Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-6315 State: PUBLISHED Published: 2015-10-13T00:00:00 Last Updated: 2024-08-06T07:15:13.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Aironet 1850 access points with software 8.1(112.4) allow local users to gain privileges via crafted CLI commands, aka Bug ID CSCuv79694. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151005-aironet - http://www.securitytracker.com/id/1033746
CVE ID: CVE-2015-6316 State: PUBLISHED Published: 2015-11-06T11:00:00 Last Updated: 2024-08-06T07:15:13.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of sshd_config in Cisco Mobility Services Engine (MSE) through 8.0.120.7 allows logins by the oracle account, which makes it easier for remote attackers to obtain access by entering this account's hardcoded password in an SSH session, aka Bug ID CSCuv40501. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151104-mse-cred - http://www.securityfocus.com/bid/77432 - http://www.securitytracker.com/id/1034065
CVE ID: CVE-2015-6317 State: PUBLISHED Published: 2016-01-23T02:00:00 Last Updated: 2024-08-06T07:15:13.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Identity Services Engine (ISE) before 2.0 allows remote authenticated users to bypass intended web-resource access restrictions via a direct request, aka Bug ID CSCuu45926. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034767 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160113-ise2
CVE ID: CVE-2015-6318 State: PUBLISHED Published: 2015-10-12T10:00:00 Last Updated: 2024-08-06T07:15:13.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.1 and X8.5.2 allows local users to write to arbitrary files via an unspecified symlink attack, aka Bug ID CSCuv11969. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033781 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151007-vcs
CVE ID: CVE-2015-6319 State: PUBLISHED Published: 2016-01-27T22:00:00 Last Updated: 2024-08-06T07:15:13.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the web-based management interface on Cisco RV220W devices allows remote attackers to execute arbitrary SQL commands via a crafted header in an HTTP request, aka Bug ID CSCuv29574. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034830 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-rv220
CVE ID: CVE-2015-6320 State: PUBLISHED Published: 2016-01-15T02:00:00 Last Updated: 2024-08-06T07:15:13.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IP ingress packet handler on Cisco Aironet 1800 devices with software 8.1(112.3) and 8.1(112.4) allows remote attackers to cause a denial of service via a crafted header in an IP packet, aka Bug ID CSCuv63138. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160113-aironet - http://www.securitytracker.com/id/1034668
CVE ID: CVE-2015-6321 State: PUBLISHED Published: 2015-11-06T02:00:00 Last Updated: 2024-08-06T07:15:13.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco AsyncOS before 8.5.7-042, 9.x before 9.1.0-032, 9.1.x before 9.1.1-023, and 9.5.x and 9.6.x before 9.6.0-042 on Email Security Appliance (ESA) devices; before 9.1.0-032, 9.1.1 before 9.1.1-005, and 9.5.x before 9.5.0-025 on Content Security Management Appliance (SMA) devices; and before 7.7.0-725 and 8.x before 8.0.8-113 on Web Security Appliance (WSA) devices allows remote attackers to cause a denial of service (memory consumption) via a flood of TCP packets, aka Bug IDs CSCus79774, CSCus79777, and CSCzv95795. Additiona
f service (memory consumption) via a flood of TCP packets, aka Bug IDs CSCus79774, CSCus79777, and CSCzv95795. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151104-aos - http://www.securitytracker.com/id/1034060 - http://www.securitytracker.com/id/1034061
CVE ID: CVE-2015-6322 State: PUBLISHED Published: 2015-10-12T10:00:00 Last Updated: 2024-08-06T07:15:13.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IPC channel in Cisco AnyConnect Secure Mobility Client 2.0.0343 through 4.1(8) allows local users to bypass intended access restrictions and move arbitrary files by leveraging the lack of source-path validation, aka Bug ID CSCuv48563. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151008-asmc - http://www.securitytracker.com/id/1033785
CVE ID: CVE-2015-6323 State: PUBLISHED Published: 2016-01-15T02:00:00 Last Updated: 2024-08-06T07:15:13.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Admin portal in Cisco Identity Services Engine (ISE) 1.1.x, 1.2.0 before patch 17, 1.2.1 before patch 8, 1.3 before patch 5, and 1.4 before patch 4 allows remote attackers to obtain administrative access via unspecified vectors, aka Bug ID CSCuw34253. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160113-ise - http://www.securitytracker.com/id/1034666
