Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-4284 State: PUBLISHED Published: 2015-07-22T14:00:00 Last Updated: 2024-08-06T06:11:12.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Concurrent Data Management Replication process in Cisco IOS XR 5.3.0 on ASR 9000 devices allows remote attackers to cause a denial of service (BGP process reload) via malformed BGPv4 packets, aka Bug ID CSCur70670. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75980 - http://tools.cisco.com/security/center/viewAlert.x?alertId=40067 - http://www.securitytracker.com/id/1033017
CVE ID: CVE-2015-4285 State: PUBLISHED Published: 2015-07-23T14:00:00 Last Updated: 2024-08-06T06:11:12.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Local Packet Transport Services (LPTS) implementation in Cisco IOS XR 5.1.2, 5.1.3, 5.2.1, and 5.2.2 on ASR9k devices makes incorrect decisions about the opening of TCP and UDP ports during the processing of flow base entries, which allows remote attackers to cause a denial of service (resource consumption) by sending traffic to these ports continuously, aka Bug ID CSCur88273. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=40068 - http://www.secur
CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=40068 - http://www.securitytracker.com/id/1033043
CVE ID: CVE-2015-4286 State: PUBLISHED Published: 2015-07-29T14:00:00 Last Updated: 2024-08-06T06:11:12.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web framework in Cisco UCS Central Software 1.3(0.99) allows remote attackers to read arbitrary files via a crafted HTTP request, aka Bug ID CSCuu41377. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=40151 - http://www.securitytracker.com/id/1033112
CVE ID: CVE-2015-4287 State: PUBLISHED Published: 2015-07-29T01:00:00 Last Updated: 2024-08-06T06:11:12.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Firepower Extensible Operating System 1.1(1.86) on Firepower 9000 devices allows remote attackers to bypass intended access restrictions and obtain sensitive device information by visiting an unspecified web page, aka Bug ID CSCuu82230. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=40136
CVE ID: CVE-2015-4288 State: PUBLISHED Published: 2015-07-29T01:00:00 Last Updated: 2024-08-06T06:11:12.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LDAP implementation on the Cisco Web Security Appliance (WSA) 8.5.0-000, Email Security Appliance (ESA) 8.5.7-042, and Content Security Management Appliance (SMA) 8.3.6-048 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, aka Bug IDs CSCuo29561, CSCuv40466, and CSCuv40470. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=40137
CVE ID: CVE-2015-4289 State: PUBLISHED Published: 2015-08-01T01:00:00 Last Updated: 2024-08-06T06:11:12.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Cisco AnyConnect Secure Mobility Client 4.0(2049) allows remote head-end systems to write to arbitrary files via a crafted configuration attribute, aka Bug ID CSCut93920. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=40175 - http://www.securitytracker.com/id/1033173
CVE ID: CVE-2015-4290 State: PUBLISHED Published: 2015-07-29T14:00:00 Last Updated: 2024-08-06T06:11:12.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel extension in Cisco AnyConnect Secure Mobility Client 4.0(2049) on OS X allows local users to cause a denial of service (panic) via vectors involving contiguous memory locations, aka Bug ID CSCut12255. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033113 - http://tools.cisco.com/security/center/viewAlert.x?alertId=40176
CVE ID: CVE-2015-4291 State: PUBLISHED Published: 2015-08-01T01:00:00 Last Updated: 2024-08-06T06:11:12.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS XE 2.x before 2.4.3 and 2.5.x before 2.5.1 on ASR 1000 devices allows remote attackers to cause a denial of service (Embedded Services Processor crash) via a crafted series of fragmented (1) IPv4 or (2) IPv6 packets, aka Bug ID CSCtd72617. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033131 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150730-asr1k
CVE ID: CVE-2015-4292 State: PUBLISHED Published: 2015-08-01T01:00:00 Last Updated: 2024-08-06T06:11:12.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the management interface in Cisco Prime Central for Hosted Collaboration Solution (PC4HCS) 10.6(2) allows remote attackers to inject arbitrary web script or HTML via an unspecified value, aka Bug ID CSCuv45818. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033172 - http://tools.cisco.com/security/center/viewAlert.x?alertId=40214
CVE ID: CVE-2015-4293 State: PUBLISHED Published: 2015-07-30T14:00:00 Last Updated: 2024-08-06T06:11:12.177Z Vendors: n/a Products: n/a Problem Types: n/a Description: The packet-reassembly implementation in Cisco IOS XE 3.13S and earlier allows remote attackers to cause a denial of service (CPU consumption or packet loss) via fragmented (1) IPv4 or (2) IPv6 packets that trigger ATTN-3-SYNC_TIMEOUT errors after reassembly failures, aka Bug ID CSCuo37957. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=40215 - http://www.securitytracker.com/id/1033122
