Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-1281 State: PUBLISHED Published: 2017-01-23T21:00:00 Last Updated: 2024-08-05T22:48:13.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in the installer for TrueCrypt 7.2 and 7.1a, VeraCrypt before 1.17-BETA, and possibly other products allows local users to execute arbitrary code with administrator privileges and conduct DLL hijacking attacks via a Trojan horse DLL in the "application directory", as demonstrated with the USP10.dll, RichEd20.dll, NTMarta.dll and SRClient.dll DLLs. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/01/11/1 - http://seclists.org/ful
- CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/01/11/1 - http://seclists.org/fulldisclosure/2016/Jan/22
CVE ID: CVE-2016-1283 State: PUBLISHED Published: 2016-01-03T00:00:00 Last Updated: 2024-08-05T22:48:13.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pcre_compile2 function in pcre_compile.c in PCRE 8.38 mishandles the /((?:F?+(?:^(?(R)a+\"){99}-))(?J)(?'R'(?'R'<((?'RR'(?'R'\){97)?J)?J)(?'R'(?'R'\){99|(:(?|(?'R')(\k'R')|((?'R')))H'R'R)(H'R))))))/ pattern and related patterns with named subgroups, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror. Additional Analyst Notes: - CVE Program Co
sion, as demonstrated by a JavaScript RegExp object encountered by Konqueror. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2016:1132 - https://bugs.exim.org/show_bug.cgi?id=1767 - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.343110 - http://www.securityfocus.com/bid/79825 - http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178955.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178193.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - https://www.tenable.com/security/tns-2016-18 - https://www.tenable.com/
k/topics/security/bulletinapr2016-2952098.html - https://www.tenable.com/security/tns-2016-18 - https://www.tenable.com/security/tns-2017-14 - https://bto.bluecoat.com/security-advisory/sa128 - http://www.securitytracker.com/id/1034555 - https://security.gentoo.org/glsa/201607-02
CVE ID: CVE-2016-1284 State: PUBLISHED Published: 2016-02-04T11:00:00 Last Updated: 2024-08-05T22:48:13.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: rdataset.c in ISC BIND 9 Supported Preview Edition 9.9.8-S before 9.9.8-S5, when nxdomain-redirect is enabled, allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via crafted flag values in a query. Additional Analyst Notes: - CVE Program Container: References: - https://kb.isc.org/article/AA-01438 - https://kb.isc.org/article/AA-01348 - http://www.securitytracker.com/id/1034935
CVE ID: CVE-2016-1285 State: PUBLISHED Published: 2016-03-09T23:00:00 Last Updated: 2024-08-05T22:48:13.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME records when parsing fetch reply messages, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed packet to the rndc (aka control channel) interface, related to alist.c and sexpr.c. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://lists.fedoraproj
eferences: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178880.html - http://www.debian.org/security/2016/dsa-3511 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00053.html - https://security.FreeBSD.org/advisories/FreeBSD-SA-16:13.bind.asc - https://kb.isc.org/article/AA-01438 - http://www.ubuntu.com/usn/USN-2925-1 - https://kb.isc.org/article/AA-01352 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://rhn.redhat.com/errata/RHSA-2016-0562.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00075.html -
rhn.redhat.com/errata/RHSA-2016-0562.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00075.html - https://security.gentoo.org/glsa/201610-07 - http://www.securitytracker.com/id/1035236 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00013.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-April/181036.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00079.html - http://marc.info/?l=bugtraq&m=146191105921542&w=2 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00046.html - https://kb.isc.org/article/AA-01380 - http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179911.html - htt
s://kb.isc.org/article/AA-01380 - http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179911.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178831.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05087821 - http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00070.html - http://rhn.redhat.com/errata/RHSA-2016-0601.html - http://marc.info/?l=bugtraq&m=146191105921542&w=2 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00084.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-April/18
