Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-1090 State: PUBLISHED Published: 2013-12-06T17:00:00 Last Updated: 2024-08-06T14:49:20.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SUSE horde5 package before 5.0.2-2.4.1 sets incorrect ownership for certain configuration files and directories including /etc/apache2/vhosts.d, which allows local wwwrun users to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.novell.com/show_bug.cgi?id=811369 - http://lists.opensuse.org/opensuse-updates/2013-12/msg00025.html
CVE ID: CVE-2013-1091 State: PUBLISHED Published: 2013-05-02T18:00:00 Last Updated: 2024-08-06T14:49:20.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Novell iPrint Client before 5.90 allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/59612 - http://www.novell.com/support/kb/doc.php?id=7012344 - https://bugzilla.novell.com/show_bug.cgi?id=800593 - http://download.novell.com/Download?buildid=k6yH0sy992E~
CVE ID: CVE-2013-1092 State: PUBLISHED Published: 2013-05-05T10:00:00Z Last Updated: 2024-09-16T23:46:08.737Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unquoted Windows search path vulnerabilities in Novell ZENworks Desktop Management (ZDM) 7 through 7.1 might allow local users to gain privileges via a Trojan horse "program" file in the C: folder, related to an attempted launch of (1) ZenRem32.exe or (2) wm.exe. Additional Analyst Notes: - CVE Program Container: References: - http://download.novell.com/Download?buildid=hT-LlTRPOfw~ - http://www.novell.com/support/kb/doc.php?id=7012147
CVE ID: CVE-2013-1093 State: PUBLISHED Published: 2013-06-17T10:00:00 Last Updated: 2024-08-06T14:49:20.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in the fwdToURL function in the ZCC login page in zcc-framework.jar in Novell ZENworks Configuration Management (ZCM) 11.2 before 11.2.3a Monthly Update 1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the directToPage parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/support/kb/doc.php?id=7012027 - http://www.novell.com/support/kb/doc.php?id=7012025 - http://www.novell.com/support/kb/doc.php?id=701249
hp?id=7012027 - http://www.novell.com/support/kb/doc.php?id=7012025 - http://www.novell.com/support/kb/doc.php?id=7012499
CVE ID: CVE-2013-1094 State: PUBLISHED Published: 2013-06-17T10:00:00 Last Updated: 2024-08-06T14:49:20.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in a ZCC page in zenworks-core in Novell ZENworks Configuration Management (ZCM) 11.2 before 11.2.3a Monthly Update 1 allows remote attackers to inject arbitrary web script or HTML via an invalid locale. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/support/kb/doc.php?id=7012501 - http://www.novell.com/support/kb/doc.php?id=7012027 - http://www.novell.com/support/kb/doc.php?id=7012025
CVE ID: CVE-2013-1095 State: PUBLISHED Published: 2013-06-17T10:00:00 Last Updated: 2024-08-06T14:49:20.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in a ZCC page in njwc.jar in Novell ZENworks Configuration Management (ZCM) 11.2 before 11.2.3a Monthly Update 1 allows remote attackers to inject arbitrary web script or HTML via vectors involving an onError event. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/support/kb/doc.php?id=7012500 - http://www.novell.com/support/kb/doc.php?id=7012027 - http://www.novell.com/support/kb/doc.php?id=7012025
CVE ID: CVE-2013-1096 State: PUBLISHED Published: 2013-12-28T02:00:00 Last Updated: 2024-08-06T14:49:20.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Roles Based Provisioning Module 4.0.2 before Field Patch D for Novell Identity Manager (aka IDM) allows remote attackers to inject arbitrary web script or HTML via a taskDetail taskId. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029532 - https://bugzilla.novell.com/show_bug.cgi?id=819115 - http://download.novell.com/Download?buildid=dnDbmYe8PZc~
CVE ID: CVE-2013-1097 State: PUBLISHED Published: 2013-06-17T10:00:00 Last Updated: 2024-08-06T14:49:20.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in a ZCC page in njwc.jar in Novell ZENworks Configuration Management (ZCM) 11.2 before 11.2.3a Monthly Update 1 allows remote attackers to inject arbitrary web script or HTML via vectors involving an onload event. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/support/kb/doc.php?id=7012027 - http://www.novell.com/support/kb/doc.php?id=7012025 - http://www.novell.com/support/kb/doc.php?id=7012502
CVE ID: CVE-2013-1099 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-1100 State: PUBLISHED Published: 2013-02-13T23:00:00Z Last Updated: 2024-09-16T18:14:13.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTTP server in Cisco IOS on Catalyst switches does not properly handle TCP socket events, which allows remote attackers to cause a denial of service (device crash) via crafted packets on TCP port (1) 80 or (2) 443, aka Bug ID CSCuc53853. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1100
