Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
e-internal network. A successful exploit could allow the attacker to run code on the underlying host operating system. OAC is not enabled by default. For a device to be vulnerable, an administrator would need to install and activate this feature. This vulnerability affects the following Cisco Nexus Series Switches: Nexus 2000 Series Fabric Extenders, Nexus 5000 Series Switches, Nexus 5500 Platform Switches, Nexus 5600 Platform Switches, Nexus 6000 Series Switches, Nexus 7000 Series Switches, Nexus 7700 Series Switches. Cisco Bug IDs: CSCve53542, CSCvf36621. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/c
st Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-nxos9 - http://www.securityfocus.com/bid/102027 - http://www.securitytracker.com/id/1039940
CVE ID: CVE-2017-12343 State: PUBLISHED Published: 2017-11-30T09:00:00 Last Updated: 2024-08-05T18:36:55.892Z Vendors: n/a Products: Cisco Data Center Network Manager Software Problem Types: CWE-79 Description: Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject arbitrary values into DCNM configuration parameters, redirect a user to a malicious website, inject malicious content into a DCNM client interface, or conduct a cross-site scripting (XSS) attack against a user of the affected software. Cisco Bug IDs: CSCvf40477, CSCvf63150, CSCvf68218, CSCvf68235, CSCvf68247. Additional Analyst Notes: - CVE Program Container: Reference
CSCvf40477, CSCvf63150, CSCvf68218, CSCvf68235, CSCvf68247. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101996 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-dcnm
CVE ID: CVE-2017-12344 State: PUBLISHED Published: 2017-11-30T09:00:00 Last Updated: 2024-08-05T18:36:55.791Z Vendors: n/a Products: Cisco Data Center Network Manager Software Problem Types: CWE-79 Description: Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject arbitrary values into DCNM configuration parameters, redirect a user to a malicious website, inject malicious content into a DCNM client interface, or conduct a cross-site scripting (XSS) attack against a user of the affected software. Cisco Bug IDs: CSCvf40477, CSCvf63150, CSCvf68218, CSCvf68235, CSCvf68247. Additional Analyst Notes: - CVE Program Container: Reference
CVE ID: CVE-2017-12345 State: PUBLISHED Published: 2017-11-30T09:00:00 Last Updated: 2024-08-05T18:36:55.905Z Vendors: n/a Products: Cisco Data Center Network Manager Software Problem Types: CWE-79 Description: Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject arbitrary values into DCNM configuration parameters, redirect a user to a malicious website, inject malicious content into a DCNM client interface, or conduct a cross-site scripting (XSS) attack against a user of the affected software. Cisco Bug IDs: CSCvf40477, CSCvf63150, CSCvf68218, CSCvf68235, CSCvf68247. Additional Analyst Notes: - CVE Program Container: Reference
CVE ID: CVE-2017-12346 State: PUBLISHED Published: 2017-11-30T09:00:00 Last Updated: 2024-08-05T18:36:55.891Z Vendors: n/a Products: Cisco Data Center Network Manager Software Problem Types: CWE-79 Description: Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject arbitrary values into DCNM configuration parameters, redirect a user to a malicious website, inject malicious content into a DCNM client interface, or conduct a cross-site scripting (XSS) attack against a user of the affected software. Cisco Bug IDs: CSCvf40477, CSCvf63150, CSCvf68218, CSCvf68235, CSCvf68247. Additional Analyst Notes: - CVE Program Container: Reference
CVE ID: CVE-2017-12347 State: PUBLISHED Published: 2017-11-30T09:00:00 Last Updated: 2024-08-05T18:36:56.094Z Vendors: n/a Products: Cisco Data Center Network Manager Software Problem Types: CWE-79 Description: Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject arbitrary values into DCNM configuration parameters, redirect a user to a malicious website, inject malicious content into a DCNM client interface, or conduct a cross-site scripting (XSS) attack against a user of the affected software. Cisco Bug IDs: CSCvf40477, CSCvf63150, CSCvf68218, CSCvf68235, CSCvf68247. Additional Analyst Notes: - CVE Program Container: Reference
CVE ID: CVE-2017-12348 State: PUBLISHED Published: 2017-11-30T09:00:00 Last Updated: 2024-08-05T18:36:55.885Z Vendors: n/a Products: Cisco UCS Central Software Problem Types: CWE-79 Description: Multiple vulnerabilities in the web-based management interface of Cisco UCS Central Software could allow a remote attacker to conduct a cross-site scripting (XSS) attack against a user of the affected interface or hijack a valid session ID from a user of the affected interface. Cisco Bug IDs: CSCvf71978, CSCvf71986. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102018 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-2
tp://www.securityfocus.com/bid/102018 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-ucs-central - http://www.securitytracker.com/id/1039924
