Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
d code area. The vulnerability affects all versions of SNMP (versions 1, 2c, and 3). The attacker must know the SNMP read only community string (SNMP version 2c or earlier) or the user credentials (SNMPv3). An exploit could allow the attacker to execute arbitrary code and obtain full control of the system or to cause a reload of the affected system. Only traffic directed to the affected system can be used to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170629-snmp
CVE ID: CVE-2017-6738 State: PUBLISHED Published: 2017-07-17T21:00:00.000Z Last Updated: 2025-10-21T23:55:37.567Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Cisco Products: IOS, Cisco IOS XE Software Problem Types: CWE-119 Description: The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload. An attacker could exploit these vulnerabilities by sending a crafted SNMP packet to an affected system via IPv4 or IPv6. Only traffic directed to an affected system ca
by sending a crafted SNMP packet to an affected system via IPv4 or IPv6. Only traffic directed to an affected system can be used to exploit these vulnerabilities. The vulnerabilities are due to a buffer overflow condition in the SNMP subsystem of the affected software. The vulnerabilities affect all versions of SNMP - Versions 1, 2c, and 3. To exploit these vulnerabilities via SNMP Version 2c or earlier, the attacker must know the SNMP read-only community string for the affected system. To exploit these vulnerabilities via SNMP Version 3, the attacker must have user credentials for the affected system. A successful exploit could allow the attacker to execute arbitrary code and obtain full c
tials for the affected system. A successful exploit could allow the attacker to execute arbitrary code and obtain full control of the affected system or cause the affected system to reload. Customers are advised to apply the workaround as contained in the Workarounds section below. Fixed software information is available via the Cisco IOS Software Checker. All devices that have enabled SNMP and have not explicitly excluded the affected MIBs or OIDs should be considered vulnerable. There are workarounds that address these vulnerabilities. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sec.cloudapps.cisco.com/security/center/content/CiscoSecur
ram Container: - CISA ADP Vulnrichment: References: - https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170629-snmp
CVE ID: CVE-2017-6739 State: PUBLISHED Published: 2017-07-17T21:00:00.000Z Last Updated: 2025-10-21T23:55:37.377Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: IntelliShield Products: Universal Product Problem Types: CWE-119 Description: A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute code. An attacker could exploit this vulnerability by sending a crafted SNMP packet to the affected device.&nbsp; The vulnerability is due to a buffer overflow in the affected code area. The vulnerability affects all versions of SNMP (versions 1, 2c, and 3). The attacker
verflow in the affected code area. The vulnerability affects all versions of SNMP (versions 1, 2c, and 3). The attacker must know the SNMP read only community string (SNMP version 2c or earlier) or the user credentials (SNMPv3). An exploit could allow the attacker to execute arbitrary code and obtain full control of the system or to cause a reload of the affected system. Only traffic directed to the affected system can be used to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170629-snmp
CVE ID: CVE-2017-6740 State: PUBLISHED Published: 2017-07-17T21:00:00.000Z Last Updated: 2025-10-21T23:55:37.237Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Cisco, IntelliShield Products: IOS, Universal Product Problem Types: CWE-119 Description: The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload. An attacker could exploit these vulnerabilities by sending a crafted SNMP packet to an affected system via IPv4 or IPv6. Only traffic directed to an affecte
CVE ID: CVE-2017-6741 State: PUBLISHED Published: 2017-07-17T21:00:00 Last Updated: 2025-07-31T16:23:54.849Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Cisco, IntelliShield Products: Cisco IOS XE Software, Universal Product Problem Types: CWE-119 Description: A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute code. An attacker could exploit this vulnerability by sending a crafted SNMP packet to the affected device.&nbsp; The vulnerability is due to a buffer overflow in the affected code area. The vulnerability affects all versions of SNMP (versions 1,
lity is due to a buffer overflow in the affected code area. The vulnerability affects all versions of SNMP (versions 1, 2c, and 3). The attacker must know the SNMP read only community string (SNMP version 2c or earlier) or the user credentials (SNMPv3). An exploit could allow the attacker to execute arbitrary code and obtain full control of the system or to cause a reload of the affected system. Only traffic directed to the affected system can be used to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170629-snmp
