Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ility is due to improper handling of XML External Entity (XXE) entries when parsing an XML file. An attacker could exploit this vulnerability by convincing the administrator of an affected system to import a crafted XML file with malicious entries which could allow the attacker to read and write files and execute remote code within the application, aka XML Injection. Cisco Prime Infrastructure software releases 1.1 through 3.1.6 are vulnerable. Cisco EPNM software releases 1.2, 2.0, and 2.1 are vulnerable. Cisco Bug IDs: CSCvc23894 CSCvc49561. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-201706
E Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-piepnm1 - http://www.securitytracker.com/id/1038750 - http://www.securityfocus.com/bid/99194
CVE ID: CVE-2017-6663 State: PUBLISHED Published: 2017-08-07T06:00:00.000Z Last Updated: 2025-10-21T23:55:36.078Z Vendors: n/a Products: Cisco IOS and IOS XE Problem Types: Denial of Service Vulnerability Description: A vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause autonomic nodes of an affected system to reload, resulting in a denial of service (DoS) condition. More Information: CSCvd88936. Known Affected Releases: Denali-16.2.1 Denali-16.3.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securitytracker.com/id/1038999 - https:
otes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securitytracker.com/id/1038999 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170726-anidos - http://www.securityfocus.com/bid/99973
CVE ID: CVE-2017-6664 State: PUBLISHED Published: 2017-08-07T06:00:00 Last Updated: 2024-08-05T15:33:20.443Z Vendors: n/a Products: Cisco IOS XE Problem Types: Certificate Revocation Vulnerability Description: A vulnerability in the Autonomic Networking feature of Cisco IOS XE Software could allow an unauthenticated, remote, autonomic node to access the Autonomic Networking infrastructure of an affected system, after the certificate for the autonomic node has been revoked. This vulnerability affected devices that are running Release 16.x of Cisco IOS XE Software and are configured to use Autonomic Networking. This vulnerability does not affect devices that are running an earlier release of C
figured to use Autonomic Networking. This vulnerability does not affect devices that are running an earlier release of Cisco IOS XE Software or devices that are not configured to use Autonomic Networking. More Information: CSCvd22328. Known Affected Releases: 15.5(1)S3.1 Denali-16.2.1. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99986 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170726-anicrl - http://www.securitytracker.com/id/1038997
CVE ID: CVE-2017-6665 State: PUBLISHED Published: 2017-08-07T06:00:00 Last Updated: 2024-08-05T15:33:20.472Z Vendors: n/a Products: Cisco IOS and IOS XE Problem Types: Information Disclosure Vulnerability Description: A vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to reset the Autonomic Control Plane (ACP) of an affected system and view ACP packets that are transferred in clear text within an affected system, an Information Disclosure Vulnerability. More Information: CSCvd51214. Known Affected Releases: Denali-16.2.1 Denali-16.3.1. Additional Analyst Notes: - CVE Program Container: Referenc
51214. Known Affected Releases: Denali-16.2.1 Denali-16.3.1. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170726-aniacp - http://www.securityfocus.com/bid/99969 - http://www.securitytracker.com/id/1038998
CVE ID: CVE-2017-6666 State: PUBLISHED Published: 2017-06-13T06:00:00 Last Updated: 2024-08-05T15:33:20.517Z Vendors: n/a Products: Cisco Network Convergence System 5500 Series Routers Problem Types: Denial of Service Vulnerability Description: A vulnerability in the forwarding component of Cisco IOS XR Software for Cisco Network Convergence System (NCS) 5500 Series Routers could allow an authenticated, local attacker to cause the router to stop forwarding data traffic across Traffic Engineering (TE) tunnels, resulting in a denial of service (DoS) condition. More Information: CSCvd16665. Known Affected Releases: 6.2.11.BASE. Known Fixed Releases: 6.1.3 6.1.2 6.3.1.8i.BASE 6.2.11.8i.BASE 6.2.
