Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
- https://0xdeadface.wordpress.com/2017/04/07/multiple-vulnerabilities-in-quest-privilege-manager-6-0-0-xx-cve-2017-6553-cve-2017-6554/ - http://packetstormsecurity.com/files/142095/Quest-Privilege-Manager-6.0.0-Arbitrary-File-Write.html - https://www.exploit-db.com/exploits/41861/
CVE ID: CVE-2017-6555 State: PUBLISHED Published: 2017-03-09T09:26:00 Last Updated: 2024-08-05T15:33:20.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in /admin/moduleinterface.php in CMS Made Simple 2.1.6 allows remote authenticated users to inject arbitrary web script or HTML via the m1_description parameter (aka "Design Manager > Categories > Category Description"). Additional Analyst Notes: - CVE Program Container: References: - http://www.daimacn.com/?id=7 - http://www.securityfocus.com/bid/96933
CVE ID: CVE-2017-6556 State: PUBLISHED Published: 2017-03-09T09:26:00 Last Updated: 2024-08-05T15:33:20.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in CMS Made Simple (CMSMS) 2.1.6 allows remote authenticated users to inject arbitrary web script or HTML via the "adminpage > sitesetting > General Settings > globalmetadata" field. Additional Analyst Notes: - CVE Program Container: References: - http://www.daimacn.com/?id=8 - http://www.securityfocus.com/bid/96933
CVE ID: CVE-2017-6557 State: PUBLISHED Published: 2017-05-05T10:00:00 Last Updated: 2024-08-05T15:33:19.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ArrayOS before AG 9.4.0.135, when the portal bookmark function is enabled, allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/amaciasf/array/blob/master/ArrayOS_AG_9_4_0_135_Release_Note.pdf
CVE ID: CVE-2017-6558 State: PUBLISHED Published: 2017-03-09T09:26:00 Last Updated: 2024-08-05T15:33:20.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: iball Baton 150M iB-WRA150N v1 00000001 1.2.6 build 110401 Rel.47776n devices are prone to an authentication bypass vulnerability that allows remote attackers to view and modify administrative router settings by reading the HTML source code of the password.cgi file. Additional Analyst Notes: - CVE Program Container: References: - https://www.youtube.com/watch?v=8GZg1IuSfCs - http://www.securityfocus.com/bid/96822
CVE ID: CVE-2017-6559 State: PUBLISHED Published: 2017-03-09T09:26:00 Last Updated: 2024-08-05T15:33:20.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS in Agora-Project 3.2.2 exists with an index.php?disconnect=1&msgNotif[]=[XSS] attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96940 - https://packetstormsecurity.com/files/141507/Agora-Project-3.2.2-Cross-Site-Scripting.html
CVE ID: CVE-2017-6560 State: PUBLISHED Published: 2017-03-09T09:26:00 Last Updated: 2024-08-05T15:33:20.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=misc&action=[XSS]&editObjId=[XSS] attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96940 - https://packetstormsecurity.com/files/141507/Agora-Project-3.2.2-Cross-Site-Scripting.html
CVE ID: CVE-2017-6561 State: PUBLISHED Published: 2017-03-09T09:26:00 Last Updated: 2024-08-05T15:33:20.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=object&action=[XSS] attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96940 - https://packetstormsecurity.com/files/141507/Agora-Project-3.2.2-Cross-Site-Scripting.html
CVE ID: CVE-2017-6562 State: PUBLISHED Published: 2017-03-09T09:26:00 Last Updated: 2024-08-05T15:33:20.097Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=file&targetObjId=fileFolder-2&targetObjIdChild=[XSS] attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96940 - https://packetstormsecurity.com/files/141507/Agora-Project-3.2.2-Cross-Site-Scripting.html
CVE ID: CVE-2017-6564 State: PUBLISHED Published: 2017-05-01T19:00:00 Last Updated: 2024-08-05T15:33:20.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: On Franklin Fueling Systems TS-550 evo 2.3.0.7332 devices, the Guest user, which contains the lowest privileges, can post to the idSourceFileName parameter found within the /download directory. This ability allows for an attacker to download sensitive system files from the host machine such as databases which contain information that can aid in further attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.u235.io/single-post/2017/05/01/Penetrating-Fuel-Management-Systems - https://gist.github.com