CVE ID: CVE-2015-6324 State: PUBLISHED Published: 2015-10-25T01:00:00 Last Updated: 2024-08-06T07:15:13.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DHCPv6 relay implementation in Cisco Adaptive Security Appliance (ASA) software 9.0 before 9.0(4.37), 9.1 before 9.1(6.6), 9.2 before 9.2(4), 9.3 before 9.3(3.5), and 9.4 before 9.4(2) allows remote attackers to cause a denial of service (device reload) via crafted DHCPv6 packets, aka Bug IDs CSCus56252 and CSCus57142. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033912 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151021-asa-dhcp1
CVE ID: CVE-2015-6325 State: PUBLISHED Published: 2015-10-25T01:00:00 Last Updated: 2024-08-06T07:15:13.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Adaptive Security Appliance (ASA) software 7.2 and 8.2 before 8.2(5.58), 8.3 and 8.4 before 8.4(7.29), 8.5 through 8.7 before 8.7(1.17), 9.0 before 9.0(4.37), 9.1 before 9.1(6.4), 9.2 before 9.2(4), 9.3 before 9.3(3.1), and 9.4 before 9.4(1.1) allows remote attackers to cause a denial of service (device reload) via a crafted DNS response, aka Bug ID CSCut03495. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151021-asa-dns1 -
ntainer: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151021-asa-dns1 - http://www.securitytracker.com/id/1033913 - http://www.securityfocus.com/bid/77260
CVE ID: CVE-2015-6326 State: PUBLISHED Published: 2015-10-25T01:00:00 Last Updated: 2024-08-06T07:15:13.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Adaptive Security Appliance (ASA) software 7.2 and 8.2 before 8.2(5.58), 8.3 and 8.4 before 8.4(7.29), 8.5 through 8.7 before 8.7(1.17), 9.0 before 9.0(4.37), 9.1 before 9.1(6.6), 9.2 before 9.2(4), 9.3 before 9.3(3.5), and 9.4 before 9.4(1.5) allows remote attackers to cause a denial of service (device reload) via a crafted DNS response, aka Bug ID CSCuu07799. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151021-asa-dns2 -
ntainer: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151021-asa-dns2 - http://www.securitytracker.com/id/1034156
CVE ID: CVE-2015-6327 State: PUBLISHED Published: 2015-10-25T01:00:00 Last Updated: 2024-08-06T07:15:13.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IKEv1 implementation in Cisco Adaptive Security Appliance (ASA) software 7.2 and 8.2 before 8.2(5.58), 8.3 and 8.4 before 8.4(7.29), 8.5 through 8.7 before 8.7(1.17), 9.0 before 9.0(4.37), 9.1 before 9.1(6.8), 9.2 before 9.2(4), and 9.3 before 9.3(3) allows remote attackers to cause a denial of service (device reload) via crafted ISAKMP UDP packets, aka Bug ID CSCus94026. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033914 - http://tools.cisco.com/security/center/conte
rogram Container: References: - http://www.securitytracker.com/id/1033914 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151021-asa-ike
CVE ID: CVE-2015-6328 State: PUBLISHED Published: 2015-10-13T00:00:00 Last Updated: 2024-08-06T07:15:13.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web framework in Cisco Prime Collaboration Assurance (PCA) 10.5(1) allows remote authenticated users to bypass intended access restrictions and read arbitrary files via a crafted URL, aka Bug ID CSCus88380. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033784 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151008-pca
CVE ID: CVE-2015-6329 State: PUBLISHED Published: 2015-10-12T10:00:00 Last Updated: 2024-08-06T07:15:13.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Cisco Prime Collaboration Provisioning 10.6 and 11.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCut64074. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033783 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151008-pcp
CVE ID: CVE-2015-6330 State: PUBLISHED Published: 2015-11-18T11:00:00 Last Updated: 2024-08-06T07:15:13.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Cisco Prime Collaboration Assurance 10.5(1) and 10.6 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCus62712. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151008-pca1
CVE ID: CVE-2015-6331 State: PUBLISHED Published: 2015-10-12T10:00:00 Last Updated: 2024-08-06T07:15:13.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the web framework in Cisco Prime Collaboration Assurance 10.5(1) allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCus39887. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033782 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151008-pca2
CVE ID: CVE-2015-6332 State: PUBLISHED Published: 2015-10-13T00:00:00 Last Updated: 2024-08-06T07:15:13.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Prime Infrastructure 2.2 allows remote attackers to cause a denial of service (daemon hang) by sending many SSL renegotiation requests, aka Bug ID CSCuv56830. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151008-cpi - http://www.securitytracker.com/id/1033786