n: CSCvd16665. Known Affected Releases: 6.2.11.BASE. Known Fixed Releases: 6.1.3 6.1.2 6.3.1.8i.BASE 6.2.11.8i.BASE 6.2.2.9i.BASE 6.1.32.11i.BASE 6.1.31.10i.BASE 6.1.4.3i.BASE. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-ncs - http://www.securityfocus.com/bid/98987 - http://www.securitytracker.com/id/1038630
CVE ID: CVE-2017-6667 State: PUBLISHED Published: 2017-06-13T06:00:00 Last Updated: 2024-08-05T15:33:20.470Z Vendors: n/a Products: Cisco Context Service SDK Problem Types: Arbitrary Code Execution Vulnerability Description: A vulnerability in the update process for the dynamic JAR file of the Cisco Context Service software development kit (SDK) could allow an unauthenticated, remote attacker to execute arbitrary code on the affected device with the privileges of the web server. More Information: CSCvb66730. Known Affected Releases: 2.0. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-ccs
ram Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-ccs - http://www.securityfocus.com/bid/98978
CVE ID: CVE-2017-6668 State: PUBLISHED Published: 2017-06-13T06:00:00 Last Updated: 2024-08-05T15:33:20.477Z Vendors: n/a Products: Cisco Unified Communications Domain Manager Problem Types: SQL Injection Vulnerabilities Description: Vulnerabilities in the web-based GUI of Cisco Unified Communications Domain Manager (CUCDM) could allow an authenticated, remote attacker to impact the confidentiality of the system by executing arbitrary SQL queries, aka SQL Injection. More Information: CSCvc52784 CSCvc97648. Known Affected Releases: 8.1(7)ER1. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98947 - http://www.securitytracker.com/id/1038632 - ht
Program Container: References: - http://www.securityfocus.com/bid/98947 - http://www.securitytracker.com/id/1038632 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-cucm2
CVE ID: CVE-2017-6669 State: PUBLISHED Published: 2017-06-26T07:00:00 Last Updated: 2024-08-05T15:33:20.445Z Vendors: n/a Products: Cisco WebEx Network Recording Player Problem Types: CWE-119 Description: Multiple buffer overflow vulnerabilities exist in the Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) files. An attacker could exploit these vulnerabilities by providing a user with a malicious ARF file via email or URL and convincing the user to launch the file. Exploitation of these vulnerabilities could cause an affected player to crash and, in some cases, could allow arbitrary code execution on the system of a targeted user. The Cisco WebEx Network Recording Pla
some cases, could allow arbitrary code execution on the system of a targeted user. The Cisco WebEx Network Recording Player is an application that is used to play back WebEx meeting recordings that have been recorded on the computer of an online meeting attendee. The player can be automatically installed when the user accesses a recording file that is hosted on a WebEx server. The following client builds are affected by this vulnerability: Cisco WebEx Business Suite (WBS29) client builds prior to T29.13.130, Cisco WebEx Business Suite (WBS30) client builds prior to T30.17, Cisco WebEx Business Suite (WBS31) client builds prior to T31.10. Cisco Bug IDs: CSCvc47758 CSCvc51227 CSCvc51242. Addit
Cisco WebEx Business Suite (WBS31) client builds prior to T31.10. Cisco Bug IDs: CSCvc47758 CSCvc51227 CSCvc51242. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-wnrp - http://www.securitytracker.com/id/1038737 - http://www.securityfocus.com/bid/99196
CVE ID: CVE-2017-6670 State: PUBLISHED Published: 2017-06-13T06:00:00 Last Updated: 2024-08-05T15:33:20.476Z Vendors: n/a Products: Cisco Unified Communications Domain Manager Problem Types: Open Redirect Vulnerability Description: A vulnerability in the web-based GUI of Cisco Unified Communications Domain Manager could allow an unauthenticated, remote attacker to redirect a user to a malicious web page, aka an Open Redirect issue. More Information: CSCvc54813. Known Affected Releases: 8.1(7)ER1. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98946 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-cucm
curityfocus.com/bid/98946 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-cucm1 - http://www.securitytracker.com/id/1038631
CVE ID: CVE-2017-6671 State: PUBLISHED Published: 2017-06-13T06:00:00 Last Updated: 2024-08-05T15:33:20.639Z Vendors: n/a Products: Cisco Email Security Appliance Problem Types: Attachment Filter Bypass Vulnerability Description: A vulnerability in the email message scanning of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass configured filters on the device, as demonstrated by the Attachment Filter. More Information: CSCvd34632. Known Affected Releases: 10.0.1-087 9.7.1-066. Known Fixed Releases: 10.0.2-020 9.8.1-015. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9896
.2-020 9.8.1-015. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98969 - http://www.securitytracker.com/id/1038635 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-esa1
CVE ID: CVE-2017-6672 State: PUBLISHED Published: 2017-07-25T19:00:00 Last Updated: 2024-08-05T15:33:20.485Z Vendors: n/a Products: Cisco ASR 5000 Series Aggregation Services Routers Problem Types: Access Control List Security Bypass Vulnerability Description: A vulnerability in certain filtering mechanisms of access control lists (ACLs) for Cisco ASR 5000 Series Aggregation Services Routers through 21.x could allow an unauthenticated, remote attacker to bypass ACL rules that have been configured for an affected device. More Information: CSCvb99022 CSCvc16964 CSCvc37351 CSCvc54843 CSCvc63444 CSCvc77815 CSCvc88658 CSCve08955 CSCve14141 CSCve33870. Additional Analyst Notes: - CVE Program Conta
