Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-0400 State: PUBLISHED Published: 2018-07-18T23:00:00 Last Updated: 2024-11-29T14:49:06.037Z Vendors: n/a Products: Cisco Unified Contact Center Express unknown Problem Types: CWE-79 Description: Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. Cisco Bug IDs: CSCvg70904. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180718-uccx - http://www.securitytracker.com/i
/tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180718-uccx - http://www.securitytracker.com/id/1041352
CVE ID: CVE-2018-0401 State: PUBLISHED Published: 2018-07-18T23:00:00 Last Updated: 2024-11-29T14:48:53.851Z Vendors: n/a Products: Cisco Unified Contact Center Express unknown Problem Types: CWE-79 Description: Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. Cisco Bug IDs: CSCvg70967. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180718-uccx - http://www.securitytracker.com/i
CVE ID: CVE-2018-0402 State: PUBLISHED Published: 2018-07-18T23:00:00 Last Updated: 2024-11-29T14:48:33.257Z Vendors: n/a Products: Cisco Unified Contact Center Express unknown Problem Types: CWE-79 Description: Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack. Cisco Bug IDs: CSCvg70921. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180718-uccx - http://www.securitytracker.com/id/1041352
CVE ID: CVE-2018-0403 State: PUBLISHED Published: 2018-07-18T23:00:00 Last Updated: 2024-11-29T14:48:24.254Z Vendors: n/a Products: Cisco Unified Contact Center Express unknown Problem Types: CWE-79 Description: Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to retrieve a cleartext password. Cisco Bug IDs: CSCvg71040. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180718-uccx - http://www.securitytracker.com/id/1041352
CVE ID: CVE-2018-0404 State: PUBLISHED Published: 2018-10-05T16:00:00Z Last Updated: 2024-11-26T14:26:27.024Z Vendors: Cisco Products: Cisco RV180W Wireless-N Multifunction VPN Router Problem Types: CWE-89 Description: A vulnerability in the web framework code for Cisco RV180W Wireless-N Multifunction VPN Router and Small Business RV Series RV220W Wireless Network Security Firewall could allow an unauthenticated, remote attacker to execute arbitrary SQL queries. The attacker could retrieve sensitive information which should be restricted. A vulnerability in the web framework code for Cisco RV180W Wireless-N Multifunction VPN Router and Small Business RV Series RV220W Wireless Network Securit
k code for Cisco RV180W Wireless-N Multifunction VPN Router and Small Business RV Series RV220W Wireless Network Security Firewall could allow an unauthenticated, remote attacker to execute arbitrary SQL queries. The attacker could retrieve sensitive information which should be restricted. The product has entered the end-of-life phase and there will be no more firmware fixes. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvk27179
CVE ID: CVE-2018-0405 State: PUBLISHED Published: 2018-10-05T17:00:00Z Last Updated: 2024-11-26T14:26:09.815Z Vendors: Cisco Products: Cisco RV180W Wireless-N Multifunction VPN Router Problem Types: CWE-22 Description: A vulnerability in the web framework code for Cisco RV180W Wireless-N Multifunction VPN Router and Small Business RV Series RV220W Wireless Network Security Firewall could allow an unauthenticated, remote attacker to conduct a directory path traversal attack on a targeted device. The issue is due to improper sanitization of user-supplied input in HTTP request parameters that describe filenames. An attacker could exploit this vulnerability by using directory traversal technique
parameters that describe filenames. An attacker could exploit this vulnerability by using directory traversal techniques to submit a path to a desired file location. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvk28019
CVE ID: CVE-2018-0406 State: PUBLISHED Published: 2018-08-01T20:00:00 Last Updated: 2024-11-26T14:50:11.873Z Vendors: n/a Products: Cisco Web Security Appliance unknown Problem Types: CWE-79 Description: A vulnerability in the web-based management interface of Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to conduct a reflected or Document Object Model based (DOM-based) cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected device. An attacker could exploit this vulnerability
supplied input by the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or allow the attacker to access sensitive browser-based information. Cisco Bug IDs: CSCve84006. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180801-wsa-xss - http://www.securityfocus.com/bid/104945 - http://www.securitytracker.com/id/1041406