r: References: - http://www.u235.io/single-post/2017/05/01/Penetrating-Fuel-Management-Systems - https://gist.github.com/Stick-U235/b187931f828e92866d09b9bdeb956ca2
CVE ID: CVE-2017-6565 State: PUBLISHED Published: 2017-05-01T19:00:00 Last Updated: 2024-08-05T15:33:20.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: On Franklin Fueling Systems TS-550 evo 2.3.0.7332 devices, the roleDiag user, which can be obtained by exploiting CVE-2013-7247, has the ability to upload files to the server hosting the web service. As no sanitization checks are in place, an attacker can upload a malicious payload. Additional Analyst Notes: - CVE Program Container: References: - http://www.u235.io/single-post/2017/05/01/Penetrating-Fuel-Management-Systems - https://gist.github.com/Stick-U235/b187931f828e92866d09b9bdeb956ca2
CVE ID: CVE-2017-6570 State: PUBLISHED Published: 2017-03-09T09:26:00 Last Updated: 2024-08-05T15:33:20.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects ./inc/campaign/view-campaign-list.php with the GET Parameter: id. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96783 - https://github.com/hamkovic/Mail-Masta-Wordpress-Plugin
CVE ID: CVE-2017-6571 State: PUBLISHED Published: 2017-03-09T09:26:00 Last Updated: 2024-08-05T15:33:20.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects ./inc/campaign/view-campaign.php with the GET Parameter: id. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96783 - https://github.com/hamkovic/Mail-Masta-Wordpress-Plugin
CVE ID: CVE-2017-6572 State: PUBLISHED Published: 2017-03-09T09:26:00 Last Updated: 2024-08-05T15:33:20.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects ./inc/lists/add_member.php with the GET Parameter: filter_list. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96783 - https://github.com/hamkovic/Mail-Masta-Wordpress-Plugin
CVE ID: CVE-2017-6573 State: PUBLISHED Published: 2017-03-09T09:26:00 Last Updated: 2024-08-05T15:33:20.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects ./inc/lists/edit-list.php with the GET Parameter: id. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96783 - https://github.com/hamkovic/Mail-Masta-Wordpress-Plugin
CVE ID: CVE-2017-6574 State: PUBLISHED Published: 2017-03-09T09:26:00 Last Updated: 2024-08-05T15:33:20.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects ./inc/lists/edit_member.php with the GET Parameter: filter_list. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96783 - https://github.com/hamkovic/Mail-Masta-Wordpress-Plugin
CVE ID: CVE-2017-6575 State: PUBLISHED Published: 2017-03-09T09:26:00 Last Updated: 2024-08-05T15:33:20.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects ./inc/lists/edit_member.php with the GET Parameter: member_id. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96783 - https://github.com/hamkovic/Mail-Masta-Wordpress-Plugin
CVE ID: CVE-2017-6576 State: PUBLISHED Published: 2017-03-09T09:26:00 Last Updated: 2024-08-05T15:33:20.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects ./inc/campaign/campaign-delete.php with the GET Parameter: id. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96783 - https://github.com/hamkovic/Mail-Masta-Wordpress-Plugin
CVE ID: CVE-2017-6577 State: PUBLISHED Published: 2017-03-09T09:26:00 Last Updated: 2024-08-05T15:33:20.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects ./inc/subscriber_list.php with the POST Parameter: list_id. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96783 - https://github.com/hamkovic/Mail-Masta-Wordpress-Plugin
CVE ID: CVE-2017-6578 State: PUBLISHED Published: 2017-03-09T09:26:00 Last Updated: 2024-08-05T15:33:20.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects ./inc/subscriber_list.php with the POST Parameter: subscriber_email. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96783 - https://github.com/hamkovic/Mail-Masta-Wordpress-Plugin
