Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-7999 State: PUBLISHED Published: 2014-12-24T00:00:00 Last Updated: 2024-08-06T13:10:49.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 allow remote authenticated users to install arbitrary firmware by leveraging unspecified HTTP handler access on the local network, aka Cisco-Meraki defect ID 00478565. Additional Analyst Notes: - CVE Program Container: References: - https://dashboard.meraki.com/firmware_security - http://tools.cisco.com/security/center/viewAlert.x?alertId=36800
CVE ID: CVE-2014-8000 State: PUBLISHED Published: 2014-11-21T02:00:00 Last Updated: 2024-08-06T13:10:49.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Unified Communications Manager IM and Presence Service 9.1(1) produces different returned messages for URL requests depending on whether a username exists, which allows remote attackers to enumerate user accounts via a series of requests, aka Bug ID CSCur63497. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=36467 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8000 - http://secunia.com/advisories/62558 - http://www.
.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8000 - http://secunia.com/advisories/62558 - http://www.securityfocus.com/bid/71173 - http://www.securitytracker.com/id/1031240 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98786
CVE ID: CVE-2014-8001 State: PUBLISHED Published: 2014-11-25T17:00:00 Last Updated: 2024-08-06T13:10:50.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in decode.cpp in Cisco OpenH264 1.2.0 and earlier allows remote attackers to execute arbitrary code via an encoded media file. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=36500 - https://github.com/cisco/openh264/pull/1088/files
CVE ID: CVE-2014-8002 State: PUBLISHED Published: 2014-11-25T17:00:00 Last Updated: 2024-08-06T13:10:49.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in decode_slice.cpp in Cisco OpenH264 1.2.0 and earlier allows remote attackers to execute arbitrary code via an encoded media file. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=36501 - https://github.com/cisco/openh264/pull/1096/files
CVE ID: CVE-2014-8003 State: PUBLISHED Published: 2014-12-10T21:00:00 Last Updated: 2024-08-06T13:10:49.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Integrated Management Controller in Cisco Unified Computing System 2.2(2c)A and earlier allows local users to obtain shell access via a crafted map-nfs command, aka Bug ID CSCup05998. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8003 - http://tools.cisco.com/security/center/viewAlert.x?alertId=36562
CVE ID: CVE-2014-8004 State: PUBLISHED Published: 2014-11-25T17:00:00 Last Updated: 2024-08-06T13:10:49.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS XR allows remote attackers to cause a denial of service (LISP process reload) by establishing many LISP TCP sessions, aka Bug ID CSCuq90378. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/98923 - http://www.securitytracker.com/id/1031258 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8004
CVE ID: CVE-2014-8005 State: PUBLISHED Published: 2014-11-26T02:00:00 Last Updated: 2024-08-06T13:10:50.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the lighttpd module in Cisco IOS XR 5.1 and earlier on Network Convergence System 6000 devices allows remote attackers to cause a denial of service (process reload) by establishing many TCP sessions, aka Bug ID CSCuq45239. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8005 - http://www.securityfocus.com/bid/71287 - http://tools.cisco.com/security/center/viewAlert.x?alertId=36532 - http://www.securitytracker.com/id/1
s.com/bid/71287 - http://tools.cisco.com/security/center/viewAlert.x?alertId=36532 - http://www.securitytracker.com/id/1031262 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98937
CVE ID: CVE-2014-8006 State: PUBLISHED Published: 2014-12-17T00:00:00 Last Updated: 2024-08-06T13:10:49.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Disaster Recovery (DRA) feature on the Cisco ISB8320-E High-Definition IP-Only DVR allows remote attackers to bypass authentication by establishing a TELNET session during a recovery boot, aka Bug ID CSCup85422. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8006
CVE ID: CVE-2014-8007 State: PUBLISHED Published: 2014-12-20T00:00:00 Last Updated: 2024-08-06T13:10:49.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Prime Infrastructure allows remote authenticated users to read device-discovery passwords by examining the HTML source code of the Quick Discovery options page, aka Bug ID CSCum00019. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8007 - http://www.securitytracker.com/id/1031416
CVE ID: CVE-2014-8008 State: PUBLISHED Published: 2015-01-22T11:00:00 Last Updated: 2024-08-06T13:10:49.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in the Real-Time Monitoring Tool (RTMT) API in Cisco Unified Communications Manager (CUCM) allows remote authenticated users to read arbitrary files via a full pathname in an API command, aka Bug ID CSCur49414. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/72263 - http://www.securitytracker.com/id/1031604 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8008 - https://tools.cisco.com/security/center/viewAlert.
cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8008 - https://tools.cisco.com/security/center/viewAlert.x?alertId=37111
CVE ID: CVE-2014-8009 State: PUBLISHED Published: 2014-12-10T21:00:00 Last Updated: 2024-08-06T13:10:49.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Management subsystem in Cisco Unified Computing System 2.1(3f) and earlier allows remote attackers to obtain sensitive information by reading log files, aka Bug ID CSCur99239. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=36640 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8009
CVE ID: CVE-2014-8010 State: PUBLISHED Published: 2014-12-10T21:00:00 Last Updated: 2024-08-06T13:10:50.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web framework in Cisco Unified Communications Domain Manager 8 allows remote authenticated administrators to execute arbitrary OS commands via crafted values, aka Bug ID CSCuq50205. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031339 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8010
CVE ID: CVE-2014-8012 State: PUBLISHED Published: 2014-12-18T16:00:00 Last Updated: 2024-08-06T13:10:49.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the WebVPN Portal Login page in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to inject arbitrary web script or HTML via crafted attributes in a cookie, aka Bug ID CSCuh24695. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031395 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8012
CVE ID: CVE-2014-8013 State: PUBLISHED Published: 2015-02-03T22:00:00 Last Updated: 2024-08-06T13:10:49.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TACACS+ command-authorization implementation in Cisco NX-OS allows local users to cause a denial of service (device reload) via a long CLI command, aka Bug ID CSCur54182. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8013 - http://www.securityfocus.com/bid/72393 - http://www.securitytracker.com/id/1031685
CVE ID: CVE-2014-8014 State: PUBLISHED Published: 2014-12-18T16:00:00 Last Updated: 2024-08-06T13:10:50.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS XR allows remote attackers to cause a denial of service (RSVP process reload) via a malformed RSVP packet, aka Bug ID CSCub63710. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031396 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8014
CVE ID: CVE-2014-8015 State: PUBLISHED Published: 2014-12-22T19:00:00 Last Updated: 2024-08-06T13:10:50.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Sponsor Portal in Cisco Identity Services Engine (ISE) allows remote authenticated users to obtain access to an arbitrary sponsor's guest account via a modified HTTP request, aka Bug ID CSCur64400. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8015 - http://www.securitytracker.com/id/1031423
CVE ID: CVE-2014-8016 State: PUBLISHED Published: 2014-12-19T02:00:00 Last Updated: 2024-08-06T13:10:50.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cisco IronPort Email Security Appliance (ESA) allows remote attackers to cause a denial of service (CPU consumption) via long Subject headers in e-mail messages, aka Bug ID CSCzv93864. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8016
CVE ID: CVE-2014-8017 State: PUBLISHED Published: 2014-12-22T19:00:00 Last Updated: 2024-08-06T13:10:49.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: The periodic-backup feature in Cisco Identity Services Engine (ISE) allows remote attackers to discover backup-encryption passwords via a crafted request that triggers inclusion of a password in a reply, aka Bug ID CSCur41673. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/71767 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8017 - http://www.securitytracker.com/id/1031425
CVE ID: CVE-2014-8018 State: PUBLISHED Published: 2014-12-22T19:00:00 Last Updated: 2024-08-06T13:10:50.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Business Voice Services Manager (BVSM) pages in the Application Software in Cisco Unified Communications Domain Manager 8 allow remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug IDs CSCur19651, CSCur18555, CSCur19630, and CSCur19661. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8018 - http://www.securitytracker.com/id/1031424 - http://www.securit
curity/center/content/CiscoSecurityNotice/CVE-2014-8018 - http://www.securitytracker.com/id/1031424 - http://www.securityfocus.com/bid/71771
CVE ID: CVE-2014-8019 State: PUBLISHED Published: 2014-12-20T00:00:00 Last Updated: 2024-08-06T13:10:50.018Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Cisco Enterprise Content Delivery System (ECDS) allows remote attackers to read arbitrary files via a crafted URL, aka Bug ID CSCuo90148. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8019 - http://www.securitytracker.com/id/1031417