CVE ID: CVE-2017-6742 State: PUBLISHED Published: 2017-07-17T21:00:00.000Z Last Updated: 2025-10-21T23:55:37.103Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Cisco, IntelliShield Products: Cisco IOS XE Software, Universal Product Description: A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute code. An attacker could exploit this vulnerability by sending a crafted SNMP packet to the affected device.&nbsp; The vulnerability is due to a buffer overflow in the affected code area. The vulnerability affects all versions of SNMP (versions 1, 2c, and 3). The at
uffer overflow in the affected code area. The vulnerability affects all versions of SNMP (versions 1, 2c, and 3). The attacker must know the SNMP read only community string (SNMP version 2c or earlier) or the user credentials (SNMPv3). An exploit could allow the attacker to execute arbitrary code and obtain full control of the system or to cause a reload of the affected system. Only traffic directed to the affected system can be used to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170629-snmp
CVE ID: CVE-2017-6743 State: PUBLISHED Published: 2017-07-17T21:00:00.000Z Last Updated: 2025-10-21T23:55:36.832Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Cisco, IntelliShield Products: IOS, Universal Product Problem Types: CWE-119 Description: The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload. An attacker could exploit these vulnerabilities by sending a crafted SNMP packet to an affected system via IPv4 or IPv6. Only traffic directed to an affecte
CVE ID: CVE-2017-6744 State: PUBLISHED Published: 2017-07-17T21:00:00.000Z Last Updated: 2025-10-21T23:55:36.555Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Cisco, IntelliShield Products: IOS, Universal Product Problem Types: CWE-119 Description: The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload. An attacker could exploit these vulnerabilities by sending a crafted SNMP packet to an affected system via IPv4 or IPv6. Only traffic directed to an affecte
CVE ID: CVE-2017-6745 State: PUBLISHED Published: 2017-08-07T06:00:00 Last Updated: 2024-08-05T15:41:17.115Z Vendors: n/a Products: Cisco Videoscape Distribution Suite Cache Server Problem Types: CWE-119 Description: A vulnerability in the cache server within Cisco Videoscape Distribution Suite (VDS) for Television 3.2(5)ES1 could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on a targeted appliance. The vulnerability is due to excessive mapped connections exhausting the allotted resources within the system. An attacker could exploit this vulnerability by sending large amounts of inbound traffic to a device with the intention of overloading certain re
this vulnerability by sending large amounts of inbound traffic to a device with the intention of overloading certain resources. A successful exploit could cause the device to reload, resulting in a DoS condition. Cisco Bug IDs: CSCvc39260. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100106 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170802-vds
CVE ID: CVE-2017-6746 State: PUBLISHED Published: 2017-07-25T19:00:00 Last Updated: 2024-08-05T15:41:17.024Z Vendors: n/a Products: Cisco Web Security Appliance Problem Types: Command Injection and Privilege Escalation Vulnerability Description: A vulnerability in the web interface of the Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to perform command injection and elevate privileges to root. The attacker must authenticate with valid administrator credentials. Affected Products: Cisco AsyncOS Software 10.0 and later for WSA on both virtual and hardware appliances. More Information: CSCvd88862. Known Affected Releases: 10.1.0-204. Known Fixed Releases: 10.5
l and hardware appliances. More Information: CSCvd88862. Known Affected Releases: 10.1.0-204. Known Fixed Releases: 10.5.1-270 10.1.1-235. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99877 - http://www.securitytracker.com/id/1038948 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170719-wsa1
CVE ID: CVE-2017-6747 State: PUBLISHED Published: 2017-08-07T06:00:00 Last Updated: 2024-08-05T15:41:17.492Z Vendors: n/a Products: Cisco Identity Services Engine Problem Types: CWE-287 Description: A vulnerability in the authentication module of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass local authentication. The vulnerability is due to improper handling of authentication requests and policy assignment for externally authenticated users. An attacker could exploit this vulnerability by authenticating with a valid external user account that matches an internal username and incorrectly receiving the authorization policy of the internal accoun
user account that matches an internal username and incorrectly receiving the authorization policy of the internal account. An exploit could allow the attacker to have Super Admin privileges for the ISE Admin portal. This vulnerability does not affect endpoints authenticating to the ISE. The vulnerability affects Cisco ISE, Cisco ISE Express, and Cisco ISE Virtual Appliance running Release 1.3, 1.4, 2.0.0, 2.0.1, or 2.1.0. Release 2.2.x is not affected. Cisco Bug IDs: CSCvb10995. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039054 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170802-ise