CVE ID: CVE-2015-4294 State: PUBLISHED Published: 2015-08-01T01:00:00 Last Updated: 2024-08-06T06:11:12.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Cisco IM and Presence Service before 10.5 MR1 allows remote attackers to inject arbitrary web script or HTML by constructing a crafted URL that leverages incomplete filtering of HTML elements, aka Bug ID CSCut41766. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033171 - http://tools.cisco.com/security/center/viewAlert.x?alertId=40217
CVE ID: CVE-2015-4295 State: PUBLISHED Published: 2015-08-01T01:00:00 Last Updated: 2024-08-06T06:11:12.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Prime Collaboration Deployment component in Cisco Unified Communications Manager 10.5(3.10000.9) allows remote authenticated users to discover root credentials via a direct request to an unspecified URL, aka Bug ID CSCuv21819. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=40223 - http://www.securitytracker.com/id/1033174
CVE ID: CVE-2015-4296 State: PUBLISHED Published: 2015-08-19T23:00:00 Last Updated: 2024-08-06T06:11:12.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nexus Data Broker (NDB) on Cisco Nexus 3000 devices with software 6.0(2)A6(1) allows remote attackers to cause a denial of service (Java process restart) via crafted connections to the Java application, aka Bug ID CSCut87006. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=40426 - http://www.securitytracker.com/id/1033264
CVE ID: CVE-2015-4297 State: PUBLISHED Published: 2015-08-19T14:00:00 Last Updated: 2024-08-06T06:11:12.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in Cisco WebEx Node for Media Convergence Server (MCS) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via crafted HTTP request parameters, aka Bug ID CSCuv32136. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=40427 - http://www.securityfocus.com/bid/76328
CVE ID: CVE-2015-4298 State: PUBLISHED Published: 2015-08-19T15:00:00 Last Updated: 2024-08-06T06:11:12.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Unified Web and E-Mail Interaction Manager 9.0(2) and 11.0(1) improperly performs authorization, which allows remote authenticated users to read or write to stored data via unspecified vectors, aka Bug ID CSCuo89056. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033286 - http://www.securityfocus.com/bid/76348 - http://tools.cisco.com/security/center/viewAlert.x?alertId=40428
CVE ID: CVE-2015-4299 State: PUBLISHED Published: 2015-08-19T15:00:00 Last Updated: 2024-08-06T06:11:12.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Unified Web and E-Mail Interaction Manager 9.0(2) improperly performs authorization, which allows remote authenticated users to remove default messaging-queue system folders via unspecified vectors, aka Bug ID CSCuo89046. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=40429 - http://www.securitytracker.com/id/1033285 - http://www.securityfocus.com/bid/74572
CVE ID: CVE-2015-4300 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-4301 State: PUBLISHED Published: 2015-08-19T15:00:00 Last Updated: 2024-08-06T06:11:12.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco NX-OS on Nexus 9000 devices 11.1(1c) allows remote authenticated users to cause a denial of service (device hang) via large files that are copied to a device's filesystem, aka Bug ID CSCuu77225. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=40431 - http://www.securitytracker.com/id/1033267
CVE ID: CVE-2015-4302 State: PUBLISHED Published: 2015-08-19T14:00:00 Last Updated: 2024-08-06T06:11:12.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface in Cisco FireSIGHT Management Center 5.3.1.4 allows remote attackers to delete arbitrary system policies via modified parameters in a POST request, aka Bug ID CSCuu25390. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033279 - http://www.securityfocus.com/bid/76345 - http://tools.cisco.com/security/center/viewAlert.x?alertId=40432
CVE ID: CVE-2015-4303 State: PUBLISHED Published: 2015-08-20T10:00:00 Last Updated: 2024-08-06T06:11:12.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco TelePresence Video Communication Server (VCS) X8.5.2 allows remote authenticated users to execute arbitrary commands in the context of the nobody user account via an unspecified web-page parameter, aka Bug ID CSCuv12333. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=40433 - http://www.securityfocus.com/bid/76322 - http://www.securitytracker.com/id/1033268
CVE ID: CVE-2015-4304 State: PUBLISHED Published: 2015-09-20T01:00:00 Last Updated: 2024-08-06T06:11:12.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote authenticated users to bypass intended access restrictions, and create administrative accounts or read data from arbitrary tenant domains, via a crafted URL, aka Bug IDs CSCus62671 and CSCus62652. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150916-pca - http://www.securitytracker.com/id/1033581