CVE ID: CVE-2014-8020 State: PUBLISHED Published: 2015-01-10T02:00:00 Last Updated: 2024-08-06T13:10:50.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Unified Communication Domain Manager Platform Software allows remote attackers to cause a denial of service (CPU consumption, and performance degradation or service outage) via a flood of malformed TCP packets and UDP packets, aka Bug ID CSCup25276. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8020 - http://www.securityfocus.com/bid/71975 - http://www.securitytracker.com/id/1031520 - https://exchange.xforce.ibmcloud.com/vulner
ww.securityfocus.com/bid/71975 - http://www.securitytracker.com/id/1031520 - https://exchange.xforce.ibmcloud.com/vulnerabilities/100573
CVE ID: CVE-2014-8021 State: PUBLISHED Published: 2015-02-03T22:00:00 Last Updated: 2024-08-06T13:10:50.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Cisco AnyConnect Secure Mobility Client 3.1(.02043) and earlier and Cisco HostScan Engine 3.1(.05183) and earlier allows remote attackers to inject arbitrary web script or HTML via vectors involving an applet-path URL, aka Bug IDs CSCup82990 and CSCuq80149. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/100666 - http://tools.cisco.com/security/center/viewAlert.x?alertId=37323 - http://tools.cisco.com/security/cent
ilities/100666 - http://tools.cisco.com/security/center/viewAlert.x?alertId=37323 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8021 - http://www.securityfocus.com/bid/72475
CVE ID: CVE-2014-8022 State: PUBLISHED Published: 2015-01-15T22:00:00 Last Updated: 2024-08-06T13:10:50.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Cisco Identity Services Engine allow remote attackers to inject arbitrary web script or HTML via input to unspecified web pages, aka Bug IDs CSCur69835 and CSCur69776. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/100664 - http://www.securitytracker.com/id/1031560 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8022 - https://tools.cisco.com/security/center/viewAlert.x?ale
.com/security/center/content/CiscoSecurityNotice/CVE-2014-8022 - https://tools.cisco.com/security/center/viewAlert.x?alertId=37045 - http://www.securityfocus.com/bid/72083
CVE ID: CVE-2014-8023 State: PUBLISHED Published: 2015-02-17T01:00:00 Last Updated: 2024-08-06T13:10:50.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Adaptive Security Appliance (ASA) Software 9.2(.3) and earlier, when challenge-response authentication is used, does not properly select tunnel groups, which allows remote authenticated users to bypass intended resource-access restrictions via a crafted tunnel-group parameter, aka Bug ID CSCtz48533. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/100922 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8023 - http://www.secu
nerabilities/100922 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8023 - http://www.securityfocus.com/bid/72618 - http://www.securitytracker.com/id/1031755 - http://tools.cisco.com/security/center/viewAlert.x?alertId=37489
CVE ID: CVE-2014-8024 State: PUBLISHED Published: 2014-12-23T02:00:00 Last Updated: 2024-08-06T13:10:50.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: The API in the Guest Server in Cisco Jabber, when the HTML5 CORS feature is used, allows remote attackers to obtain sensitive information by sniffing the network during an HTTP (1) GET or (2) POST request, aka Bug ID CSCus19789. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031422 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8024 - http://www.securityfocus.com/bid/71770 - https://tools.cisco.com/security/center/viewAlert.x?alertId=36870
CVE ID: CVE-2014-8025 State: PUBLISHED Published: 2014-12-23T02:00:00 Last Updated: 2024-08-06T13:10:50.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: The API in the Guest Server in Cisco Jabber, when HTML5 is used, allows remote attackers to obtain sensitive information by sniffing the network during an HTTP (1) GET or (2) POST response, aka Bug ID CSCus19801. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031422 - https://tools.cisco.com/security/center/viewAlert.x?alertId=36871 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8025 - http://www.securityfocus.com/bid/71768
CVE ID: CVE-2014-8026 State: PUBLISHED Published: 2014-12-23T02:00:00 Last Updated: 2024-08-06T13:10:50.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Guest Server in Cisco Jabber allows remote attackers to inject arbitrary web script or HTML via a (1) GET or (2) POST parameter, aka Bug ID CSCus08074. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031422 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8026 - https://tools.cisco.com/security/center/viewAlert.x?alertId=36872 - http://www.securityfocus.com/bid/71769