CVE ID: CVE-2017-6748 State: PUBLISHED Published: 2017-07-25T19:00:00 Last Updated: 2024-08-05T15:41:17.140Z Vendors: n/a Products: Cisco Web Security Appliance Problem Types: Command Injection and Privilege Escalation Vulnerability Description: A vulnerability in the CLI parser of the Cisco Web Security Appliance (WSA) could allow an authenticated, local attacker to perform command injection and elevate privileges to root. The attacker must authenticate with valid operator-level or administrator-level credentials. Affected Products: virtual and hardware versions of Cisco Web Security Appliance (WSA). More Information: CSCvd88855. Known Affected Releases: 10.1.0-204. Known Fixed Releases: 10
eb Security Appliance (WSA). More Information: CSCvd88855. Known Affected Releases: 10.1.0-204. Known Fixed Releases: 10.5.1-270 10.1.1-234. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038956 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170719-wsa2 - http://www.securityfocus.com/bid/99918
CVE ID: CVE-2017-6749 State: PUBLISHED Published: 2017-07-25T19:00:00 Last Updated: 2024-08-05T15:41:17.092Z Vendors: n/a Products: Cisco Web Security Appliance Problem Types: Stored Cross-Site Scripting Vulnerability Description: A vulnerability in the web-based management interface of Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. Affected Products: virtual and hardware versions of Cisco Web Security Appliance (WSA). More Information: CSCvd88865. Known Affected Releases: 10.1.0-204. Additional Analyst Notes: - CVE Program Contai
(WSA). More Information: CSCvd88865. Known Affected Releases: 10.1.0-204. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038957 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170719-wsa3 - http://www.securityfocus.com/bid/99875
CVE ID: CVE-2017-6750 State: PUBLISHED Published: 2017-07-25T19:00:00 Last Updated: 2024-08-05T15:41:17.233Z Vendors: n/a Products: Cisco Web Security Appliance Problem Types: Static Credentials Vulnerability Description: A vulnerability in AsyncOS for the Cisco Web Security Appliance (WSA) could allow an unauthenticated, local attacker to log in to the device with the privileges of a limited user or an unauthenticated, remote attacker to authenticate to certain areas of the web GUI, aka a Static Credentials Vulnerability. Affected Products: virtual and hardware versions of Cisco Web Security Appliance (WSA). More Information: CSCve06124. Known Affected Releases: 10.1.0-204. Known Fixed Rele
Cisco Web Security Appliance (WSA). More Information: CSCve06124. Known Affected Releases: 10.1.0-204. Known Fixed Releases: 10.5.1-270. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99924 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170719-wsa4 - http://www.securitytracker.com/id/1038958
CVE ID: CVE-2017-6751 State: PUBLISHED Published: 2017-07-25T19:00:00 Last Updated: 2024-08-05T15:41:17.674Z Vendors: n/a Products: Cisco Web Security Appliance Problem Types: Access Control Bypass Vulnerability Description: A vulnerability in the web proxy functionality of the Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to forward traffic from the web proxy interface of an affected device to the administrative management interface of an affected device, aka an Access Control Bypass Vulnerability. Affected Products: virtual and hardware versions of Cisco Web Security Appliance (WSA). More Information: CSCvd88863. Known Affected Releases: 10.1.0-204 9.0.
e versions of Cisco Web Security Appliance (WSA). More Information: CSCvd88863. Known Affected Releases: 10.1.0-204 9.0.0-485. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99967 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170719-wsa5 - http://www.securitytracker.com/id/1038959
CVE ID: CVE-2017-6752 State: PUBLISHED Published: 2017-08-07T06:00:00 Last Updated: 2024-08-05T15:41:17.284Z Vendors: n/a Products: Cisco Adaptive Security Appliance Problem Types: CWE-200 Description: A vulnerability in the web interface of the Cisco Adaptive Security Appliance (ASA) 9.3(3) and 9.6(2) could allow an unauthenticated, remote attacker to determine valid usernames. The attacker could use this information to conduct additional reconnaissance attacks. The vulnerability is due to the interaction between Lightweight Directory Access Protocol (LDAP) and SSL Connection Profile when they are configured together. An attacker could exploit the vulnerability by performing a username enum
ion Profile when they are configured together. An attacker could exploit the vulnerability by performing a username enumeration attack to the IP address of the device. An exploit could allow the attacker to determine valid usernames. Cisco Bug IDs: CSCvd47888. Additional Analyst Notes: - CVE Program Container: References: - https://quickview.cloudapps.cisco.com/quickview/bug/CSCvd47888 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170802-asa2 - http://www.securitytracker.com/id/1039057 - http://www.securityfocus.com/bid/100113
CVE ID: CVE-2017-6753 State: PUBLISHED Published: 2017-07-25T19:00:00 Last Updated: 2024-08-05T15:41:17.545Z Vendors: n/a Products: Cisco WebEx Browser Extension Problem Types: CWE-119 Description: A vulnerability in Cisco WebEx browser extensions for Google Chrome and Mozilla Firefox could allow an unauthenticated, remote attacker to execute arbitrary code with the privileges of the affected browser on an affected system. This vulnerability affects the browser extensions for Cisco WebEx Meetings Server, Cisco WebEx Centers (Meeting Center, Event Center, Training Center, and Support Center), and Cisco WebEx Meetings when they are running on Microsoft Windows. The vulnerability is due to a de