CVE ID: CVE-2013-1102 State: PUBLISHED Published: 2013-01-24T21:00:00 Last Updated: 2024-08-06T14:49:20.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Wireless Intrusion Prevention System (wIPS) component on Cisco Wireless LAN Controller (WLC) devices with software 7.0 before 7.0.235.0, 7.1 and 7.2 before 7.2.110.0, and 7.3 before 7.3.101.0 allows remote attackers to cause a denial of service (device reload) via crafted IP packets, aka Bug ID CSCtx80743. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/51965 - http://www.securityfocus.com/bid/57524 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-s
- http://www.securityfocus.com/bid/57524 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130123-wlc - http://www.securitytracker.com/id/1028027
CVE ID: CVE-2013-1103 State: PUBLISHED Published: 2013-01-24T21:00:00 Last Updated: 2024-08-06T14:49:20.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Wireless LAN Controller (WLC) devices with software 7.0 before 7.0.220.0, 7.1 before 7.1.91.0, and 7.2 before 7.2.103.0 allow remote attackers to cause a denial of service (Access Point reload) via crafted SIP packets, aka Bug ID CSCts87659. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/51965 - http://www.securityfocus.com/bid/57524 - http://osvdb.org/89530 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130123-wlc - http://www.securitytra
30 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130123-wlc - http://www.securitytracker.com/id/1028027
CVE ID: CVE-2013-1104 State: PUBLISHED Published: 2013-01-24T21:00:00 Last Updated: 2024-08-06T14:49:20.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTTP Profiling functionality on Cisco Wireless LAN Controller (WLC) devices with software 7.3.101.0 allows remote authenticated users to execute arbitrary code via a crafted HTTP User-Agent header, aka Bug ID CSCuc15636. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/89533 - http://secunia.com/advisories/51965 - http://www.securityfocus.com/bid/57524 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130123-wlc - http://www.securitytracker.com/id/1028027 - h
.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130123-wlc - http://www.securitytracker.com/id/1028027 - https://exchange.xforce.ibmcloud.com/vulnerabilities/81489
CVE ID: CVE-2013-1105 State: PUBLISHED Published: 2013-01-24T21:00:00 Last Updated: 2024-08-06T14:49:20.726Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Wireless LAN Controller (WLC) devices with software 7.0 before 7.0.235.3, 7.1 and 7.2 before 7.2.111.3, and 7.3 before 7.3.101.0 allow remote authenticated users to bypass wireless-management settings and read or modify the device configuration via an SNMP request, aka Bug ID CSCua60653. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/89532 - http://secunia.com/advisories/51965 - https://exchange.xforce.ibmcloud.com/vulnerabilities/81490 - http://www.securityfocus.com/bid/57524 - http://
es/51965 - https://exchange.xforce.ibmcloud.com/vulnerabilities/81490 - http://www.securityfocus.com/bid/57524 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130123-wlc - http://www.securitytracker.com/id/1028027
CVE ID: CVE-2013-1107 State: PUBLISHED Published: 2013-02-06T11:00:00Z Last Updated: 2024-09-16T18:34:23.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: The search function in Cisco Webex Social (formerly Cisco Quad) allows remote authenticated users to read files via unspecified parameters, aka Bug ID CSCud40235. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1107
CVE ID: CVE-2013-1108 State: PUBLISHED Published: 2013-01-21T21:00:00 Last Updated: 2024-08-06T14:49:20.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco WebEx Training Center allows remote authenticated users to remove hands-on lab-session reservations via a crafted URL, aka Bug ID CSCzu81064. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1108 - http://www.securitytracker.com/id/1028014
CVE ID: CVE-2013-1109 State: PUBLISHED Published: 2013-01-17T15:00:00 Last Updated: 2024-08-06T14:49:20.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in testingLibraryAction.do in the Training Center testing library in Cisco WebEx Training Center allows remote attackers to hijack the authentication of arbitrary users for requests that delete tests, aka Bug ID CSCzu81067. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1109 - http://www.securitytracker.com/id/1028016
CVE ID: CVE-2013-1110 State: PUBLISHED Published: 2013-01-21T21:00:00 Last Updated: 2024-08-06T14:49:20.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco WebEx Training Center allow remote authenticated users to bypass intended privilege restrictions and (1) enable or (2) disable training-center recordings via a crafted URL, aka Bug ID CSCzu81065. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1110 - http://www.securitytracker.com/id/1028013 - http://www.securityfocus.com/bid/57488
