Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-2097 State: PUBLISHED Published: 2014-03-02T02:00:00 Last Updated: 2024-08-06T10:05:59.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: The tak_decode_frame function in libavcodec/takdec.c in FFmpeg before 2.1.4 does not properly validate a certain bits-per-sample value, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted TAK (aka Tom's lossless Audio Kompressor) data. Additional Analyst Notes: - CVE Program Container: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=f58eab151214d2d35ff0973f2b3e51c5eb372da4 - https://security.gentoo.org/glsa/201603-06
CVE ID: CVE-2014-2098 State: PUBLISHED Published: 2014-03-02T02:00:00 Last Updated: 2024-08-06T10:05:59.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: libavcodec/wmalosslessdec.c in FFmpeg before 2.1.4 uses an incorrect data-structure size for certain coefficients, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted WMA data. Additional Analyst Notes: - CVE Program Container: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=ec9578d54d09b64bf112c2bf7a34b1ef3b93dbd3 - https://security.gentoo.org/glsa/201603-06
CVE ID: CVE-2014-2099 State: PUBLISHED Published: 2014-03-02T02:00:00 Last Updated: 2024-08-06T10:05:59.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: The msrle_decode_frame function in libavcodec/msrle.c in FFmpeg before 2.1.4 does not properly calculate line sizes, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted Microsoft RLE video data. Additional Analyst Notes: - CVE Program Container: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=c919e1ca2ecfc47d796382973ba0e48b8f6f92a2
CVE ID: CVE-2014-2102 State: PUBLISHED Published: 2014-02-27T01:00:00 Last Updated: 2024-08-06T10:05:57.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Unified Contact Center Express (Unified CCX) does not properly restrict the content of the CCMConfig page, which allows remote authenticated users to obtain sensitive information by examining this content, aka Bug ID CSCum95575. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029842 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2102
CVE ID: CVE-2014-2103 State: PUBLISHED Published: 2014-02-27T20:00:00 Last Updated: 2024-08-06T10:05:57.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Intrusion Prevention System (IPS) Software allows remote attackers to cause a denial of service (MainApp process outage) via malformed SNMP packets, aka Bug IDs CSCum52355 and CSCul49309. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2103
CVE ID: CVE-2014-2104 State: PUBLISHED Published: 2014-03-02T02:00:00 Last Updated: 2024-08-06T10:05:59.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Business Voice Services Manager (BVSM) page in Cisco Unified Communications Domain Manager 9.0(.1) allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug IDs CSCum78536, CSCum78526, CSCum69809, and CSCum63113. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2104 - http://www.securityfocus.com/bid/65869 - http://tools.cisco.com/security
ter/content/CiscoSecurityNotice/CVE-2014-2104 - http://www.securityfocus.com/bid/65869 - http://tools.cisco.com/security/center/viewAlert.x?alertId=33111
CVE ID: CVE-2014-2106 State: PUBLISHED Published: 2014-03-27T21:00:00 Last Updated: 2024-08-06T10:05:59.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 15.3M before 15.3(3)M2 and IOS XE 3.10.xS before 3.10.2S allow remote attackers to cause a denial of service (device reload) via crafted SIP messages, aka Bug ID CSCug45898. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140326-sip
CVE ID: CVE-2014-2107 State: PUBLISHED Published: 2014-03-27T21:00:00 Last Updated: 2024-08-06T10:05:59.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 12.2 and 15.0 through 15.3, when used with the Kailash FPGA before 2.6 on RSP720-3C-10GE and RSP720-3CXL-10GE devices, allows remote attackers to cause a denial of service (route switch processor outage) via crafted IP packets, aka Bug ID CSCug84789. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140326-RSP72010GE
CVE ID: CVE-2014-2108 State: PUBLISHED Published: 2014-03-27T21:00:00 Last Updated: 2024-08-06T10:05:59.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 12.2 and 15.0 through 15.3 and IOS XE 3.2 through 3.7 before 3.7.5S and 3.8 through 3.10 before 3.10.1S allow remote attackers to cause a denial of service (device reload) via a malformed IKEv2 packet, aka Bug ID CSCui88426. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140326-ikev2