CVE ID: CVE-2017-6589 State: PUBLISHED Published: 2017-03-09T19:00:00 Last Updated: 2024-08-05T15:33:20.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: EpicEditor through 0.2.3 has Cross-Site Scripting because of an insecure default marked.js configuration. An example attack vector is a crafted IMG element in an HTML document. Additional Analyst Notes: - CVE Program Container: References: - https://bad.code.blog/2017/03/09/epiceditor-cross-site-scripting/
CVE ID: CVE-2017-6590 State: PUBLISHED Published: 2017-03-09T19:00:00 Last Updated: 2024-08-05T15:33:20.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in network-manager-applet (aka network-manager-gnome) in Ubuntu 12.04 LTS, 14.04 LTS, 16.04 LTS, and 16.10. A local attacker could use this issue at the default Ubuntu login screen to access local files and execute arbitrary commands as the lightdm user. The exploitation requires physical access to the locked computer and the Wi-Fi must be turned on. An access point that lets you use a certificate to login is required as well, but it's easy to create one. Then, it's possible to open a nautilus window an
certificate to login is required as well, but it's easy to create one. Then, it's possible to open a nautilus window and browse directories. One also can open some applications such as Firefox, which is useful for downloading malicious binaries. Additional Analyst Notes: - CVE Program Container: References: - https://www.ubuntu.com/usn/usn-3217-1/ - https://security.gentoo.org/glsa/201707-09 - https://bugs.launchpad.net/ubuntu/+source/network-manager-applet/+bug/1668321 - https://www.youtube.com/watch?v=Fp2lwRVg0l0 - http://www.securitytracker.com/id/1037977
CVE ID: CVE-2017-6591 State: PUBLISHED Published: 2017-03-09T20:00:00 Last Updated: 2024-08-05T15:33:20.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a cross-site scripting vulnerability in django-epiceditor 0.2.3 via crafted content in a form field. Additional Analyst Notes: - CVE Program Container: References: - http://morningchen.com/2017/03/09/Cross-site-scripting-vulnerability-in-django-epiceditor/ - http://www.securityfocus.com/bid/96946
CVE ID: CVE-2017-6594 State: PUBLISHED Published: 2017-08-28T19:00:00 Last Updated: 2024-08-05T15:33:20.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: The transit path validation code in Heimdal before 7.3 might allow attackers to bypass the capath policy protection mechanism by leveraging failure to add the previous hop realm to the transit path of issued tickets. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/heimdal/heimdal/releases/tag/heimdal-7.3.0 - http://lists.opensuse.org/opensuse-updates/2017-08/msg00062.html - http://www.h5l.org/advisories.html?show=2017-04-13 - https://github.com/heimdal/heimdal/commit/b1e699103f08d6a0ca46a122
http://www.h5l.org/advisories.html?show=2017-04-13 - https://github.com/heimdal/heimdal/commit/b1e699103f08d6a0ca46a122193c9da65f6cf837
CVE ID: CVE-2017-6596 State: PUBLISHED Published: 2017-03-10T10:29:00 Last Updated: 2024-08-05T15:33:20.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: partclone.chkimg in partclone 0.2.89 is prone to a heap-based buffer overflow vulnerability due to insufficient validation of the partclone image header. An attacker may be able to launch a 'Denial of Service attack' in the context of the user running the affected application. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/insidej/Partclone_HeapOverFlow/blob/master/README.md
CVE ID: CVE-2017-6597 State: PUBLISHED Published: 2017-04-07T17:00:00 Last Updated: 2024-08-05T15:33:20.456Z Vendors: n/a Products: Cisco UCS Manager, Cisco Firepower 4100 Series NGFW, and Cisco Firepower 9300 Security Appliance Problem Types: Command Injection Vulnerability Description: A vulnerability in the local-mgmt CLI command of the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to perform a command injection attack. More Information: CSCvb61394 CSCvb86816. Known Affected Releases: 2.0(1.68) 3.1(1k)A. Known Fixed Releases: 92.2(1.101) 92.
