to execute arbitrary Linux commands by leveraging administrative privileges for storage of these commands in a Compact Flash (CF) file, aka Bug ID CSCuu75278. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032839 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39677
CVE ID: CVE-2015-4245 State: REJECTED Published: 2015-07-21T14:00:00 Last Updated: 2015-07-21T22:57:02 Description: No description available.
CVE ID: CVE-2015-4246 State: REJECTED Published: 2015-07-21T14:00:00 Last Updated: 2015-07-29T14:57:05 Description: No description available.
CVE ID: CVE-2015-4247 State: REJECTED Published: 2015-07-21T14:00:00 Last Updated: 2015-07-21T22:57:02 Description: No description available.
CVE ID: CVE-2015-4248 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-4249 State: REJECTED Published: 2015-07-13T10:00:00 Last Updated: 2016-12-23T18:57:01 Description: No description available.
CVE ID: CVE-2015-4250 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-4251 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-4252 State: PUBLISHED Published: 2015-07-10T00:00:00 Last Updated: 2024-08-06T06:11:12.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability on Cisco TelePresence ISDN Gateway devices with software 2.2(1.106) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90724. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032838 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39795
CVE ID: CVE-2015-4253 State: PUBLISHED Published: 2015-07-10T00:00:00 Last Updated: 2024-08-06T06:11:11.794Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability on Cisco TelePresence Serial Gateway devices with software 1.0(1.42) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90728. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032838 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39796
CVE ID: CVE-2015-4254 State: PUBLISHED Published: 2015-07-10T17:00:00 Last Updated: 2024-08-06T06:11:12.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability on Cisco TelePresence Advanced Media Gateway devices with software 1.1(1.40) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90732. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=39797
CVE ID: CVE-2015-4255 State: PUBLISHED Published: 2015-07-10T00:00:00 Last Updated: 2024-08-06T06:11:11.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability on Cisco TelePresence IP Gateway devices with software 2.0(3.34) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90734. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032838 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39798
CVE ID: CVE-2015-4256 State: PUBLISHED Published: 2015-07-10T00:00:00 Last Updated: 2024-08-06T06:11:12.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability on Cisco TelePresence IP VCR devices with software 3.0(1.27) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90736. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032838 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39800
CVE ID: CVE-2015-4257 State: PUBLISHED Published: 2015-07-10T00:00:00 Last Updated: 2024-08-06T06:11:11.791Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability on Cisco TelePresence MCU 4500 devices with software 4.5(1.55) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90710. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=39801 - http://www.securitytracker.com/id/1032838
CVE ID: CVE-2015-4258 State: PUBLISHED Published: 2015-07-10T00:00:00 Last Updated: 2024-08-06T06:11:12.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability on Cisco TelePresence MSE 8000 devices allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90444. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032838 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39802
CVE ID: CVE-2015-4259 State: PUBLISHED Published: 2015-07-10T15:00:00 Last Updated: 2024-08-06T06:11:12.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Integrated Management Controller on Cisco Unified Computing System (UCS) C servers with software 1.5(3) and 1.6(0.16) has a default SSL certificate, which makes it easier for man-in-the-middle attackers to bypass cryptographic protection mechanisms by leveraging knowledge of a private key, aka Bug IDs CSCum56133 and CSCum56177. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032872 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39803
CVE ID: CVE-2015-4260 State: PUBLISHED Published: 2015-07-10T10:00:00 Last Updated: 2024-08-06T06:11:12.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Cisco Hosted Collaboration Solution 10.6(1) allows remote attackers to inject arbitrary web script or HTML via a crafted value in a URL, aka Bug ID CSCuu14862. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=39804 - http://www.securitytracker.com/id/1032840