CVE ID: CVE-2018-0407 State: PUBLISHED Published: 2018-08-01T20:00:00 Last Updated: 2024-11-26T14:49:54.152Z Vendors: n/a Products: Cisco Small Business 300 Series Managed Switches unknown Problem Types: CWE-79 Description: A vulnerability in the web-based management interface of Cisco Small Business 300 Series (Sx300) Managed Switches could allow an authenticated, remote attacker to conduct a persistent cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected device. An attacker could exploit this vulnerability b
pplied input by the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or allow the attacker to access sensitive browser-based information. Cisco Bug IDs: CSCvi87326. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/104947 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180801-sb-pxss
CVE ID: CVE-2018-0408 State: PUBLISHED Published: 2018-08-01T20:00:00 Last Updated: 2024-11-26T14:49:41.537Z Vendors: n/a Products: Cisco Small Business 300 Series Managed Switches unknown Problem Types: CWE-79 Description: A vulnerability in the web-based management interface of Cisco Small Business 300 Series (Sx300) Managed Switches could allow an authenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected device. An attacker could exploit this vulnerability by
plied input by the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or allow the attacker to access sensitive browser-based information. Cisco Bug IDs: CSCvi87330. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180801-sb-rxss - http://www.securityfocus.com/bid/104948
CVE ID: CVE-2018-0409 State: PUBLISHED Published: 2018-08-15T20:00:00Z Last Updated: 2024-11-26T14:48:15.449Z Vendors: Cisco Systems, Inc. Products: Unified Communications Manager IM & Presence Service (CUCM IM&P), TelePresence Video Communication Server (VCS) and Expressway Problem Types: CWE-20 Description: A vulnerability in the XCP Router service of the Cisco Unified Communications Manager IM & Presence Service (CUCM IM&P) and the Cisco TelePresence Video Communication Server (VCS) and Expressway could allow an unauthenticated, remote attacker to cause a temporary service outage for all IM&P users, resulting in a denial of service (DoS) condition. The vulnerability is due to improper val
ce outage for all IM&P users, resulting in a denial of service (DoS) condition. The vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by sending a malicious IPv4 or IPv6 packet to an affected device on TCP port 7400. An exploit could allow the attacker to overread a buffer, resulting in a crash and restart of the XCP Router service. Cisco Bug IDs: CSCvg97663, CSCvi55947. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securitytracker.com/id/1041534 - http://www.securityfocus.com/bid/105104 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180815
w.securityfocus.com/bid/105104 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180815-ucmimps-dos - http://www.securitytracker.com/id/1041533 - http://www.securityfocus.com/bid/105102
CVE ID: CVE-2018-0410 State: PUBLISHED Published: 2018-08-15T20:00:00Z Last Updated: 2024-11-26T14:48:03.996Z Vendors: Cisco Systems, Inc. Products: AsyncOS Software for Cisco Web Security Appliances Problem Types: CWE-400 Description: A vulnerability in the web proxy functionality of Cisco AsyncOS Software for Cisco Web Security Appliances could allow an unauthenticated, remote attacker to exhaust system memory and cause a denial of service (DoS) condition on an affected system. The vulnerability exists because the affected software improperly manages memory resources for TCP connections to a targeted device. An attacker could exploit this vulnerability by establishing a high number of TCP
TCP connections to a targeted device. An attacker could exploit this vulnerability by establishing a high number of TCP connections to the data interface of an affected device via IPv4 or IPv6. A successful exploit could allow the attacker to exhaust system memory, which could cause the system to stop processing new connections and result in a DoS condition. System recovery may require manual intervention. Cisco Bug IDs: CSCvf36610. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/105098 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180815-wsa-dos - http://www.securitytracker.com/id
ls.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180815-wsa-dos - http://www.securitytracker.com/id/1041535