CVE ID: CVE-2015-4305 State: PUBLISHED Published: 2015-09-20T01:00:00 Last Updated: 2024-08-06T06:11:12.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote authenticated users to bypass intended system-database read restrictions, and discover credentials or SNMP communities for arbitrary tenant domains, via a crafted URL, aka Bug ID CSCus62656. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150916-pca - http://www.securitytracker.com/id/1033581 - http://tools.cisco.com/security/center/viewAle
isory/cisco-sa-20150916-pca - http://www.securitytracker.com/id/1033581 - http://tools.cisco.com/security/center/viewAlert.x?alertId=40520
CVE ID: CVE-2015-4306 State: PUBLISHED Published: 2015-09-20T01:00:00 Last Updated: 2024-08-06T06:11:12.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote authenticated users to bypass intended login-session read restrictions, and impersonate administrators of arbitrary tenant domains, by discovering a session identifier and constructing a crafted URL, aka Bug IDs CSCus88343 and CSCus88334. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150916-pca - http://www.securitytracker.com/id/1033581
CVE ID: CVE-2015-4307 State: PUBLISHED Published: 2015-09-20T01:00:00 Last Updated: 2024-08-06T06:11:12.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web framework in Cisco Prime Collaboration Provisioning before 11.0 allows remote authenticated users to bypass intended access restrictions and create administrative accounts via a crafted URL, aka Bug ID CSCut64111. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033579 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150916-pcp
CVE ID: CVE-2015-4308 State: PUBLISHED Published: 2015-08-19T15:00:00 Last Updated: 2024-08-06T06:11:12.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: The webGUI configuration-export feature in Cisco Edge Bluebird Operating System 1.2 on Edge 340 devices allows remote authenticated users to obtain sensitive information via unspecified vectors, aka Bug ID CSCuu43968. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=40434 - http://www.securityfocus.com/bid/76349 - http://www.securitytracker.com/id/1033280
CVE ID: CVE-2015-4310 State: PUBLISHED Published: 2015-08-19T23:00:00 Last Updated: 2024-08-06T06:11:12.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Cisco Finesse 10.5(1) allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in a (1) GET or (2) POST request, aka Bug IDs CSCuq82322, CSCut95853, and CSCuq73975. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=40436 - http://www.securityfocus.com/bid/76407 - http://www.securitytracker.com/id/1033331
CVE ID: CVE-2015-4314 State: PUBLISHED Published: 2015-08-20T00:00:00 Last Updated: 2024-08-06T06:11:12.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: The System Snapshot feature in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.1 allows remote authenticated users to obtain sensitive password-hash information by reading the snapshot file, aka Bug ID CSCuv40422. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=40439 - http://www.securitytracker.com/id/1033266
CVE ID: CVE-2015-4315 State: PUBLISHED Published: 2015-08-20T00:00:00 Last Updated: 2024-08-06T06:11:12.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Call Policy Configuration page in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.3 improperly validates external DTDs, which allows remote authenticated users to read arbitrary files or cause a denial of service via a crafted XML document, aka Bug ID CSCuv31853. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=40446 - http://www.securityfocus.com/bid/76352 - http://www.securitytracker.com/id/1033283
CVE ID: CVE-2015-4316 State: PUBLISHED Published: 2015-08-20T10:00:00 Last Updated: 2024-08-06T06:11:12.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Mobile and Remote Access (MRA) endpoint-validation feature in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 improperly validates the phone line used for registration, which allows remote authenticated users to conduct impersonation attacks via a crafted registration, aka Bug ID CSCuv40396. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/76353 - http://tools.cisco.com/security/center/viewAlert.x?alertId=40445 - http://www.securitytracker.com/id/103328
/bid/76353 - http://tools.cisco.com/security/center/viewAlert.x?alertId=40445 - http://www.securitytracker.com/id/1033282
CVE ID: CVE-2015-4317 State: PUBLISHED Published: 2015-08-20T00:00:00 Last Updated: 2024-08-06T06:11:12.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 allows remote attackers to cause a denial of service via invalid variables in an authentication packet, aka Bug ID CSCuv40469. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033281 - http://tools.cisco.com/security/center/viewAlert.x?alertId=40444 - http://www.securityfocus.com/bid/76351
CVE ID: CVE-2015-4318 State: PUBLISHED Published: 2015-08-20T15:00:00 Last Updated: 2024-08-06T06:11:12.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 allows remote attackers to cause a denial of service via invalid variables in a GET request, aka Bug ID CSCuv40528. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=40443 - http://www.securitytracker.com/id/1033281 - http://www.securityfocus.com/bid/76347
