Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-0149 State: PUBLISHED Published: 2018-06-07T21:00:00 Last Updated: 2024-11-29T15:05:19.705Z Vendors: n/a Products: Cisco Integrated Management Controller Supervisor and Cisco UCS Director unknown Problem Types: CWE-79 Description: A vulnerability in the web-based management interface of Cisco Integrated Management Controller Supervisor Software and Cisco UCS Director Software could allow an authenticated, remote attacker to conduct a Document Object Model-based (DOM-based), stored cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The vulnerability is due to insufficient validation of user-supplied input by the web-b
interface of an affected device. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of the affected software. An attacker could exploit this vulnerability by persuading a user of the affected interface to click a malicious link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or allow the attacker to access sensitive browser-based information on the affected device. Cisco Bug IDs: CSCvh12994. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-2
- CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-ucsdimcs - http://www.securityfocus.com/bid/104444 - http://www.securitytracker.com/id/1041072
CVE ID: CVE-2018-0150 State: PUBLISHED Published: 2018-03-28T22:00:00 Last Updated: 2024-12-02T20:55:40.966Z Vendors: n/a Products: Cisco IOS XE Problem Types: CWE-798 Description: A vulnerability in Cisco IOS XE Software could allow an unauthenticated, remote attacker to log in to a device running an affected release of Cisco IOS XE Software with the default username and password that are used at initial boot, aka a Static Credential Vulnerability. The vulnerability is due to an undocumented user account with privilege level 15 that has a default username and password. An attacker could exploit this vulnerability by using this account to remotely connect to an affected device. A successful
attacker could exploit this vulnerability by using this account to remotely connect to an affected device. A successful exploit could allow the attacker to log in to the device with privilege level 15 access. This vulnerability affects Cisco devices that are running a vulnerable release of Cisco IOS XE Software Release 16.x. This vulnerability does not affect Cisco IOS XE Software releases prior to Release 16.x. Cisco Bug IDs: CSCve89880. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-xesc - http://www.securityfocus.com/bid/103539 - http://www.securitytracker.com
/CiscoSecurityAdvisory/cisco-sa-20180328-xesc - http://www.securityfocus.com/bid/103539 - http://www.securitytracker.com/id/1040579
CVE ID: CVE-2018-0151 State: PUBLISHED Published: 2018-03-28T22:00:00.000Z Last Updated: 2025-10-21T23:45:54.884Z Vendors: n/a Products: Cisco IOS and IOS XE Problem Types: CWE-119 Description: A vulnerability in the quality of service (QoS) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with elevated privileges. The vulnerability is due to incorrect bounds checking of certain values in packets that are destined for UDP port 18999 of an affected device. An attacker could exploit this vulnerability by sending malicious packets to an affected device. When the packet
device. An attacker could exploit this vulnerability by sending malicious packets to an affected device. When the packets are processed, an exploitable buffer overflow condition may occur. A successful exploit could allow the attacker to execute arbitrary code on the affected device with elevated privileges. The attacker could also leverage this vulnerability to cause the device to reload, causing a temporary DoS condition while the device is reloading. The malicious packets must be destined to and processed by an affected device. Traffic transiting a device will not trigger the vulnerability. Cisco Bug IDs: CSCvf73881. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichme
r the vulnerability. Cisco Bug IDs: CSCvf73881. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-107-03 - http://www.securityfocus.com/bid/103540 - http://www.securitytracker.com/id/1040582 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-qos
CVE ID: CVE-2018-0152 State: PUBLISHED Published: 2018-03-28T22:00:00 Last Updated: 2024-12-02T20:55:29.629Z Vendors: n/a Products: Cisco IOS XE Software Problem Types: CWE-264 Description: A vulnerability in the web-based user interface (web UI) of Cisco IOS XE Software could allow an authenticated, remote attacker to gain elevated privileges on an affected device. The vulnerability exists because the affected software does not reset the privilege level for each web UI session. An attacker who has valid credentials for an affected device could exploit this vulnerability by remotely accessing a VTY line to the device. A successful exploit could allow the attacker to access an affected device
remotely accessing a VTY line to the device. A successful exploit could allow the attacker to access an affected device with the privileges of the user who previously logged in to the web UI. This vulnerability affects Cisco devices that are running a vulnerable release of Cisco IOS XE Software, if the HTTP Server feature is enabled and authentication, authorization, and accounting (AAA) authorization is not configured for EXEC sessions. The default state of the HTTP Server feature is version-dependent. This vulnerability was introduced in Cisco IOS XE Software Release 16.1.1. Cisco Bug IDs: CSCvf71769. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References:
1.1. Cisco Bug IDs: CSCvf71769. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/103558 - http://www.securitytracker.com/id/1040597 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-xepriv
CVE ID: CVE-2018-0153 State: REJECTED Published: 2019-03-19T19:34:52 Last Updated: 2019-03-19T19:34:52 Description: No description available.