vc54843 CSCvc63444 CSCvc77815 CSCvc88658 CSCve08955 CSCve14141 CSCve33870. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170719-asr1 - http://www.securityfocus.com/bid/99921 - http://www.securitytracker.com/id/1038962
CVE ID: CVE-2017-6673 State: PUBLISHED Published: 2017-06-13T06:00:00 Last Updated: 2024-08-05T15:33:20.447Z Vendors: n/a Products: Cisco Firepower Management Center Problem Types: Information Disclosure Vulnerability Description: A vulnerability in Cisco Firepower Management Center could allow an authenticated, remote attacker to obtain user information. An attacker could use this information to perform reconnaissance. More Information: CSCvc10894. Known Affected Releases: 6.1.0.2 6.2.0. Known Fixed Releases: 6.2.0. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-fmc
CVE ID: CVE-2017-6674 State: PUBLISHED Published: 2017-06-13T06:00:00 Last Updated: 2024-08-05T15:33:20.448Z Vendors: n/a Products: Cisco Firepower System Software Problem Types: URL Filtering Bypass Vulnerability Description: A vulnerability in the feature-license management functionality of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass URL filters that have been configured for an affected device. More Information: CSCvb16413. Known Affected Releases: 6.0.1 6.1.0 6.2.0 6.2.1. Known Fixed Releases: 6.2.1 6.2.0.1 6.1.0.2. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98654 - https://tools.cisco.com
l Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98654 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170524-fmc
CVE ID: CVE-2017-6675 State: PUBLISHED Published: 2017-06-13T06:00:00 Last Updated: 2024-08-05T15:33:20.488Z Vendors: n/a Products: Cisco Industrial Network Director Problem Types: Cross-Site Scripting Vulnerability Description: A vulnerability in the web interface of Cisco Industrial Network Director could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against an affected system. More Information: CSCvd25405. Known Affected Releases: 1.1(0.176). Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-ind - http://www.securityfocus.com/bid/98962
CVE ID: CVE-2017-6678 State: PUBLISHED Published: 2017-06-26T07:00:00 Last Updated: 2024-08-05T15:33:20.462Z Vendors: n/a Products: Cisco Virtualized Packet Core-Distributed Instance Problem Types: CWE-399 Description: A vulnerability in the ingress UDP packet processing functionality of Cisco Virtualized Packet Core-Distributed Instance (VPC-DI) Software 19.2 through 21.0 could allow an unauthenticated, remote attacker to cause both control function (CF) instances on an affected system to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient handling of user-supplied data by the affected software. An attacker could exploit this vulnerability by s
insufficient handling of user-supplied data by the affected software. An attacker could exploit this vulnerability by sending crafted UDP packets to the distributed instance (DI) network addresses of both CF instances on an affected system. A successful exploit could allow the attacker to cause an unhandled error condition on the affected system, which would cause the CF instances to reload and consequently cause the entire VPC to reload, resulting in the disconnection of all subscribers and a DoS condition on the affected system. This vulnerability can be exploited via IPv4 traffic only. Cisco Bug IDs: CSCvc01665 CSCvc35565. Additional Analyst Notes: - CVE Program Container: References: -
v4 traffic only. Cisco Bug IDs: CSCvc01665 CSCvc35565. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99195 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-vpc
CVE ID: CVE-2017-6679 State: PUBLISHED Published: 2017-12-01T00:00:00 Last Updated: 2024-08-05T15:33:20.478Z Vendors: n/a Products: Cisco Umbrella Virtual Appliance Version 2.0.3 and prior Problem Types: undocumented encrypted remote support tunnel Description: The Cisco Umbrella Virtual Appliance Version 2.0.3 and prior contained an undocumented encrypted remote support tunnel (SSH) which auto initiated from the customer's appliance to Cisco's SSH Hubs in the Umbrella datacenters. These tunnels were primarily leveraged for remote support and allowed for authorized/authenticated personnel from the Cisco Umbrella team to access the appliance remotely and obtain full control without explicit c
cated personnel from the Cisco Umbrella team to access the appliance remotely and obtain full control without explicit customer approval. To address this vulnerability, the Umbrella Virtual Appliance version 2.1.0 now requires explicit customer approval before an SSH tunnel from the VA to the Cisco terminating server can be established. Additional Analyst Notes: - CVE Program Container: References: - https://www.info-sec.ca/advisories/Cisco-Umbrella.html - https://support.umbrella.com/hc/en-us/articles/115004752143-Virtual-Appliance-Vulnerability-due-to-always-on-SSH-Tunnel-RESOLVED-2017-09-15 - http://www.securityfocus.com/bid/101567 - https://support.umbrella.com/hc/en-us/articles/11500415
-RESOLVED-2017-09-15 - http://www.securityfocus.com/bid/101567 - https://support.umbrella.com/hc/en-us/articles/115004154423 - https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-umbrella-tunnel-gJw5thgE