e Information: CSCvb61394 CSCvb86816. Known Affected Releases: 2.0(1.68) 3.1(1k)A. Known Fixed Releases: 92.2(1.101) 92.1(1.1658) 2.0(1.115). Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038195 - http://www.securityfocus.com/bid/97476 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-cli
CVE ID: CVE-2017-6598 State: PUBLISHED Published: 2017-04-07T17:00:00 Last Updated: 2024-08-05T15:33:20.433Z Vendors: n/a Products: Cisco UCS Manager, Cisco Firepower 4100 Series NGFW, and Cisco Firepower 9300 Security Appliance Problem Types: Privilege Escalation Vulnerability Description: A vulnerability in the debug plug-in functionality of the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to execute arbitrary commands, aka Privilege Escalation. More Information: CSCvb86725 CSCvb86797. Known Affected Releases: 2.0(1.68) 3.1(1k)A. Known Fixed
Privilege Escalation. More Information: CSCvb86725 CSCvb86797. Known Affected Releases: 2.0(1.68) 3.1(1k)A. Known Fixed Releases: 92.2(1.105) 92.1(1.1733) 2.1(1.69). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97429 - http://www.securitytracker.com/id/1038198 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-ucs
CVE ID: CVE-2017-6599 State: PUBLISHED Published: 2017-04-07T17:00:00 Last Updated: 2024-08-05T15:33:20.424Z Vendors: n/a Products: Cisco IOS XR Software Problem Types: Denial of Service Vulnerability Description: A vulnerability in Google-defined remote procedure call (gRPC) handling in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause the Event Management Service daemon (emsd) to crash due to a system memory leak, resulting in a denial of service (DoS) condition. This vulnerability affects Cisco IOS XR Software with gRPC enabled. More Information: CSCvb14433. Known Affected Releases: 6.1.1.BASE 6.2.1.BASE. Known Fixed Releases: 6.2.1.22i.MGBL 6.1.22.9i.MGBL 6.1
ion: CSCvb14433. Known Affected Releases: 6.1.1.BASE 6.2.1.BASE. Known Fixed Releases: 6.2.1.22i.MGBL 6.1.22.9i.MGBL 6.1.21.12i.MGBL 6.1.2.13i.MGBL. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-ios - http://www.securitytracker.com/id/1038191 - http://www.securityfocus.com/bid/97464
CVE ID: CVE-2017-6600 State: PUBLISHED Published: 2017-04-07T17:00:00 Last Updated: 2024-08-05T15:33:20.444Z Vendors: n/a Products: Cisco UCS Manager, Cisco Firepower 4100 Series NGFW, and Cisco Firepower 9300 Security Appliance Problem Types: Command Injection Vulnerability Description: A vulnerability in the CLI of the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to perform a command injection attack. More Information: CSCvb61351 CSCvb61637. Known Affected Releases: 2.0(1.68) 3.1(1k)A. Known Fixed Releases: 92.2(1.101) 92.1(1.1645) 2.0(1.82)
b61351 CSCvb61637. Known Affected Releases: 2.0(1.68) 3.1(1k)A. Known Fixed Releases: 92.2(1.101) 92.1(1.1645) 2.0(1.82) 1.1(4.136. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038199 - http://www.securityfocus.com/bid/97439 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-ucs1
CVE ID: CVE-2017-6601 State: PUBLISHED Published: 2017-04-07T17:00:00 Last Updated: 2024-08-05T15:33:20.428Z Vendors: n/a Products: Cisco UCS Manager, Cisco Firepower 4100 Series NGFW, and Cisco Firepower 9300 Security Appliance Problem Types: Command Injection Vulnerability Description: A vulnerability in the CLI of the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to perform a command injection attack. More Information: CSCvb61384 CSCvb86764. Known Affected Releases: 2.0(1.68) 3.1(1k)A. Known Fixed Releases: 92.2(1.101) 92.1(1.1647). Addition