CVE ID: CVE-2017-12349 State: PUBLISHED Published: 2017-11-30T09:00:00 Last Updated: 2024-08-05T18:36:56.088Z Vendors: n/a Products: Cisco UCS Central Software Problem Types: CWE-79 Description: Multiple vulnerabilities in the web-based management interface of Cisco UCS Central Software could allow a remote attacker to conduct a cross-site scripting (XSS) attack against a user of the affected interface or hijack a valid session ID from a user of the affected interface. Cisco Bug IDs: CSCvf71978, CSCvf71986. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102018 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-2
CVE ID: CVE-2017-12350 State: PUBLISHED Published: 2017-11-16T07:00:00 Last Updated: 2024-08-05T18:36:56.078Z Vendors: n/a Products: Cisco Umbrella Insights Virtual Appliance Problem Types: CWE-798 Description: A vulnerability in Cisco Umbrella Insights Virtual Appliances 2.1.0 and earlier could allow an authenticated, local attacker to log in to an affected virtual appliance with root privileges. The vulnerability is due to the presence of default, static user credentials for an affected virtual appliance. An attacker could exploit this vulnerability by using the hypervisor console to connect locally to an affected system and then using the static credentials to log in to an affected virtua
r console to connect locally to an affected system and then using the static credentials to log in to an affected virtual appliance. A successful exploit could allow the attacker to log in to the affected appliance with root privileges. Cisco Bug IDs: CSCvg31220. Additional Analyst Notes: - CVE Program Container: References: - https://www.info-sec.ca/advisories/Cisco-Umbrella-Hardcoded-Credentials.html - http://www.securityfocus.com/bid/101879 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-uva
CVE ID: CVE-2017-12351 State: PUBLISHED Published: 2017-11-30T09:00:00 Last Updated: 2024-08-05T18:36:55.947Z Vendors: n/a Products: Cisco NX-OS Problem Types: CWE-264 Description: A vulnerability in the guest shell feature of Cisco NX-OS System Software could allow an authenticated, local attacker to read and send packets outside the scope of the guest shell container. An attacker would need valid administrator credentials to perform this attack. The vulnerability is due to insufficient internal security measures in the guest shell feature. An attacker could exploit this vulnerability by sending or receiving packets on the device-internal network outside of the guest shell container, aka "U
ulnerability by sending or receiving packets on the device-internal network outside of the guest shell container, aka "Unauthorized Internal Interface Access." This vulnerability affects the following products running Cisco NX-OS System Software: Nexus 3000 Series Switches, Nexus 9000 Series Switches in standalone NX-OS mode, Nexus 9500 R-Series Line Cards and Fabric Modules. Cisco Bug IDs: CSCvf33038. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102019 - http://www.securitytracker.com/id/1039932 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-nxos10
CVE ID: CVE-2017-12352 State: PUBLISHED Published: 2017-11-30T09:00:00 Last Updated: 2024-08-05T18:36:55.916Z Vendors: n/a Products: Cisco Application Policy Infrastructure Controller Problem Types: CWE-77 Description: A vulnerability in certain system script files that are installed at boot time on Cisco Application Policy Infrastructure Controllers could allow an authenticated, local attacker to gain elevated privileges and execute arbitrary commands with root privileges on an affected host operating system. The vulnerability is due to insufficient validation of user-controlled input that is supplied to certain script files of an affected system. An attacker could exploit this vulnerabilit
rolled input that is supplied to certain script files of an affected system. An attacker could exploit this vulnerability by submitting crafted input to a script file on an affected system. A successful exploit could allow the attacker to gain elevated privileges and execute arbitrary commands with root privileges on the affected system. To exploit this vulnerability, the attacker would need to authenticate to the affected system by using valid administrator credentials. Cisco Bug IDs: CSCvf57274. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101993 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-ap
ecurityfocus.com/bid/101993 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-apic - http://www.securitytracker.com/id/1039925
CVE ID: CVE-2017-12353 State: PUBLISHED Published: 2017-11-30T09:00:00 Last Updated: 2024-08-05T18:36:56.305Z Vendors: n/a Products: Cisco Email Security Appliance Problem Types: CWE-254 Description: A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) could allow an unauthenticated, remote attacker to bypass configured user filters on the device. The vulnerability is due to improper error handling of a malformed MIME header in an email attachment. An attacker could exploit this vulnerability by sending an email with a crafted MIME attachment. For example, a successful exploit could allow the attacker
rability by sending an email with a crafted MIME attachment. For example, a successful exploit could allow the attacker to bypass configured user filters to drop the email. The malformed MIME headers may not be RFC compliant. However, some mail clients could still allow users to access the attachment, which may not have been properly filtered by the device. Cisco Bug IDs: CSCvf44666. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039917 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-esa - http://www.securityfocus.com/bid/102002