d Support Center), and Cisco WebEx Meetings when they are running on Microsoft Windows. The vulnerability is due to a design defect in the extension. An attacker who can convince an affected user to visit an attacker-controlled web page or follow an attacker-supplied link with an affected browser could exploit the vulnerability. If successful, the attacker could execute arbitrary code with the privileges of the affected browser. The following versions of the Cisco WebEx browser extensions are affected: Versions prior to 1.0.12 of the Cisco WebEx extension on Google Chrome, Versions prior to 1.0.12 of the Cisco WebEx extension on Mozilla Firefox. Cisco Bug IDs: CSCvf15012 CSCvf15020 CSCvf1503
Versions prior to 1.0.12 of the Cisco WebEx extension on Mozilla Firefox. Cisco Bug IDs: CSCvf15012 CSCvf15020 CSCvf15030 CSCvf15033 CSCvf15036 CSCvf15037. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038911 - http://www.securityfocus.com/bid/99614 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170717-webex - http://www.securitytracker.com/id/1038910 - http://www.securitytracker.com/id/1038909
CVE ID: CVE-2017-6754 State: PUBLISHED Published: 2017-08-07T06:00:00 Last Updated: 2024-08-05T15:41:17.116Z Vendors: n/a Products: Cisco Smart Net Total Care Software Collector Appliance Problem Types: CWE-89 Description: A vulnerability in the web-based management interface of the Cisco Smart Net Total Care (SNTC) Software Collector Appliance 3.11 could allow an authenticated, remote attacker to perform a read-only, blind SQL injection attack, which could allow the attacker to compromise the confidentiality of the system through SQL timing attacks. The vulnerability is due to insufficient input validation of certain user-supplied fields that are subsequently used by the affected software t
e to insufficient input validation of certain user-supplied fields that are subsequently used by the affected software to build SQL queries. An attacker could exploit this vulnerability by submitting crafted URLs, which are designed to exploit the vulnerability, to the affected software. To execute an attack successfully, the attacker would need to submit a number of requests to the affected software. A successful exploit could allow the attacker to determine the presence of values in the SQL database of the affected software. Cisco Bug IDs: CSCvf07617. Additional Analyst Notes: - CVE Program Container: References: - https://quickview.cloudapps.cisco.com/quickview/bug/CSCvf07617 - http://www
otes: - CVE Program Container: References: - https://quickview.cloudapps.cisco.com/quickview/bug/CSCvf07617 - http://www.securityfocus.com/bid/100126 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170802-sntc
CVE ID: CVE-2017-6755 State: PUBLISHED Published: 2017-07-25T19:00:00 Last Updated: 2024-08-05T15:41:17.133Z Vendors: n/a Products: Cisco Prime Collaboration Provisioning Tool Problem Types: Cross-Site Scripting Vulnerability Description: A vulnerability in the web portal of the Cisco Prime Collaboration Provisioning (PCP) Tool could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected system. More Information: CSCvc90312. Known Affected Releases: 12.1. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170719-pc
gram Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170719-pcpt - http://www.securityfocus.com/bid/99878 - http://www.securitytracker.com/id/1038960
CVE ID: CVE-2017-6756 State: PUBLISHED Published: 2017-08-07T06:00:00 Last Updated: 2024-08-05T15:41:17.104Z Vendors: n/a Products: Cisco Prime Collaboration Provisioning Tool Problem Types: CWE-352 Description: A vulnerability in the Web UI Application of the Cisco Prime Collaboration Provisioning Tool through 12.2 could allow an unauthenticated, remote attacker to execute unwanted actions. The vulnerability is due to a lack of defense against cross-site request forgery (CSRF) attacks. An attacker could exploit this vulnerability by forcing the user's browser to perform any action authorized for that user. Cisco Bug IDs: CSCvc90280. Additional Analyst Notes: - CVE Program Container: Referen
y action authorized for that user. Cisco Bug IDs: CSCvc90280. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100112 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170802-pcpt1 - http://www.securitytracker.com/id/1039061
CVE ID: CVE-2017-6757 State: PUBLISHED Published: 2017-08-07T06:00:00 Last Updated: 2024-08-05T15:41:17.150Z Vendors: n/a Products: Cisco Unified Communications Manager Problem Types: CWE-89 Description: A vulnerability in Cisco Unified Communications Manager 10.5(2.10000.5), 11.0(1.10000.10), and 11.5(1.10000.6) could allow an authenticated, remote attacker to conduct a blind SQL injection attack. The vulnerability is due to a failure to validate user-supplied input used in SQL queries that bypass protection filters. An attacker could exploit this vulnerability by sending crafted URLs that include SQL statements. An exploit could allow the attacker to modify or delete entries in some databa