CVE ID: CVE-2015-4261 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-4262 State: PUBLISHED Published: 2015-07-24T14:00:00 Last Updated: 2024-08-06T06:11:12.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: The password-change feature in Cisco Unified MeetingPlace Web Conferencing before 8.5(5) MR3 and 8.6 before 8.6(2) does not check the session ID or require entry of the current password, which allows remote attackers to reset arbitrary passwords via a crafted HTTP request, aka Bug ID CSCuu51839. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150722-mp - http://www.securitytracker.com/id/1033024
CVE ID: CVE-2015-4263 State: PUBLISHED Published: 2015-07-10T19:00:00 Last Updated: 2024-08-06T06:11:12.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Control and Provisioning functionality in Cisco Mobility Services Engine (MSE) 10.0(0.1) allows remote authenticated users to obtain sensitive information by reading log files, aka Bug ID CSCut36851. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=39825 - http://www.securitytracker.com/id/1032854
CVE ID: CVE-2015-4265 State: PUBLISHED Published: 2015-10-12T10:00:00 Last Updated: 2024-08-06T06:11:12.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Unified Computing System (UCS) B Blade Server Software 2.2.x before 2.2.6 allows local users to cause a denial of service (host OS or BMC hang) by sending crafted packets over the Inter-IC (I2C) bus, aka Bug ID CSCuq77241. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033752 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151006-ucs
CVE ID: CVE-2015-4266 State: PUBLISHED Published: 2015-07-16T19:00:00 Last Updated: 2024-08-06T06:11:12.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface in Cisco Identity Services Engine (ISE) 1.1(4.1), 1.3(106.146), and 1.3(120.135) does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web site, related to a "cross-frame scripting (XFS)" issue, aka Bug ID CSCut04556. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=39871 - http://www.securitytracker.com/id/1032930
CVE ID: CVE-2015-4267 State: PUBLISHED Published: 2015-07-15T18:00:00 Last Updated: 2024-08-06T06:11:12.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Identity Services Engine (ISE) 1.2(0.793), 1.3(0.876), 1.4(0.109), 2.0(0.147), and 2.0(0.169) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCus09940. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032929 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39872
CVE ID: CVE-2015-4268 State: PUBLISHED Published: 2015-07-14T17:00:00 Last Updated: 2024-08-06T06:11:12.868Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Infra Admin UI in Cisco Identity Services Engine (ISE) 1.2(1.198) and 1.3(0.876) allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in a (1) GET or (2) POST request, aka Bug ID CSCus16052. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=39873 - http://www.securitytracker.com/id/1032889
CVE ID: CVE-2015-4269 State: PUBLISHED Published: 2015-07-14T14:00:00 Last Updated: 2024-08-06T06:11:12.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Tomcat throttling feature in Cisco Unified Communications Manager 10.5(1.99995.9) allows remote authenticated users to cause a denial of service (management outage) by sending many requests, aka Bug ID CSCuu99709. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032886 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39877
CVE ID: CVE-2015-4270 State: PUBLISHED Published: 2015-07-14T17:00:00 Last Updated: 2024-08-06T06:11:12.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Cisco FireSIGHT System Software 5.3.1.5 and 6.0.0 allow remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug IDs CSCuv22557, CSCuv22583, CSCuv22632, CSCuv22641, CSCuv22650, CSCuv22662, CSCuv22697, and CSCuv22702. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=39879 - http://www.securitytracker.com/id/1032887
CVE ID: CVE-2015-4271 State: PUBLISHED Published: 2015-07-15T18:00:00 Last Updated: 2024-08-06T06:11:12.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco TelePresence TC before 7.3.4 on Integrator C devices allows remote attackers to bypass authentication via vectors involving multiple request parameters, aka Bug ID CSCuv00604. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032931 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39880
CVE ID: CVE-2015-4272 State: PUBLISHED Published: 2015-07-14T14:00:00 Last Updated: 2024-08-06T06:11:12.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the ccmivr page in Cisco Unified Communications Manager (formerly CallManager) 10.5(2.10000.5) allow remote attackers to inject arbitrary web script or HTML via a crafted parameter, aka Bug ID CSCut19580. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=39905 - http://www.securitytracker.com/id/1032888
CVE ID: CVE-2015-4273 State: PUBLISHED Published: 2015-07-15T14:00:00 Last Updated: 2024-08-06T06:11:12.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Packet Data Network Gateway (aka PGW) component on Cisco ASR 5000 devices with software 15.0(912), 15.0(935), and 15.0(938) allows remote attackers to cause a denial of service (Session Manager outage) via malformed fields in an IP packet, aka Bug ID CSCut38476. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032928 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39907