CVE ID: CVE-2018-0411 State: PUBLISHED Published: 2018-08-01T20:00:00 Last Updated: 2024-11-26T14:49:32.335Z Vendors: n/a Products: Cisco Unified Communications Manager unknown Problem Types: CWE-79 Description: A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of the affected software. An attacker could exploit this vulnerability by persuading a user of the i
anagement interface of the affected software. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or allow the attacker to access sensitive browser-based information. Cisco Bug IDs: CSCvk15343. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180801-ucm-xss - http://www.securityfocus.com/bid/104949 - http://www.securitytracker.com/id/1041407
CVE ID: CVE-2018-0412 State: PUBLISHED Published: 2018-08-15T20:00:00Z Last Updated: 2024-11-26T14:47:53.377Z Vendors: Cisco Systems, Inc. Products: Small Business 100 Series Wireless Access Points, Small Business 300 Series Wireless Access Points Problem Types: CWE-310 Description: A vulnerability in the implementation of Extensible Authentication Protocol over LAN (EAPOL) functionality in Cisco Small Business 100 Series Wireless Access Points and Cisco Small Business 300 Series Wireless Access Points could allow an unauthenticated, adjacent attacker to force the downgrade of the encryption algorithm that is used between an authenticator (access point) and a supplicant (Wi-Fi client). The v
of the encryption algorithm that is used between an authenticator (access point) and a supplicant (Wi-Fi client). The vulnerability is due to the improper processing of certain EAPOL messages that are received during the Wi-Fi handshake process. An attacker could exploit this vulnerability by establishing a man-in-the-middle position between a supplicant and an authenticator and manipulating an EAPOL message exchange to force usage of a WPA-TKIP cipher instead of the more secure AES-CCMP cipher. A successful exploit could allow the attacker to conduct subsequent cryptographic attacks, which could lead to the disclosure of confidential information. Cisco Bug IDs: CSCvj29229. Additional Analy
hic attacks, which could lead to the disclosure of confidential information. Cisco Bug IDs: CSCvj29229. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180815-sb-wap-encrypt
CVE ID: CVE-2018-0413 State: PUBLISHED Published: 2018-08-01T20:00:00 Last Updated: 2024-11-26T14:49:21.499Z Vendors: n/a Products: Cisco Identity Services Engine unknown Problem Types: CWE-352 Description: A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF protections for the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading a user of the interface to follow a crafted link. A successful ex
ttacker could exploit this vulnerability by persuading a user of the interface to follow a crafted link. A successful exploit could allow the attacker to perform arbitrary actions on a targeted device via a web browser and with the privileges of the user. Cisco Bug IDs: CSCvi85159. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/104950 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180801-ise-csrf - http://www.securitytracker.com/id/1041408
CVE ID: CVE-2018-0414 State: PUBLISHED Published: 2018-10-05T14:00:00Z Last Updated: 2024-11-26T14:46:08.525Z Vendors: Cisco Products: Cisco Secure Access Control Server Solution Engine (ACSE) Problem Types: CWE-611 Description: A vulnerability in the web-based UI of Cisco Secure Access Control Server could allow an authenticated, remote attacker to gain read access to certain information in an affected system. The vulnerability is due to improper handling of XML External Entities (XXEs) when parsing an XML file. An attacker could exploit this vulnerability by convincing the administrator of an affected system to import a crafted XML file. Additional Analyst Notes: - CVE Program Container: -
e administrator of an affected system to import a crafted XML file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/105289 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180905-acsxxe - http://www.securitytracker.com/id/1041688
CVE ID: CVE-2018-0415 State: PUBLISHED Published: 2018-08-15T20:00:00Z Last Updated: 2024-11-26T14:47:42.201Z Vendors: Cisco Systems, Inc. Products: Small Business 100 Series Wireless Access Points, Small Business 300 Series Wireless Access Points Problem Types: CWE-388 Description: A vulnerability in the implementation of Extensible Authentication Protocol over LAN (EAPOL) functionality in Cisco Small Business 100 Series Wireless Access Points and Cisco Small Business 300 Series Wireless Access Points could allow an authenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to the improper processing of certain EAPOL frames.
