Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-6688 State: PUBLISHED Published: 2017-06-13T06:00:00 Last Updated: 2024-08-05T15:41:17.562Z Vendors: n/a Products: Cisco Elastic Services Controller Problem Types: Insecure Default Password Vulnerability Description: A vulnerability in Cisco Elastic Services Controllers could allow an authenticated, remote attacker to log in to an affected system as the Linux root user, aka an Insecure Default Password Vulnerability. More Information: CSCvc76631. Known Affected Releases: 2.2(9.76). Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-esc4 - http://www.securityfocus.com/bid/989
ls.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-esc4 - http://www.securityfocus.com/bid/98973
CVE ID: CVE-2017-6689 State: PUBLISHED Published: 2017-06-13T06:00:00 Last Updated: 2024-08-05T15:41:16.104Z Vendors: n/a Products: Cisco Elastic Services Controller Problem Types: Insecure Default Administrator Credentials Vulnerability Description: A vulnerability in the ConfD CLI of Cisco Elastic Services Controllers could allow an authenticated, remote attacker to log in to an affected system as the admin user, aka an Insecure Default Administrator Credentials Vulnerability. More Information: CSCvc76661. Known Affected Releases: 2.2(9.76). Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-201706
E Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-esc5 - http://www.securityfocus.com/bid/98983
CVE ID: CVE-2017-6690 State: PUBLISHED Published: 2017-06-13T06:00:00 Last Updated: 2024-08-05T15:41:15.937Z Vendors: n/a Products: Cisco StarOS Problem Types: Arbitrary File Modification Vulnerability Description: A vulnerability in the file check operation of Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an authenticated, remote attacker to overwrite or modify arbitrary files on an affected system. More Information: CSCvd73726. Known Affected Releases: 21.0.v0.65839 21.3.M0.67005. Known Fixed Releases: 21.4.A0.67087 21.4.A0.67079 21.4.A0.67013 21.3.M0.67084 21.3.M0.67077 21.3.M0.66994 21.3.J0.66993 21.1.v0.67082 21.1.V0.67083. Addit
7 21.4.A0.67079 21.4.A0.67013 21.3.M0.67084 21.3.M0.67077 21.3.M0.66994 21.3.J0.66993 21.1.v0.67082 21.1.V0.67083. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-staros - http://www.securityfocus.com/bid/98998 - http://www.securitytracker.com/id/1038634
CVE ID: CVE-2017-6691 State: PUBLISHED Published: 2017-06-13T06:00:00 Last Updated: 2024-08-05T15:41:15.996Z Vendors: n/a Products: Cisco Elastic Services Controller Problem Types: Information Disclosure Vulnerability Description: A vulnerability in the ConfD CLI of Cisco Elastic Services Controllers could allow an authenticated, remote attacker to access sensitive information on an affected system. More Information: CSCvd29403. Known Affected Releases: 2.3(2). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98948 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-esc6
CVE ID: CVE-2017-6692 State: PUBLISHED Published: 2017-06-13T06:00:00 Last Updated: 2024-08-05T15:41:16.075Z Vendors: n/a Products: Cisco Ultra Services Framework Element Manager Problem Types: Insecure Default Account Information Vulnerability Description: A vulnerability in Cisco Ultra Services Framework Element Manager could allow an authenticated, remote attacker to log in to the device with the privileges of the root user, aka an Insecure Default Account Information Vulnerability. More Information: CSCvd85710. Known Affected Releases: 21.0.v0.65839. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisc
Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-usf6 - http://www.securityfocus.com/bid/98980
CVE ID: CVE-2017-6693 State: PUBLISHED Published: 2017-06-13T06:00:00 Last Updated: 2024-08-05T15:41:17.436Z Vendors: n/a Products: Cisco Elastic Services Controller Problem Types: Unauthorized Directory Access Vulnerability Description: A vulnerability in the ConfD server component of Cisco Elastic Services Controllers could allow an authenticated, local attacker to access information stored in the file system of an affected system, aka Unauthorized Directory Access. More Information: CSCvd76286. Known Affected Releases: 2.2(9.76) 2.3(1). Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-e
ogram Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-esc7 - http://www.securityfocus.com/bid/98985
CVE ID: CVE-2017-6694 State: PUBLISHED Published: 2017-06-13T06:00:00 Last Updated: 2024-08-05T15:41:16.111Z Vendors: n/a Products: Cisco Ultra Services Platform Problem Types: Information Disclosure Vulnerability Description: A vulnerability in the Virtual Network Function Manager's (VNFM) logging function of Cisco Ultra Services Platform could allow an authenticated, local attacker to view sensitive data (cleartext credentials) on an affected system. More Information: CSCvd29355. Known Affected Releases: 21.0.v0.65839. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98972 - https://tools.cisco.com/security/center/content/CiscoSecurityAdviso
ferences: - http://www.securityfocus.com/bid/98972 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-usp1