CVE ID: CVE-2018-0154 State: PUBLISHED Published: 2018-03-28T22:00:00.000Z Last Updated: 2025-10-21T23:45:54.725Z Vendors: n/a Products: Cisco IOS Problem Types: CWE-399 Description: A vulnerability in the crypto engine of the Cisco Integrated Services Module for VPN (ISM-VPN) running Cisco IOS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient handling of VPN traffic by the affected device. An attacker could exploit this vulnerability by sending crafted VPN traffic to an affected device. A successful exploit could allow the attacker to cause the affected device to hang or crash
affic to an affected device. A successful exploit could allow the attacker to cause the affected device to hang or crash, resulting in a DoS condition. Cisco Bug IDs: CSCvd39267. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/103559 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-dos - http://www.securitytracker.com/id/1040585
CVE ID: CVE-2018-0155 State: PUBLISHED Published: 2018-03-28T22:00:00.000Z Last Updated: 2025-10-21T23:45:54.581Z Vendors: n/a Products: Cisco IOS and IOS XE Problem Types: CWE-388 Description: A vulnerability in the Bidirectional Forwarding Detection (BFD) offload implementation of Cisco Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches could allow an unauthenticated, remote attacker to cause a crash of the iosd process, causing a denial of service (DoS) condition. The vulnerability is due to insufficient error handling when the BFD header in a BFD packet is incomplete. An attacker could exploit this vulnerability by sending a crafted BFD message to or across an affect
cket is incomplete. An attacker could exploit this vulnerability by sending a crafted BFD message to or across an affected switch. A successful exploit could allow the attacker to trigger a reload of the system. This vulnerability affects Catalyst 4500 Supervisor Engine 6-E (K5), Catalyst 4500 Supervisor Engine 6L-E (K10), Catalyst 4500 Supervisor Engine 7-E (K10), Catalyst 4500 Supervisor Engine 7L-E (K10), Catalyst 4500E Supervisor Engine 8-E (K10), Catalyst 4500E Supervisor Engine 8L-E (K10), Catalyst 4500E Supervisor Engine 9-E (K10), Catalyst 4500-X Series Switches (K10), Catalyst 4900M Switch (K5), Catalyst 4948E Ethernet Switch (K5). Cisco Bug IDs: CSCvc40729. Additional Analyst Notes
0), Catalyst 4900M Switch (K5), Catalyst 4948E Ethernet Switch (K5). Cisco Bug IDs: CSCvc40729. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securitytracker.com/id/1040587 - http://www.securityfocus.com/bid/103565 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-bfd - https://ics-cert.us-cert.gov/advisories/ICSA-18-107-05
CVE ID: CVE-2018-0156 State: PUBLISHED Published: 2018-03-28T22:00:00.000Z Last Updated: 2025-10-21T23:45:54.405Z Vendors: n/a Products: Cisco IOS and IOS XE Problem Types: CWE-399 Description: A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to improper validation of packet data. An attacker could exploit this vulnerability by sending a crafted packet to an affected device on TCP port 4786. Only Smart Install client switches are affected. Cisco devices that are configured as a Smart I
device on TCP port 4786. Only Smart Install client switches are affected. Cisco devices that are configured as a Smart Install director are not affected by this vulnerability. Cisco Bug IDs: CSCvd40673. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-107-04 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi - http://www.securitytracker.com/id/1040596 - http://www.securityfocus.com/bid/103569 - https://ics-cert.us-cert.gov/advisories/ICSA-18-107-05
CVE ID: CVE-2018-0157 State: PUBLISHED Published: 2018-03-28T22:00:00 Last Updated: 2024-12-02T20:55:17.256Z Vendors: n/a Products: Cisco IOS XE Problem Types: CWE-19 Description: A vulnerability in the Zone-Based Firewall code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a device to reload. The vulnerability is due to the way fragmented packets are handled in the firewall code. An attacker could exploit this vulnerability by sending fragmented IP Version 4 or IP Version 6 packets through an affected device. An exploit could allow the attacker to cause the device to crash, resulting in a denial of service (DoS) condition. The following releases of Cisco I
tacker to cause the device to crash, resulting in a denial of service (DoS) condition. The following releases of Cisco IOS XE Software are vulnerable: Everest-16.4.1, Everest-16.4.2, Everest-16.5.1, Everest-16.5.1b, Everest-16.6.1, Everest-16.6.1a. Cisco Bug IDs: CSCvf60296. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securitytracker.com/id/1040593 - http://www.securityfocus.com/bid/103561 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-fwip