ensuse-security-announce/2016-03/msg00084.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-April/181037.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00072.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179904.html
CVE ID: CVE-2016-1286 State: PUBLISHED Published: 2016-03-09T23:00:00 Last Updated: 2024-08-05T22:48:13.712Z Vendors: n/a Products: n/a Problem Types: n/a Description: named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted signature record for a DNAME record, related to db.c and resolver.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178880.html - http://www.debian.org/security/2016/dsa-3511 - http://www.secu
t.org/pipermail/package-announce/2016-March/178880.html - http://www.debian.org/security/2016/dsa-3511 - http://www.securitytracker.com/id/1035237 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00053.html - https://security.FreeBSD.org/advisories/FreeBSD-SA-16:13.bind.asc - https://kb.isc.org/article/AA-01438 - http://www.ubuntu.com/usn/USN-2925-1 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://rhn.redhat.com/errata/RHSA-2016-0562.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00075.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - https://security.gentoo.org/glsa/2
ml - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - https://security.gentoo.org/glsa/201610-07 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00013.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-April/181036.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00079.html - http://marc.info/?l=bugtraq&m=146191105921542&w=2 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00046.html - https://kb.isc.org/article/AA-01380 - https://kb.isc.org/article/AA-01353 - http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179911.html - http://lists.fedoraproject.org/pipermail/pac
lists.fedoraproject.org/pipermail/package-announce/2016-March/179911.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178831.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05087821 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00070.html - http://rhn.redhat.com/errata/RHSA-2016-0601.html - http://marc.info/?l=bugtraq&m=146191105921542&w=2 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00084.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-April/181037.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00072.html - http://lists.fedoraproject.org/pi
37.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00072.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179904.html
CVE ID: CVE-2016-1287 State: PUBLISHED Published: 2016-02-11T18:00:00 Last Updated: 2024-08-05T22:48:13.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the IKEv1 and IKEv2 implementations in Cisco ASA Software before 8.4(7.30), 8.7 before 8.7(1.18), 9.0 before 9.0(4.38), 9.1 before 9.1(7), 9.2 before 9.2(4.5), 9.3 before 9.3(3.7), 9.4 before 9.4(2.4), and 9.5 before 9.5(2.2) on ASA 5500 devices, ASA 5500-X devices, ASA Services Module for Cisco Catalyst 6500 and Cisco 7600 devices, ASA 1000V devices, Adaptive Security Virtual Appliance (aka ASAv), Firepower 9300 ASA Security Module, and ISA 3000 devices allows remote attackers to execute arbitrary code or c
a ASAv), Firepower 9300 ASA Security Module, and ISA 3000 devices allows remote attackers to execute arbitrary code or cause a denial of service (device reload) via crafted UDP packets, aka Bug IDs CSCux29978 and CSCux42019. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160210-asa-ike - http://packetstormsecurity.com/files/137100/Cisco-ASA-Software-IKEv1-IKEv2-Buffer-Overflow.html - http://www.securitytracker.com/id/1034997 - https://blog.exodusintel.com/2016/02/10/firewall-hacking/ - https://www.kb.cert.org/vuls/id/327976 - https://www.exploit-db.com/exploits/39823/
CVE ID: CVE-2016-1288 State: PUBLISHED Published: 2016-03-03T22:00:00 Last Updated: 2024-08-05T22:48:13.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTTPS Proxy feature in Cisco AsyncOS before 8.5.3-051 and 9.x before 9.0.0-485 on Web Security Appliance (WSA) devices allows remote attackers to cause a denial of service (service outage) by leveraging certain intranet connectivity and sending a malformed HTTPS request, aka Bug ID CSCuu24840. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035163 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-wsa
CVE ID: CVE-2016-1289 State: PUBLISHED Published: 2016-07-02T14:00:00 Last Updated: 2024-08-05T22:48:13.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: The API in Cisco Prime Infrastructure 1.2 through 3.0 and Evolved Programmable Network Manager (EPNM) 1.2 allows remote attackers to execute arbitrary code or obtain sensitive management information via a crafted HTTP request, as demonstrated by discovering managed-device credentials, aka Bug ID CSCuy10231. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91504 - http://www.securitytracker.com/id/1036195 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisc
- http://www.securitytracker.com/id/1036195 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160629-piauthbypass
CVE ID: CVE-2016-1290 State: PUBLISHED Published: 2016-04-06T23:00:00 Last Updated: 2024-08-05T22:48:13.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web API in Cisco Prime Infrastructure 1.2.0 through 2.2(2) and Cisco Evolved Programmable Network Manager (EPNM) 1.2 allows remote authenticated users to bypass intended RBAC restrictions and gain privileges via an HTTP request that is inconsistent with a pattern filter, aka Bug ID CSCuy10227. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035498 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160406-privauth
CVE ID: CVE-2016-1291 State: PUBLISHED Published: 2016-04-06T23:00:00 Last Updated: 2024-08-05T22:48:13.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Prime Infrastructure 1.2.0 through 2.2(2) and Cisco Evolved Programmable Network Manager (EPNM) 1.2 allow remote attackers to execute arbitrary code via crafted deserialized data in an HTTP POST request, aka Bug ID CSCuw03192. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035497 - https://blogs.securiteam.com/index.php/archives/2727 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160406-remcode
CVE ID: CVE-2016-1293 State: PUBLISHED Published: 2016-01-16T02:00:00 Last Updated: 2024-08-05T22:48:13.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Management Center in Cisco FireSIGHT System Software 6.0.0 and 6.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCux40414. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034689 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160115-FireSIGHT
CVE ID: CVE-2016-1294 State: PUBLISHED Published: 2016-01-16T02:00:00 Last Updated: 2024-08-05T22:48:13.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Management Center in Cisco FireSIGHT System Software 6.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted cookie, aka Bug ID CSCuw89094. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034690 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160115-fmc1
CVE ID: CVE-2016-1295 State: PUBLISHED Published: 2016-01-16T02:00:00 Last Updated: 2024-08-05T22:48:13.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Adaptive Security Appliance (ASA) Software 8.4 allows remote attackers to obtain sensitive information via an AnyConnect authentication attempt, aka Bug ID CSCuo65775. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034691 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160115-asa
CVE ID: CVE-2016-1296 State: PUBLISHED Published: 2016-01-20T02:00:00 Last Updated: 2024-08-05T22:48:13.789Z Vendors: n/a Products: n/a Problem Types: n/a Description: The proxy engine on Cisco Web Security Appliance (WSA) devices with software 8.5.3-055, 9.1.0-000, and 9.5.0-235 allows remote attackers to bypass intended proxy restrictions via a malformed HTTP method, aka Bug ID CSCux00848. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034763 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160119-wsa
CVE ID: CVE-2016-1297 State: PUBLISHED Published: 2016-02-26T02:00:00 Last Updated: 2024-08-05T22:48:13.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Device Manager GUI in Cisco Application Control Engine (ACE) 4710 A5 before A5(3.1) allows remote authenticated users to bypass intended RBAC restrictions and execute arbitrary CLI commands with admin privileges via an unspecified parameter in a POST request, aka Bug ID CSCul84801. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160224-ace - http://www.securitytracker.com/id/1035104
CVE ID: CVE-2016-1298 State: PUBLISHED Published: 2016-01-26T02:00:00 Last Updated: 2024-08-05T22:48:13.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unified Contact Center Express 10.0(1), 10.5(1), 10.6(1), and 11.0(1) allow remote attackers to inject arbitrary web script or HTML via vectors related to permalinks, aka Bug ID CSCux92033. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034828 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160125-ucce
CVE ID: CVE-2016-1299 State: PUBLISHED Published: 2016-01-27T22:00:00 Last Updated: 2024-08-05T22:48:13.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web-management GUI implementation on Cisco Small Business SG300 devices 1.4.1.x allows remote attackers to cause a denial of service (HTTPS outage) via crafted HTTPS requests, aka Bug ID CSCuw87174. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-sbms