CVE ID: CVE-2015-6333 State: PUBLISHED Published: 2015-10-16T01:00:00 Last Updated: 2024-08-06T07:15:13.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Application Policy Infrastructure Controller (APIC) 1.1j allows local users to gain privileges via vectors involving addition of an SSH key, aka Bug ID CSCuw46076. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151012-apic - http://www.securitytracker.com/id/1033793
CVE ID: CVE-2015-6334 State: PUBLISHED Published: 2015-10-16T01:00:00 Last Updated: 2024-08-06T07:15:13.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco ASR 5000 and 5500 devices with software 18.0.0.57828 and 19.0.M0.61045 allow remote attackers to cause a denial of service (vpnmgr process restart) via a crafted header in a TACACS packet, aka Bug ID CSCuw01984. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033792 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151012-asr
CVE ID: CVE-2015-6335 State: PUBLISHED Published: 2015-10-25T01:00:00 Last Updated: 2024-08-06T07:15:13.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: The policy implementation in Cisco FireSIGHT Management Center 5.3.1.7, 5.4.0.4, and 6.0.0 for VMware allows remote authenticated administrators to bypass intended policy restrictions and execute Linux commands as root via unspecified vectors, aka Bug ID CSCuw12839. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033873 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151016-fmc
CVE ID: CVE-2015-6336 State: PUBLISHED Published: 2016-01-15T02:00:00 Last Updated: 2024-08-06T07:15:13.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Aironet 1800 devices with software 7.2, 7.3, 7.4, 8.1(112.3), 8.1(112.4), and 8.1(15.14) have a default account, which makes it easier for remote attackers to obtain access via unspecified vectors, aka Bug ID CSCuw58062. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160113-air - http://www.securitytracker.com/id/1034667
CVE ID: CVE-2015-6337 State: PUBLISHED Published: 2016-01-26T02:00:00 Last Updated: 2024-08-06T07:15:13.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.0.10 allows remote attackers to inject arbitrary web script or HTML via a crafted hostname in an SNMP response, aka Bug ID CSCuw47238. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160125-api - http://www.securitytracker.com/id/1034827
CVE ID: CVE-2015-6338 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6339 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6340 State: PUBLISHED Published: 2015-10-27T01:00:00 Last Updated: 2024-08-06T07:15:13.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Proxy Mobile IPv6 (PMIPv6) component in the CDMA implementation on Cisco ASR 5000 devices with software 19.0.M0.60737 allows remote attackers to cause a denial of service (hamgr process restart) via a crafted header in a PMIPv6 packet, aka Bug ID CSCuv63280. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151016-asrcdma - http://www.securitytracker.com/id/1033872
CVE ID: CVE-2015-6341 State: PUBLISHED Published: 2015-10-25T01:00:00 Last Updated: 2024-08-06T07:15:13.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web Management GUI on Cisco Wireless LAN Controller (WLC) devices with software 7.4(140.0) and 8.0(120.0) allows remote attackers to cause a denial of service (client disconnection) via unspecified vectors, aka Bug ID CSCuw10610. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151016-wlc - http://www.securitytracker.com/id/1033871
CVE ID: CVE-2015-6342 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6343 State: PUBLISHED Published: 2015-10-31T01:00:00 Last Updated: 2024-08-06T07:15:13.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SIP implementation in Cisco IOS 15.5(3)M on Cisco Unified Border Element (CUBE) devices allows remote attackers to cause a denial of service via crafted SIP messages, aka Bug ID CSCuv79202. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151026-cube
CVE ID: CVE-2015-6344 State: PUBLISHED Published: 2015-10-30T10:00:00 Last Updated: 2024-08-06T07:22:21.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web-based GUI in Cisco Adaptive Security Appliance (ASA) CX Context-Aware Security 9.3(4.1.11) allows remote authenticated users to bypass intended access restrictions and obtain sensitive user information via an unspecified HTTP request, aka Bug ID CSCuv74105. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034001 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151027-cas