CVE ID: CVE-2018-0158 State: PUBLISHED Published: 2018-03-28T22:00:00.000Z Last Updated: 2025-10-21T23:45:54.255Z Vendors: n/a Products: Cisco IOS and IOS XE Problem Types: CWE-20 Description: A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a memory leak or a reload of an affected device that leads to a denial of service (DoS) condition. The vulnerability is due to incorrect processing of certain IKEv2 packets. An attacker could exploit this vulnerability by sending crafted IKEv2 packets to an affected device to be processed. A successful exploit could cause an affec
bility by sending crafted IKEv2 packets to an affected device to be processed. A successful exploit could cause an affected device to continuously consume memory and eventually reload, resulting in a DoS condition. Cisco Bug IDs: CSCvf22394. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/103566 - https://ics-cert.us-cert.gov/advisories/ICSA-18-107-03 - https://ics-cert.us-cert.gov/advisories/ICSA-18-107-04 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-ike - http://www.securitytracker.com/id/1040595
CVE ID: CVE-2018-0159 State: PUBLISHED Published: 2018-03-28T22:00:00.000Z Last Updated: 2025-10-21T23:45:54.112Z Vendors: n/a Products: Cisco IOS and IOS XE Problem Types: CWE-20 Description: A vulnerability in the implementation of Internet Key Exchange Version 1 (IKEv1) functionality in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to improper validation of specific IKEv1 packets. An attacker could exploit this vulnerability by sending crafted IKEv1 packets to an affected device during an IKE negotiation. A successful exploit coul
ulnerability by sending crafted IKEv1 packets to an affected device during an IKE negotiation. A successful exploit could allow the attacker to cause an affected device to reload, resulting in a DoS condition. Cisco Bug IDs: CSCuj73916. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/103562 - http://www.securitytracker.com/id/1040595 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-ike-dos
CVE ID: CVE-2018-0160 State: PUBLISHED Published: 2018-03-28T22:00:00 Last Updated: 2024-12-02T20:55:06.631Z Vendors: n/a Products: Cisco IOS XE Problem Types: CWE-415 Description: A vulnerability in Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to improper management of memory resources, referred to as a double free. An attacker could exploit this vulnerability by sending crafted SNMP packets to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition. To exploit this
exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition. To exploit this vulnerability via SNMP Version 2c or earlier, the attacker must know the SNMP read-only community string for an affected system. To exploit this vulnerability via SNMP Version 3, the attacker must know the user credentials for the affected system. This vulnerability affects Cisco devices that are running a vulnerable release of Cisco IOS XE Software, have been configured to be queried over SNMP, and have Network Address Translation (NAT) enabled. Cisco Bug IDs: CSCve75818. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.s
IDs: CSCve75818. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/103575 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-snmp-dos - http://www.securitytracker.com/id/1040584
CVE ID: CVE-2018-0161 State: PUBLISHED Published: 2018-03-28T22:00:00.000Z Last Updated: 2025-10-21T23:45:53.985Z Vendors: n/a Products: Cisco IOS Problem Types: CWE-399 Description: A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software running on certain models of Cisco Catalyst Switches could allow an authenticated, remote attacker to cause a denial of service (DoS) condition, aka a GET MIB Object ID Denial of Service Vulnerability. The vulnerability is due to a condition that could occur when the affected software processes an SNMP read request that contains a request for the ciscoFlashMIB object ID (OID). An attacker could trigger this vulnerabi
NMP read request that contains a request for the ciscoFlashMIB object ID (OID). An attacker could trigger this vulnerability by issuing an SNMP GET request for the ciscoFlashMIB OID on an affected device. A successful exploit could cause the affected device to restart due to a SYS-3-CPUHOG. This vulnerability affects the following Cisco devices if they are running a vulnerable release of Cisco IOS Software and are configured to use SNMP Version 2 (SNMPv2) or SNMP Version 3 (SNMPv3): Cisco Catalyst 2960-L Series Switches, Cisco Catalyst Digital Building Series Switches 8P, Cisco Catalyst Digital Building Series Switches 8U. Cisco Bug IDs: CSCvd89541. Additional Analyst Notes: - CVE Program Co
isco Catalyst Digital Building Series Switches 8U. Cisco Bug IDs: CSCvd89541. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/103573 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-snmp - http://www.securitytracker.com/id/1040589