CVE ID: CVE-2014-8027 State: PUBLISHED Published: 2015-01-09T02:00:00 Last Updated: 2024-08-06T13:10:50.014Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RBAC component in Cisco Secure Access Control System (ACS) allows remote authenticated users to obtain Network Device Administrator privileges for Create, Delete, Read, and Update operations via crafted HTTP requests, aka Bug ID CSCuq79034. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/71944 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8027 - https://exchange.xforce.ibmcloud.com/vulnerabilities/100558 - http://www.securitytracker.com/id/10
otice/CVE-2014-8027 - https://exchange.xforce.ibmcloud.com/vulnerabilities/100558 - http://www.securitytracker.com/id/1031516 - http://secunia.com/advisories/62159
CVE ID: CVE-2014-8028 State: PUBLISHED Published: 2015-01-09T02:00:00 Last Updated: 2024-08-06T13:10:50.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the web framework in Cisco Secure Access Control System (ACS) allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCuq79019. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/71946 - https://exchange.xforce.ibmcloud.com/vulnerabilities/100553 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8028 - http://www.securitytracker.com/id/1031515 - http://
isco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8028 - http://www.securitytracker.com/id/1031515 - http://secunia.com/advisories/62159
CVE ID: CVE-2014-8029 State: PUBLISHED Published: 2015-01-09T02:00:00 Last Updated: 2024-08-06T13:10:50.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in the web interface in Cisco Secure Access Control System (ACS) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via an unspecified parameter, aka Bug ID CSCuq74150. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/71948 - https://exchange.xforce.ibmcloud.com/vulnerabilities/100548 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8029 - http://www.securitytracker.com/id/1031514
://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8029 - http://www.securitytracker.com/id/1031514 - http://secunia.com/advisories/62159
CVE ID: CVE-2014-8030 State: PUBLISHED Published: 2015-01-09T02:00:00 Last Updated: 2024-08-06T13:10:50.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in sendPwMail.do in Cisco WebEx Meetings Server allows remote attackers to inject arbitrary web script or HTML via the email parameter, aka Bug ID CSCuj40381. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/100574 - http://www.securitytracker.com/id/1031517 - http://secunia.com/advisories/62163 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8030 - http://www.securityfocus.com/bid/71945
CVE ID: CVE-2014-8031 State: PUBLISHED Published: 2015-01-09T02:00:00 Last Updated: 2024-08-06T13:10:50.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Cisco WebEx Meetings Server allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuj40456. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/100575 - http://www.securitytracker.com/id/1031517 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8031 - http://secunia.com/advisories/62173 - http://www.securityfocus.com/bid/71943
CVE ID: CVE-2014-8032 State: PUBLISHED Published: 2015-01-09T02:00:00 Last Updated: 2024-08-06T13:10:50.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OutlookAction LI in Cisco WebEx Meetings Server allows remote authenticated users to obtain sensitive encrypted-password information via unspecified vectors, aka Bug IDs CSCuj40453 and CSCuj40449. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031517 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8032 - https://exchange.xforce.ibmcloud.com/vulnerabilities/100564 - http://www.securityfocus.com/bid/71947
CVE ID: CVE-2014-8033 State: PUBLISHED Published: 2015-01-09T02:00:00 Last Updated: 2024-08-06T13:10:50.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: The play/modules component in Cisco WebEx Meetings Server allows remote attackers to obtain administrator access via crafted API requests, aka Bug ID CSCuj40421. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/71950 - https://exchange.xforce.ibmcloud.com/vulnerabilities/100572 - http://www.securitytracker.com/id/1031517 - http://secunia.com/advisories/60279 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8033
CVE ID: CVE-2014-8034 State: PUBLISHED Published: 2015-01-15T22:00:00 Last Updated: 2024-08-06T13:10:50.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco WebEx Meetings Server 1.5 presents the same CAPTCHA challenge for each login attempt, which makes it easier for remote attackers to obtain access via a brute-force approach of guessing usernames, aka Bug ID CSCuj40321. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8034 - https://exchange.xforce.ibmcloud.com/vulnerabilities/100552 - http://www.securityfocus.com/bid/71978 - http://tools.cisco.com/security/center/viewAlert.x?alert
lnerabilities/100552 - http://www.securityfocus.com/bid/71978 - http://tools.cisco.com/security/center/viewAlert.x?alertId=36990 - http://www.securitytracker.com/id/1031543