CVE ID: CVE-2017-12354 State: PUBLISHED Published: 2017-11-30T09:00:00 Last Updated: 2024-08-05T18:36:55.969Z Vendors: n/a Products: Cisco Secure Access Control System Problem Types: CWE-200 Description: A vulnerability in the web-based interface of Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to view sensitive information on an affected system. The vulnerability exists because the affected software does not sufficiently protect system software version information when the software responds to HTTP requests that are sent to the web-based interface of the software. An attacker could exploit this vulnerability by sending crafted HTTP requests to the
b-based interface of the software. An attacker could exploit this vulnerability by sending crafted HTTP requests to the web-based interface of the affected software. A successful exploit could allow the attacker to view sensitive information about the software, which the attacker could use to conduct additional reconnaissance attacks. Cisco Bug IDs: CSCvf66155. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101986 - http://www.securitytracker.com/id/1039923 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-acs
CVE ID: CVE-2017-12355 State: PUBLISHED Published: 2017-11-30T09:00:00 Last Updated: 2024-08-05T18:36:55.825Z Vendors: n/a Products: Cisco IOS XR Problem Types: CWE-399 Description: A vulnerability in the Local Packet Transport Services (LPTS) ingress frame-processing functionality of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause one of the LPTS processes on an affected system to restart unexpectedly, resulting in a brief denial of service (DoS) condition. The vulnerability is due to incomplete LPTS frame validation by the affected software. An attacker could exploit this vulnerability by sending crafted XML requests to the management interface of an affected
An attacker could exploit this vulnerability by sending crafted XML requests to the management interface of an affected system. A successful exploit could allow the attacker to cause one of the LPTS processes on the affected system to restart unexpectedly, which would impact LPTS traffic and cause a brief DoS condition while the process restarts. Cisco Bug IDs: CSCvf76332. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101989 - http://www.securitytracker.com/id/1039927 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-ios-xr
CVE ID: CVE-2017-12356 State: PUBLISHED Published: 2017-11-30T09:00:00 Last Updated: 2024-08-05T18:36:56.008Z Vendors: n/a Products: Cisco Jabber Problem Types: CWE-79 Description: A vulnerability in the web-based management interface of Cisco Jabber for Windows, Mac, Android, and iOS could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link.
cted device. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or allow the attacker to access sensitive browser-based information. Cisco Bug IDs: CSCvf50378, CSCvg56018. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101990 - http://www.securitytracker.com/id/1039914 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-jabber
CVE ID: CVE-2017-12357 State: PUBLISHED Published: 2017-11-30T09:00:00 Last Updated: 2024-08-05T18:36:56.099Z Vendors: n/a Products: Cisco Unified Communications Manager Problem Types: CWE-79 Description: A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading a user of the interface to click a cr
of an affected device. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or allow the attacker to access sensitive browser-based information. Cisco Bug IDs: CSCvf79346. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101988 - http://www.securitytracker.com/id/1039916 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-cucm
CVE ID: CVE-2017-12358 State: PUBLISHED Published: 2017-11-30T09:00:00 Last Updated: 2024-08-05T18:36:56.051Z Vendors: n/a Products: Cisco Jabber Problem Types: CWE-79 Description: A vulnerability in the web-based management interface of Cisco Jabber for Windows, Mac, Android, and iOS could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading a user of the interface to click a malicious link. A successful exploit
could exploit this vulnerability by persuading a user of the interface to click a malicious link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or allow the attacker to access sensitive browser-based information. Cisco Bug IDs: CSCvf79080, CSCvf79088. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-jabber1 - http://www.securityfocus.com/bid/101992
CVE ID: CVE-2017-12359 State: PUBLISHED Published: 2017-11-30T09:00:00 Last Updated: 2024-08-05T18:36:56.313Z Vendors: n/a Products: Cisco WebEx Network Recording Player Problem Types: CWE-119 Description: A Buffer Overflow vulnerability in Cisco WebEx Network Recording Player for Advanced Recording Format (.arf) files could allow an attacker to execute arbitrary code on a system. An attacker could exploit this vulnerability by providing a user with a malicious .arf file via email or URL and convincing the user to launch the file. Exploitation of this vulnerability could allow arbitrary code execution on the system of the targeted user. This vulnerability affects Cisco WebEx Business Suite m