CVE ID: CVE-2014-2109 State: PUBLISHED Published: 2014-03-27T21:00:00 Last Updated: 2024-08-06T10:05:59.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TCP Input module in Cisco IOS 12.2 through 12.4 and 15.0 through 15.4, when NAT is used, allows remote attackers to cause a denial of service (memory consumption or device reload) via crafted TCP packets, aka Bug IDs CSCuh33843 and CSCuj41494. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140326-nat - http://www.securityfocus.com/bid/66470
CVE ID: CVE-2014-2111 State: PUBLISHED Published: 2014-03-27T21:00:00 Last Updated: 2024-08-06T10:05:59.731Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Application Layer Gateway (ALG) module in Cisco IOS 12.2 through 12.4 and 15.0 through 15.4, when NAT is used, allows remote attackers to cause a denial of service (device reload) via crafted DNS packets, aka Bug ID CSCue00996. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140326-nat - http://www.securityfocus.com/bid/66470
CVE ID: CVE-2014-2112 State: PUBLISHED Published: 2014-03-27T21:00:00 Last Updated: 2024-08-06T10:05:59.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SSL VPN (aka WebVPN) feature in Cisco IOS 15.1 through 15.4 allows remote attackers to cause a denial of service (memory consumption) via crafted HTTP requests, aka Bug ID CSCuf51357. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140326-ios-sslvpn - http://www.securityfocus.com/bid/66462
CVE ID: CVE-2014-2113 State: PUBLISHED Published: 2014-03-27T21:00:00 Last Updated: 2024-08-06T10:05:59.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 15.1 through 15.3 and IOS XE 3.3 and 3.5 before 3.5.2E; 3.7 before 3.7.5S; and 3.8, 3.9, and 3.10 before 3.10.2S allow remote attackers to cause a denial of service (I/O memory consumption and device reload) via a malformed IPv6 packet, aka Bug ID CSCui59540. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/66467 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140326-ipv6
CVE ID: CVE-2014-2114 State: PUBLISHED Published: 2014-04-04T15:00:00 Last Updated: 2024-08-06T10:05:59.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in UserServlet in Cisco Emergency Responder (ER) 8.6 and earlier allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCun24384. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2114 - http://www.securitytracker.com/id/1030019 - http://www.securityfocus.com/bid/66635 - http://tools.cisco.com/security/center/viewAlert.x?alertId=33644
CVE ID: CVE-2014-2115 State: PUBLISHED Published: 2014-04-04T15:00:00 Last Updated: 2024-08-06T10:06:00.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in CERUserServlet pages in Cisco Emergency Responder (ER) 8.6 and earlier allow remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCun24250. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2115 - http://www.securitytracker.com/id/1030019 - http://tools.cisco.com/security/center/viewAlert.x?alertId=33643 - http://www.securityfocus.com/bid/66631
CVE ID: CVE-2014-2116 State: PUBLISHED Published: 2014-04-04T15:00:00 Last Updated: 2024-08-06T10:06:00.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Emergency Responder (ER) 8.6 and earlier allows remote attackers to inject web pages and modify dynamic content via unspecified parameters, aka Bug ID CSCun37882. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/66632 - http://tools.cisco.com/security/center/viewAlert.x?alertId=33641 - http://www.securitytracker.com/id/1030019 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2116
CVE ID: CVE-2014-2117 State: PUBLISHED Published: 2014-04-04T15:00:00 Last Updated: 2024-08-06T10:05:59.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple open redirect vulnerabilities in Cisco Emergency Responder (ER) 8.6 and earlier allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified parameters, aka Bug ID CSCun37909. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=33642 - http://www.securitytracker.com/id/1030019 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2117 - http://www.securityfocus.com/bid/66634
CVE ID: CVE-2014-2118 State: PUBLISHED Published: 2014-03-27T21:00:00 Last Updated: 2024-08-06T10:06:00.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in dashboard-related HTML documents in Cisco Prime Security Manager (aka PRSM) 9.2(.1-2) and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCun50687. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/66488 - http://tools.cisco.com/security/center/viewAlert.x?alertId=33542 - http://www.securitytracker.com/id/1029968 - http://tools.cisco.com/security/center/content/Ci
iewAlert.x?alertId=33542 - http://www.securitytracker.com/id/1029968 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2118