CVE ID: CVE-2016-1300 State: PUBLISHED Published: 2016-01-27T22:00:00 Last Updated: 2024-08-05T22:48:13.707Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Cisco Unity Connection (UC) 10.5(2.3009) allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCux82582. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-uc
CVE ID: CVE-2016-1301 State: PUBLISHED Published: 2016-02-07T11:00:00 Last Updated: 2024-08-05T22:48:13.714Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RBAC implementation in Cisco ASA-CX Content-Aware Security software before 9.3.1.1(112) and Cisco Prime Security Manager (PRSM) software before 9.3.1.1(112) allows remote authenticated users to change arbitrary passwords via a crafted HTTP request, aka Bug ID CSCuo94842. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034927 - http://www.securitytracker.com/id/1034926 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160203-prsm
CVE ID: CVE-2016-1302 State: PUBLISHED Published: 2016-02-07T11:00:00 Last Updated: 2024-08-05T22:48:13.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Application Policy Infrastructure Controller (APIC) devices with software before 1.0(3h) and 1.1 before 1.1(1j) and Nexus 9000 ACI Mode switches with software before 11.0(3h) and 11.1 before 11.1(1j) allow remote authenticated users to bypass intended RBAC restrictions via crafted REST requests, aka Bug ID CSCut12998. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160203-apic - http://www.securitytracker.com/id/1034925
CVE ID: CVE-2016-1303 State: PUBLISHED Published: 2016-01-30T11:00:00 Last Updated: 2024-08-05T22:55:12.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web GUI on Cisco Small Business 500 devices 1.2.0.92 allows remote attackers to cause a denial of service via a crafted HTTP request, aka Bug ID CSCul65330. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160128-sbs
CVE ID: CVE-2016-1304 State: PUBLISHED Published: 2016-01-30T11:00:00 Last Updated: 2024-08-05T22:55:12.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Cisco Unity Connection 10.5(2.3009) allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCux82596. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160128-uc - http://www.securitytracker.com/id/1034868
CVE ID: CVE-2016-1305 State: PUBLISHED Published: 2016-02-07T11:00:00 Last Updated: 2024-08-05T22:55:12.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.1 allows remote attackers to inject arbitrary web script or HTML via vectors involving HTML entities, aka Bug ID CSCux15511. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034902 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160201-apic-em
CVE ID: CVE-2016-1306 State: PUBLISHED Published: 2016-02-06T02:00:00 Last Updated: 2024-08-05T22:55:12.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Cisco Fog Director 1.0(0) allow remote attackers to inject arbitrary web script or HTML via a crafted parameter, aka Bug ID CSCux80466. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160201-fd
CVE ID: CVE-2016-1307 State: PUBLISHED Published: 2016-02-07T11:00:00 Last Updated: 2024-08-05T22:55:12.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Openfire server in Cisco Finesse Desktop 10.5(1) and 11.0(1) and Unified Contact Center Express 10.6(1) has a hardcoded account, which makes it easier for remote attackers to obtain access via an XMPP session, aka Bug ID CSCuw79085. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160202-fducce - http://www.securitytracker.com/id/1034921 - http://www.securitytracker.com/id/1034920
CVE ID: CVE-2016-1308 State: PUBLISHED Published: 2016-02-07T11:00:00 Last Updated: 2024-08-05T22:55:12.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Cisco Unified Communications Manager 10.5(2.13900.9) allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCux99227. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160203-ucm - http://www.securitytracker.com/id/1034938
CVE ID: CVE-2016-1309 State: PUBLISHED Published: 2016-02-07T11:00:00 Last Updated: 2024-08-05T22:55:12.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Cisco WebEx Meetings Server 2.5.1.5 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCuy01843. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034919 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160202-wms
CVE ID: CVE-2016-1310 State: PUBLISHED Published: 2016-02-06T02:00:00 Last Updated: 2024-08-05T22:55:12.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Cisco Unity Connection 11.5(0.199) allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuy09033. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034937 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160203-uc