CVE ID: CVE-2017-6695 State: PUBLISHED Published: 2017-06-13T06:00:00 Last Updated: 2024-08-05T15:41:17.137Z Vendors: n/a Products: Cisco Ultra Services Platform Problem Types: Information Disclosure Vulnerability Description: A vulnerability in the ConfD server in Cisco Ultra Services Platform could allow an authenticated, local attacker to view sensitive information. More Information: CSCvd29398. Known Affected Releases: 21.0.v0.65839. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98963 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-usp2
CVE ID: CVE-2017-6696 State: PUBLISHED Published: 2017-06-13T06:00:00 Last Updated: 2024-08-05T15:41:15.978Z Vendors: n/a Products: Cisco Elastic Services Controller Problem Types: Information Disclosure Vulnerability Description: A vulnerability in the file system of Cisco Elastic Services Controllers could allow an authenticated, local attacker to gain access to sensitive user credentials that are stored in an affected system. More Information: CSCvd73677. Known Affected Releases: 2.3(2). Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-esc8 - http://www.securityfocus.com/bid/98952
CVE ID: CVE-2017-6697 State: PUBLISHED Published: 2017-06-13T06:00:00 Last Updated: 2024-08-05T15:41:15.998Z Vendors: n/a Products: Cisco Elastic Services Controller Problem Types: Information Disclosure Vulnerability Description: A vulnerability in the web interface of Cisco Elastic Services Controllers could allow an authenticated, remote attacker to access sensitive system credentials that are stored in an affected system. More Information: CSCvd76339. Known Affected Releases: 2.2(9.76). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98959 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-esc9
CVE ID: CVE-2017-6698 State: PUBLISHED Published: 2017-07-04T00:00:00 Last Updated: 2024-08-05T15:41:16.119Z Vendors: n/a Products: Cisco Prime Infrastructure and Evolved Programmable Network Manager Problem Types: SQL Injection Vulnerability Description: A vulnerability in the Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM) SQL database interface could allow an authenticated, remote attacker to impact the confidentiality and integrity of the application by executing arbitrary SQL queries, aka SQL Injection. More Information: CSCvc23892 CSCvc35270 CSCvc35626 CSCvc35630 CSCvc49568. Known Affected Releases: 3.1(1) 2.0(4.0.45B). Additional Analyst Notes: - CVE Pr
35270 CSCvc35626 CSCvc35630 CSCvc49568. Known Affected Releases: 3.1(1) 2.0(4.0.45B). Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038751 - http://www.securityfocus.com/bid/99214 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-piepnm2
CVE ID: CVE-2017-6699 State: PUBLISHED Published: 2017-07-04T00:00:00 Last Updated: 2024-08-05T15:41:17.110Z Vendors: n/a Products: Cisco Prime Infrastructure and Evolved Programmable Network Manager Problem Types: Reflected Cross-Site Scripting Vulnerability Description: A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM) could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. More Information: CSCvc24616 CSCvc35363 CSCvc49574. Known Affected Releases: 3.1(1) 2.0(4.0.45B). Additional
ed device. More Information: CSCvc24616 CSCvc35363 CSCvc49574. Known Affected Releases: 3.1(1) 2.0(4.0.45B). Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038751 - http://www.securityfocus.com/bid/99221 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-piepnm3
CVE ID: CVE-2017-6700 State: PUBLISHED Published: 2017-07-04T00:00:00 Last Updated: 2024-08-05T15:41:16.105Z Vendors: n/a Products: Cisco Prime Infrastructure and Evolved Programmable Network Manager Problem Types: DOM Cross-Site Scripting Vulnerability Description: A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM) could allow an unauthenticated, remote attacker to conduct a Document Object Model (DOM) based (environment or client-side) cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. More Information: CSCvc24620 CSCvc49586. Known Affected Releas
the web-based management interface of an affected device. More Information: CSCvc24620 CSCvc49586. Known Affected Releases: 3.1(1) 2.0(4.0.45B). Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038751 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-piepnm4 - http://www.securityfocus.com/bid/99216
CVE ID: CVE-2017-6701 State: PUBLISHED Published: 2017-07-04T00:00:00 Last Updated: 2024-08-05T15:41:16.586Z Vendors: n/a Products: Cisco Identity Services Engine Problem Types: Cross-Site Scripting Vulnerability Description: A vulnerability in the web application interface of the Cisco Identity Services Engine (ISE) portal could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web interface of an affected system. More Information: CSCvd49141. Known Affected Releases: 2.1(102.101). Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-
: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-ise - http://www.securitytracker.com/id/1038740 - http://www.securityfocus.com/bid/99208
CVE ID: CVE-2017-6702 State: PUBLISHED Published: 2017-07-04T00:00:00 Last Updated: 2024-08-05T15:41:16.005Z Vendors: n/a Products: Cisco SocialMiner Problem Types: Cross-Site Scripting Vulnerability Description: A vulnerability in the web framework of Cisco SocialMiner could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected system. More Information: CSCve15285. Known Affected Releases: 11.5(1). Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038738 - http://www.securityfocus.com/bid/99205 - https://tools.cisco.com/security/center/content/CiscoSecurity