low arbitrary code execution on the system of the targeted user. This vulnerability affects Cisco WebEx Business Suite meeting sites, Cisco WebEx Meetings sites, Cisco WebEx Meetings Server, and Cisco WebEx ARF players. Cisco Bug IDs: CSCve10729, CSCve10771, CSCve10779, CSCve11521, CSCve11543. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102186 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-webex
CVE ID: CVE-2017-12360 State: PUBLISHED Published: 2017-11-30T09:00:00 Last Updated: 2024-08-05T18:36:56.088Z Vendors: n/a Products: Cisco WebEx Network Recording Player Problem Types: CWE-399 Description: A vulnerability in Cisco WebEx Network Recording Player for WebEx Recording Format (WRF) files could allow an attacker to cause a denial of service (DoS) condition. An attacker could exploit this vulnerability by providing a user with a malicious WRF file via email or URL and convincing the user to open the file. A successful exploit could cause an affected player to crash, resulting in a DoS condition. This vulnerability affects Cisco WebEx Business Suite meeting sites, Cisco WebEx Meetin
h, resulting in a DoS condition. This vulnerability affects Cisco WebEx Business Suite meeting sites, Cisco WebEx Meetings sites, and Cisco WebEx WRF players. Cisco Bug IDs: CSCve30294, CSCve30301. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-webex1 - http://www.securityfocus.com/bid/102001
CVE ID: CVE-2017-12361 State: PUBLISHED Published: 2017-11-30T09:00:00 Last Updated: 2024-08-05T18:36:56.318Z Vendors: n/a Products: Cisco Jabber Problem Types: CWE-200 Description: A vulnerability in Cisco Jabber for Windows could allow an unauthenticated, local attacker to access sensitive communications made by the Jabber client. An attacker could exploit this vulnerability to gain information to conduct additional attacks. The vulnerability is due to the way Cisco Jabber for Windows handles random number generation for file folders. An attacker could exploit the vulnerability by fixing the random number data used to establish Secure Sockets Layer (SSL) connections between clients. An exp
bility by fixing the random number data used to establish Secure Sockets Layer (SSL) connections between clients. An exploit could allow the attacker to decrypt secure communications made by the Cisco Jabber for Windows client. Cisco Bug IDs: CSCve44806. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101994 - http://www.securitytracker.com/id/1039915 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-jabber2
CVE ID: CVE-2017-12362 State: PUBLISHED Published: 2017-11-30T09:00:00 Last Updated: 2024-08-05T18:36:55.992Z Vendors: n/a Products: Cisco Meeting Server Problem Types: CWE-399 Description: A vulnerability in Cisco Meeting Server versions prior to 2.2.2 could allow an authenticated, remote attacker to cause the system to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to video calls being made on systems with a particular configuration. An attacker could exploit this by knowing a valid URI that directs to a Cisco Meeting Server. An attacker could then make a video call and cause the system to reload. Cisco Bug IDs: CSCve65931. Additional Analyst Notes: - CV
r could then make a video call and cause the system to reload. Cisco Bug IDs: CSCve65931. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039913 - http://www.securityfocus.com/bid/101987 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-cms
CVE ID: CVE-2017-12363 State: PUBLISHED Published: 2017-11-30T09:00:00 Last Updated: 2024-08-05T18:36:56.087Z Vendors: n/a Products: Cisco WebEx Meeting Server Problem Types: CWE-264 Description: A vulnerability in Cisco WebEx Meeting Server could allow an unauthenticated, remote attacker to modify the welcome message of a meeting on an affected system. The vulnerability is due to insufficient security settings on meetings. An attacker could exploit this vulnerability by modifying the welcome message to a meeting. A successful exploit could allow the attacker to modify the welcome message of any known meeting. Cisco Bug IDs: CSCvf68695. Additional Analyst Notes: - CVE Program Container: Refe
welcome message of any known meeting. Cisco Bug IDs: CSCvf68695. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102000 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-webex3 - http://www.securitytracker.com/id/1039921
CVE ID: CVE-2017-12364 State: PUBLISHED Published: 2017-11-30T09:00:00 Last Updated: 2024-08-05T18:36:55.996Z Vendors: n/a Products: Cisco Prime Service Catalog Problem Types: CWE-89 Description: A SQL Injection vulnerability in the web framework of Cisco Prime Service Catalog could allow an unauthenticated, remote attacker to execute unauthorized Structured Query Language (SQL) queries. The vulnerability is due to a failure to validate user-supplied input that is used in SQL queries. An attacker could exploit this vulnerability by sending a crafted SQL statement to an affected system. Successful exploitation could allow the attacker to read entries in some database tables. Cisco Bug IDs: CS