CVE ID: CVE-2015-4319 State: PUBLISHED Published: 2015-08-20T10:00:00 Last Updated: 2024-08-06T06:11:12.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: The password-change feature in the administrative web interface in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.1 improperly performs authorization, which allows remote authenticated users to reset arbitrary active-user passwords via unspecified vectors, aka Bug ID CSCuv12338. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/76366 - http://www.securitytracker.com/id/1033323 - http://tools.cisco.com/security/center/viewAlert.x?alertId=40442
CVE ID: CVE-2015-4320 State: PUBLISHED Published: 2015-08-20T00:00:00 Last Updated: 2024-08-06T06:11:12.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Configuration Log File component in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 allows remote authenticated users to obtain sensitive information by reading a log file, aka Bug ID CSCuv12340. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/76350 - http://www.securitytracker.com/id/1033284 - http://tools.cisco.com/security/center/viewAlert.x?alertId=40441
CVE ID: CVE-2015-4321 State: PUBLISHED Published: 2015-08-20T10:00:00 Last Updated: 2024-08-06T06:11:12.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Unicast Reverse Path Forwarding (uRPF) implementation in Cisco Adaptive Security Appliance (ASA) Software 9.3(1.50), 9.3(2.100), 9.3(3), and 9.4(1) mishandles cases where an IP address belongs to an internal interface but is also in the ASA routing table, which allows remote attackers to bypass uRPF validation via spoofed packets, aka Bug ID CSCuv60724. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033265 - http://tools.cisco.com/security/center/viewAlert.x?alertId=4044
eferences: - http://www.securitytracker.com/id/1033265 - http://tools.cisco.com/security/center/viewAlert.x?alertId=40440
CVE ID: CVE-2015-4322 State: PUBLISHED Published: 2015-08-19T15:00:00 Last Updated: 2024-08-06T06:11:12.703Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Content Security Management Appliance (SMA) 8.3.6-039, 9.1.0-31, and 9.1.0-103 improperly restricts the privileges available after LDAP authentication, which allows remote authenticated users to read or write to an arbitrary user's Spam Quarantine folder by visiting a spam-notification URL, aka Bug ID CSCuv65894. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/76365 - http://tools.cisco.com/security/center/viewAlert.x?alertId=40450 - http://www.securitytracker.com/id/1033
om/bid/76365 - http://tools.cisco.com/security/center/viewAlert.x?alertId=40450 - http://www.securitytracker.com/id/1033322
CVE ID: CVE-2015-4323 State: PUBLISHED Published: 2015-08-19T23:00:00 Last Updated: 2024-08-06T06:11:12.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Cisco NX-OS on Nexus 1000V devices for VMware vSphere 7.3(0)ZN(0.9); Nexus 3000 devices 6.0(2)U5(1.41), 7.0(3)I2(0.373), and 7.3(0)ZN(0.83); Nexus 4000 devices 4.1(2)E1(1b); Nexus 7000 devices 6.2(14)S1; Nexus 9000 devices 7.3(0)ZN(0.9); and MDS 9000 devices 6.2 (13) and 7.1(0)ZN(91.99) and MDS SAN-OS 7.1(0)ZN(91.99) allows remote attackers to cause a denial of service (device outage) via a crafted ARP packet, related to incorrect MTU validation, aka Bug IDs CSCuv71933, CSCuv61341, CSCuv61321, CSCuu78074, CS
crafted ARP packet, related to incorrect MTU validation, aka Bug IDs CSCuv71933, CSCuv61341, CSCuv61321, CSCuu78074, CSCut37060, CSCuv61266, CSCuv61351, CSCuv61358, and CSCuv61366. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/76367 - http://www.securitytracker.com/id/1033321 - http://tools.cisco.com/security/center/viewAlert.x?alertId=40469
CVE ID: CVE-2015-4324 State: PUBLISHED Published: 2015-08-19T15:00:00 Last Updated: 2024-08-06T06:11:12.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Cisco NX-OS on Nexus 1000V devices for VMware vSphere 7.3(0)ZN(0.81), Nexus 3000 devices 7.3(0)ZN(0.81), Nexus 4000 devices 4.1(2)E1(1c), Nexus 7000 devices 7.2(0)N1(0.1), and Nexus 9000 devices 7.3(0)ZN(0.81) allows remote attackers to cause a denial of service (IGMP process restart) via a malformed IGMPv3 packet that is mishandled during memory allocation, aka Bug IDs CSCuv69713, CSCuv69717, CSCuv69723, CSCuv69732, and CSCuv48908. Additional Analyst Notes: - CVE Program Container: References: - http://www.
17, CSCuv69723, CSCuv69732, and CSCuv48908. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033327 - http://www.securityfocus.com/bid/76372 - http://tools.cisco.com/security/center/viewAlert.x?alertId=40470
CVE ID: CVE-2015-4325 State: PUBLISHED Published: 2015-10-12T10:00:00 Last Updated: 2024-08-06T06:11:12.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: The process-management implementation in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 allows local users to gain privileges by terminating a firestarter.py supervised process and then triggering the restart of a process by the root account, aka Bug ID CSCuv12272. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151006-vcs - http://www.securitytracker.com/id/1033751