CVE ID: CVE-2015-4274 State: PUBLISHED Published: 2015-07-16T19:00:00 Last Updated: 2024-08-06T06:11:12.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Unified Intelligence Center 10.0(1) and 10.6(1) allows remote attackers to hijack the authentication of arbitrary users, aka Bug IDs CSCuu94862 and CSCuu97936. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032962 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39920
CVE ID: CVE-2015-4275 State: PUBLISHED Published: 2015-07-16T19:00:00 Last Updated: 2024-08-06T06:11:12.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Packet Data Network Gateway (aka PGW) component on Cisco ASR 5000 devices with software 18.0.0.59167 and 18.0.0.59211 allows remote attackers to cause a denial of service via a malformed header in a GTPv2 packet, aka Bug ID CSCut11534. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032984 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39934
CVE ID: CVE-2015-4276 State: PUBLISHED Published: 2015-07-16T19:00:00 Last Updated: 2024-08-06T06:11:12.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco WebEx Meetings Server 2.5MR1 allows remote authenticated users to execute arbitrary code via a crafted command parameter, aka Bug ID CSCus56138. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032963 - http://www.securityfocus.com/bid/75917 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39938
CVE ID: CVE-2015-4277 State: PUBLISHED Published: 2015-08-19T18:00:00 Last Updated: 2024-08-06T06:11:12.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: The global-configuration implementation on Cisco ASR 9000 devices with software 5.1.3 and 5.3.0 improperly closes vty sessions after a commit/end operation, which allows local users to cause a denial of service (tmp/*config file creation, memory consumption, and device hang) via unspecified vectors, aka Bug ID CSCut93842. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=39939 - http://www.securitytracker.com/id/1033259
CVE ID: CVE-2015-4278 State: PUBLISHED Published: 2015-07-16T19:00:00 Last Updated: 2024-08-06T06:11:12.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Email Security Appliance (ESA) devices with software 8.5.6-106 and 9.5.0-201 allow remote attackers to cause a denial of service (per-domain e-mail reception outage) by placing malformed DMARC policy data in DNS TXT records for a domain, aka Bug ID CSCuv14806. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=39940 - http://www.securitytracker.com/id/1032961
CVE ID: CVE-2015-4279 State: PUBLISHED Published: 2015-07-20T23:00:00 Last Updated: 2024-08-06T06:11:12.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Manager component in Cisco Unified Computing System (UCS) 2.2(3b) on B Blade Server devices allows local users to gain privileges for executing arbitrary CLI commands by leveraging access to the subordinate fabric interconnect, aka Bug ID CSCut32778. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032999 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39990 - http://www.securityfocus.com/bid/75953
CVE ID: CVE-2015-4280 State: PUBLISHED Published: 2015-07-18T10:00:00 Last Updated: 2024-08-06T06:11:12.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Prime Collaboration Assurance 10.0 allows remote attackers to cause a denial of service (HTTP service outage) via a crafted HTTP request, aka Bug ID CSCum38844. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032968 - http://www.securityfocus.com/bid/75931 - http://tools.cisco.com/security/center/viewAlert.x?alertId=40003
CVE ID: CVE-2015-4281 State: PUBLISHED Published: 2015-07-22T14:00:00 Last Updated: 2024-08-06T06:11:12.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Cisco WebEx Meetings Server 2.5 MR1 allows remote attackers to hijack the authentication of arbitrary users, aka Bug IDs CSCus56150 and CSCus56146. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=40021 - http://www.securityfocus.com/bid/75979 - http://www.securitytracker.com/id/1033016
CVE ID: CVE-2015-4282 State: PUBLISHED Published: 2015-11-06T11:00:00 Last Updated: 2024-08-06T06:11:12.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Mobility Services Engine (MSE) through 8.0.120.7 uses weak permissions for unspecified binary files, which allows local users to obtain root privileges by writing to a file, aka Bug ID CSCuv40504. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151104-privmse - http://www.securitytracker.com/id/1034066 - http://www.securityfocus.com/bid/77435
CVE ID: CVE-2015-4283 State: PUBLISHED Published: 2015-07-21T14:00:00 Last Updated: 2024-08-06T06:11:12.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Videoscape Policy Resource Manager (PRM) 3.5.4 allows remote attackers to cause a denial of service (CPU and memory consumption, and TCP service outage) via (1) a SYN flood or (2) another type of TCP traffic flood, aka Bug IDs CSCuu35104 and CSCuu35128. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75958 - http://tools.cisco.com/security/center/viewAlert.x?alertId=40050