CVE ID: CVE-2017-6680 State: PUBLISHED Published: 2017-06-13T06:00:00 Last Updated: 2024-08-05T15:33:20.472Z Vendors: n/a Products: Cisco Ultra Services Framework Problem Types: Arbitrary Direction Creation Vulnerability Description: A vulnerability in the AutoVNF logging function of Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to create arbitrary directories on the affected system. More Information: CSCvc76652. Known Affected Releases: 21.0.0. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99001 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-usf1
CVE ID: CVE-2017-6681 State: PUBLISHED Published: 2017-06-13T06:00:00 Last Updated: 2024-08-05T15:33:20.444Z Vendors: n/a Products: Cisco Ultra Services Framework Problem Types: Information Disclosure Vulnerability Description: A vulnerability in the AutoVNF VNFStagingView class of Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to execute a relative path traversal attack, enabling an attacker to read sensitive files on the system. More Information: CSCvc76662. Known Affected Releases: 21.0.0. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-usf2 - http://www
References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-usf2 - http://www.securityfocus.com/bid/98977
CVE ID: CVE-2017-6682 State: PUBLISHED Published: 2017-06-13T06:00:00 Last Updated: 2024-08-05T15:33:20.465Z Vendors: n/a Products: Cisco Elastic Services Controller Problem Types: Arbitrary Command Execution Vulnerability Description: A vulnerability in the ConfD CLI of Cisco Elastic Services Controllers could allow an authenticated, remote attacker to run arbitrary commands as the Linux tomcat user on an affected system. More Information: CSCvc76620. Known Affected Releases: 2.2(9.76). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98951 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-esc1
CVE ID: CVE-2017-6683 State: PUBLISHED Published: 2017-06-13T06:00:00 Last Updated: 2024-08-05T15:33:20.461Z Vendors: n/a Products: Cisco Elastic Services Controller Problem Types: Arbitrary Command Execution Vulnerability Description: A vulnerability in the esc_listener.py script of Cisco Elastic Services Controllers could allow an authenticated, remote attacker to execute arbitrary commands as the tomcat user on an affected system, aka an Authentication Request Processing Arbitrary Command Execution Vulnerability. More Information: CSCvc76642. Known Affected Releases: 2.2(9.76). Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content
(9.76). Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-esc2 - http://www.securityfocus.com/bid/98982
CVE ID: CVE-2017-6684 State: PUBLISHED Published: 2017-06-13T06:00:00 Last Updated: 2024-08-05T15:33:20.438Z Vendors: n/a Products: Cisco Elastic Services Controller Problem Types: Insecure Default Credentials Vulnerability Description: A vulnerability in Cisco Elastic Services Controllers could allow an authenticated, remote attacker to log in to an affected system as the Linux admin user, aka an Insecure Default Credentials Vulnerability. More Information: CSCvc76651. Known Affected Releases: 21.0.0. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98979 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-2017060
www.securityfocus.com/bid/98979 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-esc3
CVE ID: CVE-2017-6685 State: PUBLISHED Published: 2017-06-13T06:00:00 Last Updated: 2024-08-05T15:33:20.450Z Vendors: n/a Products: Cisco Ultra Services Framework Staging Server Problem Types: Insecure Default Credentials Vulnerability Description: A vulnerability in Cisco Ultra Services Framework Staging Server could allow an authenticated, remote attacker with access to the management network to log in as an admin user of the affected device, aka an Insecure Default Credentials Vulnerability. More Information: CSCvc76681. Known Affected Releases: 21.0.0. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/ci
t Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-usf3 - http://www.securityfocus.com/bid/98990
CVE ID: CVE-2017-6686 State: PUBLISHED Published: 2017-06-13T06:00:00 Last Updated: 2024-08-05T15:33:20.453Z Vendors: n/a Products: Cisco Ultra Services Framework Element Manager Problem Types: Insecure Default Credentials Vulnerability Description: A vulnerability in Cisco Ultra Services Framework Element Manager could allow an authenticated, remote attacker with access to the management network to log in as an admin or oper user of the affected device, aka an Insecure Default Credentials Vulnerability. More Information: CSCvc76699. Known Affected Releases: 21.0.0. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityA
nal Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-usf4 - http://www.securityfocus.com/bid/98988
CVE ID: CVE-2017-6687 State: PUBLISHED Published: 2017-06-13T06:00:00 Last Updated: 2024-08-05T15:33:20.454Z Vendors: n/a Products: Cisco Ultra Services Framework Element Manager Problem Types: Insecure Default Password Vulnerability Description: A vulnerability in Cisco Ultra Services Framework Element Manager could allow an authenticated, remote attacker with access to the management network to log in to the affected device using default credentials present on the system, aka an Insecure Default Password Vulnerability. More Information: CSCvc76695. Known Affected Releases: 21.0.0. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98981 - http
: 21.0.0. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98981 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-usf5