.com/id/1038738 - http://www.securityfocus.com/bid/99205 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-csm
CVE ID: CVE-2017-6703 State: PUBLISHED Published: 2017-07-04T00:00:00 Last Updated: 2024-08-05T15:41:16.555Z Vendors: n/a Products: Cisco Prime Collaboration Provisioning Tool Problem Types: Session Hijacking Vulnerability Description: A vulnerability in the web application in the Cisco Prime Collaboration Provisioning tool could allow an unauthenticated, remote attacker to hijack another user's session. More Information: CSCvc90346. Known Affected Releases: 12.1. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038744 - http://www.securityfocus.com/bid/99224 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20
tp://www.securityfocus.com/bid/99224 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-pcp1
CVE ID: CVE-2017-6704 State: PUBLISHED Published: 2017-07-04T00:00:00 Last Updated: 2024-08-05T15:41:16.684Z Vendors: n/a Products: Cisco Prime Collaboration Provisioning Tool Problem Types: Arbitrary File Download Vulnerability Description: A vulnerability in the web application in the Cisco Prime Collaboration Provisioning tool could allow an authenticated, remote attacker to perform arbitrary file downloads that could allow the attacker to read files from the underlying filesystem. More Information: CSCvc90335. Known Affected Releases: 12.1. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038744 - https://tools.cisco.com/security/center/
VE Program Container: References: - http://www.securitytracker.com/id/1038744 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-pcp2 - http://www.securityfocus.com/bid/99223
CVE ID: CVE-2017-6705 State: PUBLISHED Published: 2017-07-04T00:00:00 Last Updated: 2024-08-05T15:41:16.085Z Vendors: n/a Products: Cisco Prime Collaboration Provisioning Tool Problem Types: Information Disclosure Vulnerability Description: A vulnerability in the filesystem of the Cisco Prime Collaboration Provisioning tool could allow an authenticated, local attacker to acquire sensitive information. More Information: CSCvc82973. Known Affected Releases: 12.1. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038744 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-pcp3 - http://www.securityfocus.com/b
://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-pcp3 - http://www.securityfocus.com/bid/99206
CVE ID: CVE-2017-6706 State: PUBLISHED Published: 2017-07-04T00:00:00 Last Updated: 2024-08-05T15:41:16.112Z Vendors: n/a Products: Cisco Prime Collaboration Provisioning Tool Problem Types: Log File Information Disclosure Vulnerability Description: A vulnerability in the logging subsystem of the Cisco Prime Collaboration Provisioning tool could allow an unauthenticated, local attacker to acquire sensitive information. More Information: CSCvd07260. Known Affected Releases: 12.1. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-pcp4 - http://www.securitytracker.com/id/1038744 - http://www.s
y/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-pcp4 - http://www.securitytracker.com/id/1038744 - http://www.securityfocus.com/bid/99204
CVE ID: CVE-2017-6707 State: PUBLISHED Published: 2017-07-06T00:00:00 Last Updated: 2024-08-05T15:41:17.086Z Vendors: n/a Products: Cisco StarOS Problem Types: CWE-78 Description: A vulnerability in the CLI command-parsing code of the Cisco StarOS operating system for Cisco ASR 5000 Series 11.0 through 21.0, 5500 Series, and 5700 Series devices and Cisco Virtualized Packet Core (VPC) Software could allow an authenticated, local attacker to break from the StarOS CLI of an affected system and execute arbitrary shell commands as a Linux root user on the system, aka Command Injection. The vulnerability exists because the affected operating system does not sufficiently sanitize commands before in
ection. The vulnerability exists because the affected operating system does not sufficiently sanitize commands before inserting them into Linux shell commands. An attacker could exploit this vulnerability by submitting a crafted CLI command for execution in a Linux shell command as a root user. Cisco Bug IDs: CSCvc69329, CSCvc72930. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038818 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-asrcmd - http://www.securityfocus.com/bid/99462
CVE ID: CVE-2017-6708 State: PUBLISHED Published: 2017-07-06T00:00:00 Last Updated: 2024-08-05T15:41:17.598Z Vendors: n/a Products: Cisco Ultra Services Framework Problem Types: CWE-200 Description: A vulnerability in the symbolic link (symlink) creation functionality of the AutoVNF tool for the Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to read sensitive files or execute malicious code on an affected system. The vulnerability is due to the absence of validation checks for the input that is used to create symbolic links. This vulnerability affects all releases of the Cisco Ultra Services Framework prior to Releases 5.0.3 and 5.1. Cisco Bug IDs: CSCvc76654.
