Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-1975 State: PUBLISHED Published: 2019-09-18T16:15:13.502948Z Last Updated: 2024-11-21T19:14:34.909Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Cisco Products: Cisco HyperFlex HX-Series Problem Types: CWE-693 Description: A vulnerability in the web-based interface of Cisco HyperFlex Software could allow an unauthenticated, remote attacker to execute a cross-frame scripting (XFS) attack on an affected device. This vulnerability is due to insufficient HTML iframe protection. An attacker could exploit this vulnerability by directing a user to an attacker-controlled web page that contains a malicious HTML iframe. A successful exploit could a
directing a user to an attacker-controlled web page that contains a malicious HTML iframe. A successful exploit could allow the attacker to conduct clickjacking or other clientside browser attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190918-hyperflex-xfs
CVE ID: CVE-2019-1976 State: PUBLISHED Published: 2019-09-05T01:25:11.052747Z Last Updated: 2024-11-19T18:57:15.848Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Cisco Products: Cisco Industrial Network Director Problem Types: CWE-200 Description: A vulnerability in the &ldquo;plug-and-play&rdquo; services component of Cisco Industrial Network Director (IND) could allow an unauthenticated, remote attacker to access sensitive information on an affected device. The vulnerability is due to improper access restrictions on the web-based management interface. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A s
ent interface. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to access running configuration information about devices managed by the IND, including administrative credentials. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190904-ind
CVE ID: CVE-2019-1977 State: PUBLISHED Published: 2019-08-29T21:50:14.241461Z Last Updated: 2024-11-21T19:15:02.726Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: Cisco Products: Cisco Nexus 9000 Series Fabric Switches in ACI Problem Types: CWE-371 Description: A vulnerability within the Endpoint Learning feature of Cisco Nexus 9000 Series Switches running in Application Centric Infrastructure (ACI) mode could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an endpoint device in certain circumstances. The vulnerability is due to improper endpoint learning when packets are received on a specific port from outside th
ces. The vulnerability is due to improper endpoint learning when packets are received on a specific port from outside the ACI fabric and destined to an endpoint located on a border leaf when Disable Remote Endpoint Learning has been enabled. This can result in a Remote (XR) entry being created for the impacted endpoint that will become stale if the endpoint migrates to a different port or leaf switch. This results in traffic not reaching the impacted endpoint until the Remote entry can be relearned by another mechanism. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190
ISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190828-nexus-aci-dos
CVE ID: CVE-2019-1978 State: PUBLISHED Published: 2019-11-05T19:35:41.101564Z Last Updated: 2024-11-19T18:52:18.299Z Severity: MEDIUM (CVSS 5.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N) Vendors: Cisco Products: Cisco Firepower Threat Defense Software Problem Types: CWE-264 Description: A vulnerability in the stream reassembly component of Cisco Firepower Threat Defense Software, Cisco FirePOWER Services Software for ASA, and Cisco Firepower Management Center Software could allow an unauthenticated, remote attacker to bypass filtering protections. The vulnerability is due to improper reassembly of traffic streams. An attacker could exploit this vulnerability by sending crafted streams thr
e to improper reassembly of traffic streams. An attacker could exploit this vulnerability by sending crafted streams through an affected device. An exploit could allow the attacker to bypass filtering and deliver malicious requests to protected systems that would otherwise be blocked. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190816-ftd-srb
CVE ID: CVE-2019-1980 State: PUBLISHED Published: 2019-11-05T19:35:41.544096Z Last Updated: 2024-11-19T18:52:10.436Z Severity: MEDIUM (CVSS 5.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N) Vendors: Cisco Products: Cisco Firepower Threat Defense Software Problem Types: CWE-264 Description: A vulnerability in the protocol detection component of Cisco Firepower Threat Defense Software, Cisco FirePOWER Services Software for ASA, and Cisco Firepower Management Center Software could allow an unauthenticated, remote attacker to bypass filtering protections. The vulnerability is due to improper detection of the initial use of a protocol on a nonstandard port. An attacker could exploit this vulnerab