b61384 CSCvb86764. Known Affected Releases: 2.0(1.68) 3.1(1k)A. Known Fixed Releases: 92.2(1.101) 92.1(1.1647). Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038196 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-cli1 - http://www.securityfocus.com/bid/97477
CVE ID: CVE-2017-6602 State: PUBLISHED Published: 2017-04-07T17:00:00 Last Updated: 2024-08-05T15:33:20.432Z Vendors: n/a Products: Cisco UCS Manager, Cisco Firepower 4100 Series NGFW, and Cisco Firepower 9300 Security Appliance Problem Types: Command Injection Vulnerability Description: A vulnerability in the CLI of Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to perform a command injection attack. More Information: CSCvb66189 CSCvb86775. Known Affected Releases: 2.0(1.68) 3.1(1k)A. Known Fixed Releases: 92.2(1.101) 92.1(1.1742) 92.1(1.1658)
89 CSCvb86775. Known Affected Releases: 2.0(1.68) 3.1(1k)A. Known Fixed Releases: 92.2(1.101) 92.1(1.1742) 92.1(1.1658) 2.1(1.38) 2.0(1.107) 2.0(1.87) 1.1(4.148) 1.1(4.138). Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038197 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-cli2 - http://www.securityfocus.com/bid/97472
CVE ID: CVE-2017-6603 State: PUBLISHED Published: 2017-04-07T17:00:00 Last Updated: 2024-08-05T15:33:20.450Z Vendors: n/a Products: Cisco ASR 903 and ASR 920 Series Devices Problem Types: Denial of Service Vulnerability Description: A vulnerability in Cisco ASR 903 or ASR 920 Series Devices running with an RSP2 card could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on a targeted system because of incorrect IPv6 Packet Processing. More Information: CSCuy94366. Known Affected Releases: 15.4(3)S3.15. Known Fixed Releases: 15.6(2)SP 15.6(1.31)SP. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/c
15.6(1.31)SP. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-asr - http://www.securitytracker.com/id/1038185 - http://www.securityfocus.com/bid/97450
CVE ID: CVE-2017-6604 State: PUBLISHED Published: 2017-04-07T17:00:00 Last Updated: 2024-08-05T15:33:20.437Z Vendors: n/a Products: Cisco Integrated Management Controller Problem Types: Redirection Vulnerability Description: A vulnerability in the web interface of Cisco Integrated Management Controller (IMC) Software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability affects the following Cisco products running Cisco IMC Software: Unified Computing System (UCS) B-Series M3 and M4 Blade Servers, Unified Computing System (UCS) C-Series M3 and M4 Rack Servers. More Information: CSCvc37931. Known Affected Releases: 3.1(2c)B. Additional
stem (UCS) C-Series M3 and M4 Rack Servers. More Information: CSCvc37931. Known Affected Releases: 3.1(2c)B. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97457 - http://www.securitytracker.com/id/1038186 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-cimc
CVE ID: CVE-2017-6605 State: PUBLISHED Published: 2017-07-04T00:00:00 Last Updated: 2024-08-05T15:33:20.446Z Vendors: n/a Products: Cisco Identity Services Engine Problem Types: Reflected Cross-Site Scripting Vulnerability Description: A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct a reflective cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. More Information: CSCvc85415. Known Affected Releases: 2.1(0.800). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99207 - https://tools.cis
itional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99207 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-ise1 - http://www.securitytracker.com/id/1038740