y affects all releases of the Cisco Ultra Services Framework prior to Releases 5.0.3 and 5.1. Cisco Bug IDs: CSCvc76654. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99512 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-usf1
CVE ID: CVE-2017-6709 State: PUBLISHED Published: 2017-07-06T00:00:00 Last Updated: 2024-08-05T15:41:17.038Z Vendors: n/a Products: Cisco Ultra Services Framework Problem Types: CWE-200 Description: A vulnerability in the AutoVNF tool for the Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to access administrative credentials for Cisco Elastic Services Controller (ESC) and Cisco OpenStack deployments in an affected system. The vulnerability exists because the affected software logs administrative credentials in clear text for Cisco ESC and Cisco OpenStack deployment purposes. An attacker could exploit this vulnerability by accessing the AutoVNF URL for the loca
co OpenStack deployment purposes. An attacker could exploit this vulnerability by accessing the AutoVNF URL for the location where the log files are stored and subsequently accessing the administrative credentials that are stored in clear text in those log files. This vulnerability affects all releases of the Cisco Ultra Services Framework prior to Releases 5.0.3 and 5.1. Cisco Bug IDs: CSCvc76659. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-usf2
CVE ID: CVE-2017-6710 State: PUBLISHED Published: 2017-08-17T20:00:00Z Last Updated: 2024-09-16T18:23:35.023Z Vendors: Cisco Systems, Inc. Products: Virtual Network Function (VNF) Element Manager Problem Types: Arbitrary Command Execution Description: A vulnerability in the Cisco Virtual Network Function (VNF) Element Manager could allow an authenticated, remote attacker to elevate privileges and run commands in the context of the root user on the server. The vulnerability is due to command settings that allow Cisco VNF Element Manager users to specify arbitrary commands that will run as root on the server. An attacker could use this setting to elevate privileges and run commands in the cont
at will run as root on the server. An attacker could use this setting to elevate privileges and run commands in the context of the root user on the server. Cisco Bug IDs: CSCvc76670. Known Affected Releases: prior to 5.0.4 and 5.1.4. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100362 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-em
CVE ID: CVE-2017-6711 State: PUBLISHED Published: 2017-07-06T00:00:00 Last Updated: 2024-08-05T15:41:17.305Z Vendors: n/a Products: Cisco Ultra Services Framework Problem Types: CWE-287 Description: A vulnerability in the Ultra Automation Service (UAS) of the Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to gain unauthorized access to a targeted device. The vulnerability is due to an insecure default configuration of the Apache ZooKeeper service used by the affected software. An attacker could exploit this vulnerability by accessing the affected device through the orchestrator network. An exploit could allow the attacker to gain access to ZooKeeper data nodes
cted device through the orchestrator network. An exploit could allow the attacker to gain access to ZooKeeper data nodes (znodes) and influence the behavior of the system's high-availability feature. This vulnerability affects all releases of Cisco Ultra Services Framework UAS prior to Releases 5.0.3 and 5.1. Cisco Bug IDs: CSCvd29395. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99440 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-uas
CVE ID: CVE-2017-6712 State: PUBLISHED Published: 2017-07-06T00:00:00 Last Updated: 2024-08-05T15:41:17.088Z Vendors: n/a Products: Cisco Elastic Services Controller Problem Types: CWE-78 Description: A vulnerability in certain commands of Cisco Elastic Services Controller could allow an authenticated, remote attacker to elevate privileges to root and run dangerous commands on the server. The vulnerability occurs because a "tomcat" user on the system can run certain shell commands, allowing the user to overwrite any file on the filesystem and elevate privileges to root. This vulnerability affects Cisco Elastic Services Controller prior to releases 2.3.1.434 and 2.3.2. Cisco Bug IDs: CSCvc766
s vulnerability affects Cisco Elastic Services Controller prior to releases 2.3.1.434 and 2.3.2. Cisco Bug IDs: CSCvc76634. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-esc1 - http://www.securityfocus.com/bid/99461
CVE ID: CVE-2017-6713 State: PUBLISHED Published: 2017-07-06T00:00:00 Last Updated: 2024-08-05T15:41:16.902Z Vendors: n/a Products: Cisco Elastic Services Controller Problem Types: CWE-264 Description: A vulnerability in the Play Framework of Cisco Elastic Services Controller (ESC) could allow an unauthenticated, remote attacker to gain full access to the affected system. The vulnerability is due to static, default credentials for the Cisco ESC UI that are shared between installations. An attacker who can extract the static credentials from an existing installation of Cisco ESC could generate an admin session token that allows access to all instances of the ESC web UI. This vulnerability aff