CVE ID: CVE-2014-2119 State: PUBLISHED Published: 2014-03-20T20:00:00 Last Updated: 2024-08-06T10:05:59.702Z Vendors: n/a Products: n/a Problem Types: n/a Description: The End User Safelist/Blocklist (aka SLBL) service in Cisco AsyncOS Software for Email Security Appliance (ESA) before 7.6.3-023 and 8.x before 8.0.1-023 and Cisco Content Security Management Appliance (SMA) before 7.9.1-110 and 8.x before 8.1.1-013 allows remote authenticated users to execute arbitrary code with root privileges via an FTP session that uploads a modified SLBL database file, aka Bug IDs CSCug79377 and CSCug80118. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/ce
9377 and CSCug80118. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140319-asyncos
CVE ID: CVE-2014-2120 State: PUBLISHED Published: 2014-03-19T01:00:00.000Z Last Updated: 2025-10-22T00:05:38.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the WebVPN login page in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCun19025. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securitytracker.com/id/1029935 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2120 - http://www.securityfocus.com/bid/66290
CVE ID: CVE-2014-2121 State: PUBLISHED Published: 2014-03-19T01:00:00 Last Updated: 2024-08-06T10:05:59.786Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Java-based software in Cisco Hosted Collaboration Solution (HCS) allows remote attackers to cause a denial of service (closing of TCP ports) via unspecified vectors, aka Bug IDs CSCug77633, CSCug77667, CSCug78266, CSCug82795, and CSCuh58643. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2121 - http://www.securityfocus.com/bid/66283 - http://www.securitytracker.com/id/1029933
CVE ID: CVE-2014-2122 State: PUBLISHED Published: 2014-03-19T01:00:00 Last Updated: 2024-08-06T10:05:59.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the GUI in the Impact server in Cisco Hosted Collaboration Solution (HCS) allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors, aka Bug ID CSCub58999. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/91907 - http://www.securityfocus.com/bid/66293 - http://www.securitytracker.com/id/1029936 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2122
CVE ID: CVE-2014-2124 State: PUBLISHED Published: 2014-03-20T20:00:00 Last Updated: 2024-08-06T10:05:59.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 15.1(2)SY3 and earlier, when used with Supervisor Engine 2T (aka Sup2T) on Catalyst 6500 devices, allows remote attackers to cause a denial of service (device crash) via crafted multicast packets, aka Bug ID CSCuf60783. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=33413 - http://www.securitytracker.com/id/1029942 - http://www.securityfocus.com/bid/66301 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2124 - ht
/www.securityfocus.com/bid/66301 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2124 - http://secunia.com/advisories/57515 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91904
CVE ID: CVE-2014-2125 State: PUBLISHED Published: 2014-04-02T01:00:00 Last Updated: 2024-08-06T10:05:59.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Web Inbox in Cisco Unity Connection 8.6(2a)SU3 and earlier allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCui33028. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029988 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2125 - http://tools.cisco.com/security/center/viewAlert.x?alertId=33603
CVE ID: CVE-2014-2126 State: PUBLISHED Published: 2014-04-10T01:00:00 Last Updated: 2024-08-06T10:05:59.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Adaptive Security Appliance (ASA) Software 8.2 before 8.2(5.47), 8.4 before 8.4(7.5), 8.7 before 8.7(1.11), 9.0 before 9.0(3.10), and 9.1 before 9.1(3.4) allows remote authenticated users to gain privileges by leveraging level-0 ASDM access, aka Bug ID CSCuj33496. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140409-asa
CVE ID: CVE-2014-2127 State: PUBLISHED Published: 2014-04-10T01:00:00 Last Updated: 2024-08-06T10:05:59.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Adaptive Security Appliance (ASA) Software 8.x before 8.2(5.48), 8.3 before 8.3(2.40), 8.4 before 8.4(7.9), 8.6 before 8.6(1.13), 9.0 before 9.0(4.1), and 9.1 before 9.1(4.3) does not properly process management-session information during privilege validation for SSL VPN portal connections, which allows remote authenticated users to gain privileges by establishing a Clientless SSL VPN session and entering crafted URLs, aka Bug ID CSCul70099. Additional Analyst Notes: - CVE Program Container: References: - http://tools.ci