CVE ID: CVE-2018-0163 State: PUBLISHED Published: 2018-03-28T22:00:00 Last Updated: 2024-12-02T20:54:54.828Z Vendors: n/a Products: Cisco IOS Problem Types: CWE-287 Description: A vulnerability in the 802.1x multiple-authentication (multi-auth) feature of Cisco IOS Software could allow an unauthenticated, adjacent attacker to bypass the authentication phase on an 802.1x multi-auth port. The vulnerability is due to a logic change error introduced into the code. An attacker could exploit this vulnerability by trying to access an 802.1x multi-auth port after a successful supplicant has authenticated. An exploit could allow the attacker to bypass the 802.1x access controls and obtain access to t
icant has authenticated. An exploit could allow the attacker to bypass the 802.1x access controls and obtain access to the network. Cisco Bug IDs: CSCvg69701. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/103571 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-dot1x
CVE ID: CVE-2018-0164 State: PUBLISHED Published: 2018-03-28T22:00:00 Last Updated: 2024-12-02T20:54:42.127Z Vendors: n/a Products: Cisco IOS XE Problem Types: CWE-399 Description: A vulnerability in the Switch Integrated Security Features of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an interface queue wedge. The vulnerability is due to incorrect handling of crafted IPv6 packets. An attacker could exploit this vulnerability by sending crafted IPv6 packets through the device. An exploit could allow the attacker to cause an interface queue wedge. This vulnerability affects the Cisco cBR-8 Converged Broadband Router, Cisco ASR 1000 Series Aggregation Service
wedge. This vulnerability affects the Cisco cBR-8 Converged Broadband Router, Cisco ASR 1000 Series Aggregation Services Routers, and Cisco Cloud Services Router 1000V Series when configured with IPv6. In the field and internal testing, this vulnerability was only observed or reproduced on the Cisco cBR-8 Converged Broadband Router. The Cisco ASR 1000 Series Aggregation Services Routers and Cisco Cloud Services Router 1000V Series contain the same code logic, so affected trains have had the code fix applied; however, on these two products, the vulnerability has not been observed in the field or successfully reproduced internally. Cisco Bug IDs: CSCvd75185. Additional Analyst Notes: - CVE Pr
served in the field or successfully reproduced internally. Cisco Bug IDs: CSCvd75185. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/103553 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-sisf
CVE ID: CVE-2018-0165 State: PUBLISHED Published: 2018-03-28T22:00:00 Last Updated: 2024-12-02T20:54:22.436Z Vendors: n/a Products: Cisco IOS XE Problem Types: CWE-399 Description: A vulnerability in the Internet Group Management Protocol (IGMP) packet-processing functionality of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to exhaust buffers on an affected device, resulting in a denial of service (DoS) condition, aka a Memory Leak. The vulnerability is due to the affected software insufficiently processing IGMP Membership Query packets that are sent to an affected device. An attacker could exploit this vulnerability by sending a large number of IGMP Membership Que
ent to an affected device. An attacker could exploit this vulnerability by sending a large number of IGMP Membership Query packets, which contain certain values, to an affected device. A successful exploit could allow the attacker to exhaust buffers on the affected device, resulting in a DoS condition that requires the device to be reloaded manually. This vulnerability affects: Cisco Catalyst 4500 Switches with Supervisor Engine 8-E, if they are running Cisco IOS XE Software Release 3.x.x.E and IP multicast routing is configured; Cisco devices that are running Cisco IOS XE Software Release 16.x, if IP multicast routing is configured. Cisco Bug IDs: CSCuw09295, CSCve94496. Additional Analyst
Software Release 16.x, if IP multicast routing is configured. Cisco Bug IDs: CSCuw09295, CSCve94496. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securitytracker.com/id/1040592 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-igmp - http://www.securityfocus.com/bid/103568
CVE ID: CVE-2018-0167 State: PUBLISHED Published: 2018-03-28T22:00:00.000Z Last Updated: 2025-10-21T23:45:53.814Z Vendors: n/a Products: Cisco IOS, IOS XE, and IOS XR Problem Types: CWE-119 Description: Multiple Buffer Overflow vulnerabilities in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition or execute arbitrary code with elevated privileges on an affected device. Cisco Bug IDs: CSCuo17183, CSCvd73487. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security
ditional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-lldp - https://ics-cert.us-cert.gov/advisories/ICSA-18-107-03 - https://ics-cert.us-cert.gov/advisories/ICSA-18-107-04 - http://www.securitytracker.com/id/1040586 - https://ics-cert.us-cert.gov/advisories/ICSA-18-107-05 - http://www.securityfocus.com/bid/103564