CVE ID: CVE-2013-1111 State: PUBLISHED Published: 2013-02-13T23:00:00Z Last Updated: 2024-09-16T18:08:40.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cisco ATA 187 Analog Telephone Adaptor with firmware 9.2.1.0 and 9.2.3.1 before ES build 4 does not properly implement access control, which allows remote attackers to execute operating-system commands via vectors involving a session on TCP port 7870, aka Bug ID CSCtz67038. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130206-ata187
CVE ID: CVE-2013-1112 State: PUBLISHED Published: 2013-01-31T11:00:00 Last Updated: 2024-08-06T14:49:20.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Carrier Routing System (CRS) allows remote attackers to cause a denial of service (packet loss) via short malformed packets that trigger inefficient processing, aka Bug ID CSCud79136. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/57604 - http://osvdb.org/89643 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1112
CVE ID: CVE-2013-1113 State: PUBLISHED Published: 2013-01-31T11:00:00 Last Updated: 2024-08-06T14:49:20.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Cisco Unified Communications Domain Manager allows remote attackers to inject arbitrary web script or HTML via a crafted parameter value, aka Bug ID CSCue21042. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/89608 - http://www.securityfocus.com/bid/57567 - http://secunia.com/advisories/51954 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1113 - https://exchange.xforce.ibmcloud.com/vulnerabilities/81529
CVE ID: CVE-2013-1114 State: PUBLISHED Published: 2013-02-13T23:00:00Z Last Updated: 2024-09-16T20:12:08.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unity Express before 8.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCud87527. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1114
CVE ID: CVE-2013-1115 State: PUBLISHED Published: 2013-09-06T10:00:00Z Last Updated: 2024-09-16T19:56:32.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Cisco WebEx Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T27 L10N before SP32_ORION111, and T28 before T28.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted ARF file, aka Bug IDs CSCue74118, CSCub28371, CSCud23401, and CSCud31109. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130904-webex
CVE ID: CVE-2013-1116 State: PUBLISHED Published: 2013-09-06T10:00:00Z Last Updated: 2024-09-17T01:11:34.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Cisco WebEx Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T27 L10N before SP32_ORION111, and T28 before T28.8 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted ARF file, aka Bug IDs CSCue74147 and CSCub28383. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130904-webex
CVE ID: CVE-2013-1117 State: PUBLISHED Published: 2013-09-06T10:00:00Z Last Updated: 2024-09-17T02:41:47.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the exception handler in Cisco WebEx Recording Format (WRF) player T27 LD before SP32 EP16, T27 L10N before SP32_ORION111, and T28 before T28.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted WRF file, aka Bug ID CSCuc27639. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130904-webex
CVE ID: CVE-2013-1118 State: PUBLISHED Published: 2013-09-06T10:00:00Z Last Updated: 2024-09-17T03:27:22.714Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Cisco WebEx Recording Format (WRF) player T27 LD before SP32 EP16, T27 L10N before SP32_ORION111, and T28 before T28.8 allows remote attackers to execute arbitrary code via a crafted WRF file, aka Bug ID CSCuc27645. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130904-webex
CVE ID: CVE-2013-1119 State: PUBLISHED Published: 2013-09-06T10:00:00Z Last Updated: 2024-09-16T23:56:34.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Cisco WebEx Recording Format (WRF) player T27 LD before SP32 EP16, T27 L10N before SP32_ORION111, and T28 before T28.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted DHT index value in JPEG data within a WRF file, aka Bug ID CSCuc24503. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130904-webex
CVE ID: CVE-2013-1120 State: PUBLISHED Published: 2013-02-06T11:00:00Z Last Updated: 2024-09-17T01:31:12.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities on the Cisco Unity Express with software before 8.0 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors, aka Bug ID CSCue35910. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1120
CVE ID: CVE-2013-1121 State: PUBLISHED Published: 2013-09-19T18:00:00Z Last Updated: 2024-09-16T22:25:05.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: The regex engine in the BGP implementation in Cisco NX-OS, when a complex regular expression is configured for inbound routes, allows remote attackers to cause a denial of service (device reload) via a crafted AS path set, aka Bug ID CSCuf49554. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1121