ue to improper detection of the initial use of a protocol on a nonstandard port. An attacker could exploit this vulnerability by sending traffic on a nonstandard port for the protocol in use through an affected device. An exploit could allow the attacker to bypass filtering and deliver malicious requests to protected systems that would otherwise be blocked. Once the initial protocol flow on the nonstandard port is detected, future flows on the nonstandard port will be successfully detected and handled as configured by the applied policy. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvis
ram Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190816-ftd-nspd
CVE ID: CVE-2019-1981 State: PUBLISHED Published: 2019-11-05T19:35:41.940103Z Last Updated: 2024-11-19T18:52:01.647Z Severity: MEDIUM (CVSS 5.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N) Vendors: Cisco Products: Cisco Firepower Threat Defense Software Problem Types: CWE-264 Description: A vulnerability in the normalization functionality of Cisco Firepower Threat Defense Software, Cisco FirePOWER Services Software for ASA, and Cisco Firepower Management Center Software could allow an unauthenticated, remote attacker to bypass filtering protections. The vulnerability is due to insufficient normalization of a text-based payload. An attacker could exploit this vulnerability by sending traffic
e to insufficient normalization of a text-based payload. An attacker could exploit this vulnerability by sending traffic that contains specifically obfuscated payloads through an affected device. An exploit could allow the attacker to bypass filtering and deliver malicious payloads to protected systems that would otherwise be blocked. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190816-ftd-null
CVE ID: CVE-2019-1982 State: PUBLISHED Published: 2019-11-05T19:35:42.343253Z Last Updated: 2024-11-19T18:51:53.061Z Severity: MEDIUM (CVSS 5.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N) Vendors: Cisco Products: Cisco Firepower Management Center Problem Types: CWE-264 Description: A vulnerability in the HTTP traffic filtering component of Cisco Firepower Threat Defense Software, Cisco FirePOWER Services Software for ASA, and Cisco Firepower Management Center Software could allow an unauthenticated, remote attacker to bypass filtering protections. The vulnerability is due to improper handling of HTTP requests, including those communicated over a secure HTTPS connection, that contain malici
to improper handling of HTTP requests, including those communicated over a secure HTTPS connection, that contain maliciously crafted headers. An attacker could exploit this vulnerability by sending malicious requests to an affected device. An exploit could allow the attacker to bypass filtering and deliver malicious requests to protected systems, allowing attackers to deliver malicious content that would otherwise be blocked. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190816-ftd-http
CVE ID: CVE-2019-1983 State: PUBLISHED Published: 2020-09-23T00:25:56.648526Z Last Updated: 2024-11-13T18:05:42.757Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Cisco Products: Cisco Email Security Appliance (ESA) Problem Types: CWE-20 Description: A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) and Cisco Content Security Management Appliance (SMA) could allow an unauthenticated, remote attacker to cause repeated crashes in some internal processes that are running on the affected devices, resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient input
n the affected devices, resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient input validation of email attachments. An attacker could exploit this vulnerability by sending an email message with a crafted attachment through an affected device. A successful exploit could allow the attacker to cause specific processes to crash repeatedly, resulting in the complete unavailability of both the Cisco Advanced Malware Protection (AMP) and message tracking features and in severe performance degradation while processing email. After the affected processes restart, the software resumes filtering for the same attachment, causing the affected processes to crash and r
processes restart, the software resumes filtering for the same attachment, causing the affected processes to crash and restart again. A successful exploit could also allow the attacker to cause a repeated DoS condition. Manual intervention may be required to recover from this situation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200219-esa-sma-dos