vice (DoS) condition on an affected device. The vulnerability is due to the improper processing of certain EAPOL frames. An attacker could exploit this vulnerability by sending a stream of crafted EAPOL frames to an affected device. A successful exploit could allow the attacker to force the access point (AP) to disassociate all the associated stations (STAs) and to disallow future, new association requests. Cisco Bug IDs: CSCvj97472. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180815-csb-wap-dos - http://www.securityfocus.com/bid/105116
CVE ID: CVE-2018-0416 State: PUBLISHED Published: 2018-10-17T19:00:00Z Last Updated: 2024-11-26T14:25:43.404Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Cisco Products: Cisco Wireless LAN Controller (WLC) Problem Types: CWE-20 Description: A vulnerability in the web-based interface of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to view system information that under normal circumstances should be prohibited. The vulnerability is due to incomplete input and validation checking mechanisms in the web-based interface URL request. An attacker could exploit this vulnerability by requesting specific URLs via the
n the web-based interface URL request. An attacker could exploit this vulnerability by requesting specific URLs via the web-based interface. A successful exploit could allow the attacker to view sensitive system information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securitytracker.com/id/1041928 - http://www.securityfocus.com/bid/105675 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181017-wlc-id
CVE ID: CVE-2018-0417 State: PUBLISHED Published: 2018-10-17T22:00:00Z Last Updated: 2024-11-26T14:24:38.073Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Cisco Products: Cisco Wireless LAN Controller (WLC) Problem Types: CWE-264 Description: A vulnerability in TACACS authentication with Cisco Wireless LAN Controller (WLC) Software could allow an authenticated, local attacker to perform certain operations within the GUI that are not normally available to that user on the CLI. The vulnerability is due to incorrect parsing of a specific TACACS attribute received in the TACACS response from the remote TACACS server. An attacker could exploit this vulnerability
CS attribute received in the TACACS response from the remote TACACS server. An attacker could exploit this vulnerability by authenticating via TACACS to the GUI on the affected device. A successful exploit could allow an attacker to create local user accounts with administrative privileges on an affected WLC and execute other commands that are not allowed from the CLI and should be prohibited. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securitytracker.com/id/1041924 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181017-wlc-gui-privesc - http://www.securityfocus.com/bid/105667
CVE ID: CVE-2018-0418 State: PUBLISHED Published: 2018-08-15T20:00:00Z Last Updated: 2024-11-26T14:47:23.721Z Vendors: Cisco Systems, Inc. Products: ASR 9000 Series Aggregation Services Router Software Problem Types: CWE-400 Description: A vulnerability in the Local Packet Transport Services (LPTS) feature set of Cisco ASR 9000 Series Aggregation Services Router Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to a lack of input and validation checking on certain Precision Time Protocol (PTP) ingress traffic to an affected device. An attacker could exploit this vulnerability by injecting malf
ime Protocol (PTP) ingress traffic to an affected device. An attacker could exploit this vulnerability by injecting malformed traffic into an affected device. A successful exploit could allow the attacker to cause services on the device to become unresponsive, resulting in a DoS condition. Cisco Bug IDs: CSCvj22858. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securitytracker.com/id/1041538 - http://www.securityfocus.com/bid/105185 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180815-asr-ptp-dos
CVE ID: CVE-2018-0419 State: PUBLISHED Published: 2018-08-15T20:00:00Z Last Updated: 2024-11-26T14:47:05.900Z Vendors: Cisco Systems, Inc. Products: Email Security Appliance (ESA) Problem Types: CWE-20 Description: A vulnerability in certain attachment detection mechanisms of Cisco Email Security Appliances (ESA) could allow an unauthenticated, remote attacker to bypass the filtering functionality of an affected system. The vulnerability is due to the improper detection of content within executable (EXE) files. An attacker could exploit this vulnerability by sending a customized EXE file that is not recognized and blocked by the ESA. A successful exploit could allow an attacker to send email
mized EXE file that is not recognized and blocked by the ESA. A successful exploit could allow an attacker to send email messages that contain malicious executable files to unsuspecting users. Cisco Bug IDs: CSCvh03786. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/105112 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180815-esa-file-bypass - http://www.securitytracker.com/id/1041531