CVE ID: CVE-2013-1122 State: PUBLISHED Published: 2013-02-13T23:00:00Z Last Updated: 2024-09-17T00:06:42.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco NX-OS on the Nexus 7000, when a certain Overlay Transport Virtualization (OTV) configuration is used, allows remote attackers to cause a denial of service (M1-Series module reload) via crafted packets, aka Bug ID CSCud15673. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1122
CVE ID: CVE-2013-1123 State: PUBLISHED Published: 2013-02-15T11:00:00 Last Updated: 2024-08-06T14:49:20.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the server in Cisco Unified MeetingPlace 7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug IDs CSCuc65411 and CSCue18706. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/57885 - http://secunia.com/advisories/52109 - https://exchange.xforce.ibmcloud.com/vulnerabilities/81986 - http://osvdb.org/90075 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-20
lnerabilities/81986 - http://osvdb.org/90075 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1123 - http://tools.cisco.com/security/center/viewAlert.x?alertId=28228
CVE ID: CVE-2013-1124 State: PUBLISHED Published: 2013-02-28T23:00:00Z Last Updated: 2024-09-17T04:14:47.690Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cisco Network Admission Control (NAC) agent on Mac OS X does not verify the X.509 certificate of an Identity Services Engine (ISE) server during an SSL session, which allows man-in-the-middle attackers to spoof ISE servers via an arbitrary certificate, aka Bug ID CSCub24309. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1124
CVE ID: CVE-2013-1125 State: PUBLISHED Published: 2013-02-19T23:00:00Z Last Updated: 2024-09-17T02:27:32.846Z Vendors: n/a Products: n/a Problem Types: n/a Description: The command-line interface in Cisco Identity Services Engine Software, Secure Access Control System (ACS), Application Networking Manager (ANM), Prime LAN Management Solution (LMS), Prime Network Control System, Quad, Context Directory Agent, Prime Collaboration, Unified Provisioning Manager, and Network Services Manager does not properly validate input, which allows local users to obtain root privileges via unspecified vectors, aka Bug IDs CSCue46001, CSCud95790, CSCue46021, CSCue46025, CSCue46023, CSCue46058, CSCue46013, CS
unspecified vectors, aka Bug IDs CSCue46001, CSCud95790, CSCue46021, CSCue46025, CSCue46023, CSCue46058, CSCue46013, CSCue46031, CSCue46035, and CSCue46042. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1125
CVE ID: CVE-2013-1128 State: PUBLISHED Published: 2013-02-15T11:00:00Z Last Updated: 2024-09-16T16:27:28.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the server in Cisco Unified MeetingPlace before 7.1(2.2000) allow remote attackers to hijack the authentication of unspecified victims via unknown vectors, aka Bug ID CSCuc64903. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=28217 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1128 - http
nter/viewAlert.x?alertId=28217 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1128 - http://secunia.com/advisories/52194
CVE ID: CVE-2013-1129 State: PUBLISHED Published: 2013-02-19T23:00:00Z Last Updated: 2024-09-17T02:31:50.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in Cisco Unity Connection 9.x allows remote attackers to cause a denial of service (memory consumption and process crash) by sending many TCP requests, aka Bug ID CSCud59736. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1129
CVE ID: CVE-2013-1130 State: PUBLISHED Published: 2013-09-20T16:00:00Z Last Updated: 2024-09-16T19:10:53.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco AnyConnect Secure Mobility Client on Mac OS X uses weak permissions for a library directory, which allows local users to gain privileges via a crafted library file, aka Bug ID CSCue33619. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1130
CVE ID: CVE-2013-1131 State: PUBLISHED Published: 2013-02-13T23:00:00Z Last Updated: 2024-09-16T18:19:20.225Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Small Business Wireless Access Points WAP200, WAP2000, WAP200E, and WET200 allow remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted SSID that is not properly handled during a site survey, aka Bug IDs CSCua86182, CSCua91196, CSCud36155, and CSCua86190. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1131
CVE ID: CVE-2013-1132 State: PUBLISHED Published: 2013-07-10T21:00:00Z Last Updated: 2024-09-16T18:19:08.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unified Communications Domain Manager allow remote attackers to inject arbitrary web script or HTML via vectors involving the (1) IptAccountMgmt, (2) IptFeatureConfigTemplateMgmt, (3) IptFeatureDisplayPolicyMgmt, or (4) IptProviderMgmt page, aka Bug IDs CSCud69972, CSCud70193, and CSCud70261. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1132