CVE ID: CVE-2019-1984 State: PUBLISHED Published: 2019-08-21T18:30:14.386763Z Last Updated: 2024-11-21T19:15:39.168Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H) Vendors: Cisco Products: Cisco Enterprise NFV Infrastructure Software Problem Types: CWE-20 Description: A vulnerability in Cisco Enterprise Network Functions Virtualization Infrastructure Software (NFVIS) could allow an authenticated, remote attacker with administrator privileges to overwrite files on the underlying operating system (OS) of an affected device. The vulnerability is due to improper input validation in an NFVIS file-system command. An attacker could exploit this vulnerability by using craft
o improper input validation in an NFVIS file-system command. An attacker could exploit this vulnerability by using crafted variables during the execution of an affected command. A successful exploit could allow the attacker to overwrite arbitrary files on the underlying OS. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190821-nfv-filewrite
CVE ID: CVE-2019-1985 State: PUBLISHED Published: 2019-06-19T19:50:40 Last Updated: 2024-08-04T18:35:52.033Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In findAvailSpellCheckerLocked of TextServicesManagerService.java, there is a possible way to bypass the warning dialog when selecting an untrusted spell checker due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0Android ID: A-118694079 Additional Analyst Notes: - CVE Program Container: References: - https:/
ndroid-7.1.2 Android-8.0Android ID: A-118694079 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-03-01
CVE ID: CVE-2019-1986 State: PUBLISHED Published: 2019-02-28T17:00:00Z Last Updated: 2024-09-16T18:13:17.589Z Vendors: Android Products: Android Problem Types: Remote code execution Description: In SkSwizzler::onSetSampleX of SkSwizzler.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege in system_server with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-117838472. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106842 - https://source.android.com/security/bulletin/2019-02-01
CVE ID: CVE-2019-1987 State: PUBLISHED Published: 2019-02-28T17:00:00Z Last Updated: 2024-09-16T18:48:20.754Z Vendors: Android Products: Android Problem Types: Remote code execution Description: In onSetSampleX of SkSwizzler.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-118143775. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106842 - https://source.android.com/sec
t Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106842 - https://source.android.com/security/bulletin/2019-02-01
CVE ID: CVE-2019-1988 State: PUBLISHED Published: 2019-02-28T17:00:00Z Last Updated: 2024-09-16T20:17:33.437Z Vendors: Android Products: Android Problem Types: Remote code execution Description: In sample6 of SkSwizzler.cpp, there is a possible out of bounds write due to improper input validation. This could lead to remote code execution in system_server with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-8.0 Android-8.1 Android-9. Android ID: A-118372692. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106842 - https://source.android.com/security/bulletin/2019-02-01
CVE ID: CVE-2019-1989 State: PUBLISHED Published: 2019-06-19T19:52:22 Last Updated: 2024-08-04T18:35:52.381Z Vendors: n/a Products: Android Problem Types: Remote code execution Description: In ih264d_fmt_conv_420sp_to_420p of ih264d_format_conv.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9Android ID: A-118399205 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-03-01
CVE ID: CVE-2019-1990 State: PUBLISHED Published: 2019-06-19T19:52:52 Last Updated: 2024-08-04T18:35:52.491Z Vendors: n/a Products: Android Problem Types: Remote code execution Description: In ihevcd_fmt_conv_420sp_to_420p of ihevcd_fmt_conv.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9Android ID: A-118453553 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-03-01
CVE ID: CVE-2019-1991 State: PUBLISHED Published: 2019-02-28T17:00:00Z Last Updated: 2024-09-17T02:41:29.598Z Vendors: Android Products: Android Problem Types: Remote code execution Description: In btif_dm_data_copy of btif_core.cc, there is a possible out of bounds write due to a buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-110166268. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-02-01 - http://www.secur
Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-02-01 - http://www.securityfocus.com/bid/106946
CVE ID: CVE-2019-1992 State: PUBLISHED Published: 2019-02-28T17:00:00Z Last Updated: 2024-09-16T17:37:57.595Z Vendors: Android Products: Android Problem Types: Remote code execution Description: In bta_hl_sdp_query_results of bta_hl_main.cc, there is a possible use-after-free due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-116222069. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-02-01 - http://www.se
st Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-02-01 - http://www.securityfocus.com/bid/106946
CVE ID: CVE-2019-1993 State: PUBLISHED Published: 2019-02-28T17:00:00Z Last Updated: 2024-09-16T22:45:54.447Z Vendors: Android Products: Android Problem Types: Elevation of privilege Description: In register_app of btif_hd.cc, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-8.0 Android-8.1 Android-9. Android ID: A-119819889. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-02-01 - http://www.securityfocus.com/bid/106946
CVE ID: CVE-2019-1994 State: PUBLISHED Published: 2019-02-28T17:00:00Z Last Updated: 2024-09-17T00:36:18.392Z Vendors: Android Products: Android Problem Types: Elevation of privilege Description: In refresh of DevelopmentTiles.java, there is the possibility of leaving development settings accessible due to an insecure default value. This could lead to unwanted access to development settings, with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-8.0 Android-8.1 Android-9. Android ID: A-117770924. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-02-01 - h
tional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-02-01 - http://www.securityfocus.com/bid/106946
CVE ID: CVE-2019-1995 State: PUBLISHED Published: 2019-02-28T17:00:00Z Last Updated: 2024-09-16T23:20:42.094Z Vendors: Android Products: Android Problem Types: Information disclosure Description: In ComposeActivityEmail of ComposeActivityEmail.java, there is a possible way to silently attach files to an email due to a confused deputy. This could lead to local information disclosure, sending files accessible to AOSP Mail to a remote email recipient, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-32589229. Additional Analyst Note
droid-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-32589229. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-02-01 - http://www.securityfocus.com/bid/106946
CVE ID: CVE-2019-1996 State: PUBLISHED Published: 2019-02-28T17:00:00Z Last Updated: 2024-09-17T02:15:36.924Z Vendors: Android Products: Android Problem Types: Information disclosure Description: In avrc_pars_browse_rsp of avrc_pars_ct.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-8.0 Android-8.1 Android-9. Android ID: A-111451066. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-02-01 - http://www.securit
tes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-02-01 - http://www.securityfocus.com/bid/106946
CVE ID: CVE-2019-1997 State: PUBLISHED Published: 2019-02-28T17:00:00Z Last Updated: 2024-09-16T23:40:56.912Z Vendors: Android Products: Android Problem Types: Information disclosure Description: In random_get_bytes of random.c, there is a possible degradation of randomness due to an insecure default value. This could lead to local information disclosure via an insecure wireless connection with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-117508900. Additional Analyst Notes: - CVE Program Container: References: - https://source.and
Android-9. Android ID: A-117508900. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-02-01 - http://www.securityfocus.com/bid/106946
CVE ID: CVE-2019-1998 State: PUBLISHED Published: 2019-02-28T17:00:00Z Last Updated: 2024-09-17T00:07:01.556Z Vendors: Android Products: Android Problem Types: Denial of service Description: In event_handler of keymaster_app.c, there is possible resource exhaustion due to a table being lost on reboot. This could lead to local denial of service that is not fixed by a factory reset, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-116055338. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-02-01 - http://www.securityfocus.com/bid
gram Container: References: - https://source.android.com/security/bulletin/2019-02-01 - http://www.securityfocus.com/bid/106946
CVE ID: CVE-2019-1999 State: PUBLISHED Published: 2019-02-28T17:00:00Z Last Updated: 2024-09-17T03:17:33.855Z Vendors: Android Products: Android Problem Types: Elevation of privilege Description: In binder_alloc_free_page of binder_alloc.c, there is a possible double free due to improper locking. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-120025196. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106851 - https://source.android.com/security/bulletin/2019-02-01 - https://
ferences: - http://www.securityfocus.com/bid/106851 - https://source.android.com/security/bulletin/2019-02-01 - https://www.exploit-db.com/exploits/46357/ - https://usn.ubuntu.com/3979-1/ - https://www.debian.org/security/2019/dsa-4495 - https://seclists.org/bugtraq/2019/Aug/13