ng crafted URLs, aka Bug ID CSCul70099. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140409-asa
CVE ID: CVE-2014-2128 State: PUBLISHED Published: 2014-04-10T01:00:00 Last Updated: 2024-08-06T10:06:00.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SSL VPN implementation in Cisco Adaptive Security Appliance (ASA) Software 8.2 before 8.2(5.47, 8.3 before 8.3(2.40), 8.4 before 8.4(7.3), 8.6 before 8.6(1.13), 9.0 before 9.0(3.8), and 9.1 before 9.1(3.2) allows remote attackers to bypass authentication via (1) a crafted cookie value within modified HTTP POST data or (2) a crafted URL, aka Bug ID CSCua85555. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140409-asa
CVE ID: CVE-2014-2129 State: PUBLISHED Published: 2014-04-10T01:00:00 Last Updated: 2024-08-06T10:05:59.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SIP inspection engine in Cisco Adaptive Security Appliance (ASA) Software 8.2 before 8.2(5.48), 8.4 before 8.4(6.5), 9.0 before 9.0(3.1), and 9.1 before 9.1(2.5) allows remote attackers to cause a denial of service (memory consumption or device reload) via crafted SIP packets, aka Bug ID CSCuh44052. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140409-asa
CVE ID: CVE-2014-2130 State: PUBLISHED Published: 2015-03-06T02:00:00 Last Updated: 2024-08-06T10:05:59.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Secure Access Control Server (ACS) provides an unintentional administration web interface based on Apache Tomcat, which allows remote authenticated users to modify application files and configuration files, and consequently execute arbitrary code, by leveraging administrative privileges, aka Bug ID CSCuj83189. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031844 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2130
CVE ID: CVE-2014-2131 State: PUBLISHED Published: 2014-03-29T01:00:00 Last Updated: 2024-08-06T10:05:59.755Z Vendors: n/a Products: n/a Problem Types: n/a Description: The packet driver in Cisco IOS allows remote attackers to cause a denial of service (device reload) via a series of (1) Virtual Switching Systems (VSS) or (2) Bidirectional Forwarding Detection (BFD) packets, aka Bug IDs CSCug41049 and CSCue61890. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2131
CVE ID: CVE-2014-2132 State: PUBLISHED Published: 2014-05-08T10:00:00 Last Updated: 2024-08-06T10:05:59.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco WebEx Recording Format (WRF) player and Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allow remote attackers to cause a denial of service (application crash) via a crafted (1) .wrf or (2) .arf file that triggers a buffer over-read, aka Bug ID CSCuh52768. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140507-webex
CVE ID: CVE-2014-2133 State: PUBLISHED Published: 2014-05-08T10:00:00 Last Updated: 2024-08-06T10:05:59.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Cisco Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted .arf file that triggers improper LZW decompression, aka Bug ID CSCuj87565. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140507-webex
CVE ID: CVE-2014-2134 State: PUBLISHED Published: 2014-05-08T10:00:00 Last Updated: 2024-08-06T10:05:59.707Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Cisco WebEx Recording Format (WRF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted audio channel in a .wrf file, aka Bug ID CSCuc39458. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140507-webex
CVE ID: CVE-2014-2135 State: PUBLISHED Published: 2014-05-08T10:00:00 Last Updated: 2024-08-06T10:06:00.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Cisco Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted .arf file, aka Bug IDs CSCul87216 and CSCuj07603. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140507-webex
CVE ID: CVE-2014-2136 State: PUBLISHED Published: 2014-05-08T10:00:00 Last Updated: 2024-08-06T10:05:59.749Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Cisco Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted .arf file, aka Bug IDs CSCui72223, CSCul01163, and CSCul01166. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140507-webex
CVE ID: CVE-2014-2137 State: PUBLISHED Published: 2014-04-02T01:00:00 Last Updated: 2024-08-06T10:05:59.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in the web framework in Cisco Web Security Appliance (WSA) 7.7 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct redirection attacks via a crafted URL, aka Bug ID CSCuj61002. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=33608 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2137