CVE ID: CVE-2015-6345 State: PUBLISHED Published: 2015-10-30T10:00:00 Last Updated: 2024-08-06T07:22:21.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Solution Engine in Cisco Secure Access Control Server (ACS) 5.7(0.15) allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCuw24700. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033967 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151023-acs
CVE ID: CVE-2015-6346 State: PUBLISHED Published: 2015-10-30T10:00:00 Last Updated: 2024-08-06T07:22:20.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Cisco Secure Access Control Server (ACS) 5.7(0.15) allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151023-acs_xss - http://www.securitytracker.com/id/1033969
CVE ID: CVE-2015-6347 State: PUBLISHED Published: 2015-10-30T10:00:00 Last Updated: 2024-08-06T07:22:20.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Solution Engine in Cisco Secure Access Control Server (ACS) 5.7(0.15) allows remote authenticated users to bypass intended RBAC restrictions, and create a dashboard or portlet, by visiting an unspecified web page. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151023-acs_rbac - http://www.securitytracker.com/id/1033971
CVE ID: CVE-2015-6348 State: PUBLISHED Published: 2015-10-30T10:00:00 Last Updated: 2024-08-06T07:22:21.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: The report-generation web interface in the Solution Engine in Cisco Secure Access Control Server (ACS) 5.7(0.15) allows remote authenticated users to bypass intended RBAC restrictions, and read report or status information, by visiting an unspecified web page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033970 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151023-acs_rbac1
CVE ID: CVE-2015-6349 State: PUBLISHED Published: 2015-10-30T10:00:00 Last Updated: 2024-08-06T07:22:21.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the web interface in the Solution Engine in Cisco Secure Access Control Server (ACS) 5.7(0.15) allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151023-acs_xss1 - http://www.securitytracker.com/id/1033968
CVE ID: CVE-2015-6350 State: PUBLISHED Published: 2015-10-30T10:00:00 Last Updated: 2024-08-06T07:22:20.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the web framework in Cisco Prime Service Catalog 11.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuw50843. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151028-psc - http://www.securitytracker.com/id/1034023
CVE ID: CVE-2015-6351 State: PUBLISHED Published: 2015-10-30T10:00:00 Last Updated: 2024-08-06T07:22:20.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco ASR 5500 System Architecture Evolution (SAE) Gateway devices with software 19.1.0.61559 and 19.2.0 allow remote attackers to cause a denial of service (BGP process restart) via a crafted header in a BGP packet, aka Bug ID CSCuw65781. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034024 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151028-asr
CVE ID: CVE-2015-6352 State: PUBLISHED Published: 2015-10-30T10:00:00 Last Updated: 2024-08-06T07:22:20.728Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Unified Communications Domain Manager before 10.6(1) provides different error messages for pathname access attempts depending on whether the pathname exists, which allows remote attackers to map a filesystem via a series of requests, aka Bug ID CSCut67891. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034022 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151027-ucd - http://www.securityfocus.com/bid/77341
CVE ID: CVE-2015-6353 State: PUBLISHED Published: 2015-10-31T01:00:00 Last Updated: 2024-08-06T07:22:20.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Cisco FireSight Management Center (MC) 5.3.1.5 and 5.4.x through 5.4.1.3 allow remote authenticated users to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCuu28922. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151029-fsmc1 - http://www.securitytracker.com/id/1034040
CVE ID: CVE-2015-6354 State: PUBLISHED Published: 2015-10-31T01:00:00 Last Updated: 2024-08-06T07:22:21.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Cisco FireSight Management Center (MC) 5.4.1.3 and 6.0 allow remote authenticated users to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCuv73338. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151029-fsmc2 - http://www.securitytracker.com/id/1034041
CVE ID: CVE-2015-6355 State: PUBLISHED Published: 2015-11-04T02:00:00 Last Updated: 2024-08-06T07:22:20.808Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface in Cisco Unified Computing System (UCS) 2.2(5b)A on blade servers allows remote attackers to obtain potentially sensitive version information by visiting an unspecified URL, aka Bug ID CSCuw87226. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034042 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151102-ucs