Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-3373 State: PUBLISHED Published: 2013-08-23T16:00:00Z Last Updated: 2024-09-16T17:33:13.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a MIME header. Additional Analyst Notes: - CVE Program Container: References: - http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000228.html - http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000226.html - http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000227.html - http://www.osvdb.org/
2013-May/000226.html - http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000227.html - http://www.osvdb.org/93606 - http://secunia.com/advisories/53505 - http://www.debian.org/security/2012/dsa-2670 - http://secunia.com/advisories/53522
CVE ID: CVE-2013-3374 State: PUBLISHED Published: 2013-08-23T16:00:00Z Last Updated: 2024-09-17T03:53:01.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13, when using the Apache::Session::File session store, allows remote attackers to obtain sensitive information (user preferences and caches) via unknown vectors, related to a "limited session re-use." Additional Analyst Notes: - CVE Program Container: References: - http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000228.html - http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000226.html - http://lists.bestprac
2013-May/000228.html - http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000226.html - http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000227.html - http://secunia.com/advisories/53505 - http://www.debian.org/security/2012/dsa-2670 - http://secunia.com/advisories/53522 - http://www.osvdb.org/93605
CVE ID: CVE-2013-3375 State: PUBLISHED Published: 2013-06-14T10:00:00Z Last Updated: 2024-09-17T02:52:30.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the portal page in Cisco Prime Central for Hosted Collaboration Solution allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCue23798. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3375
CVE ID: CVE-2013-3376 State: PUBLISHED Published: 2013-06-14T10:00:00Z Last Updated: 2024-09-16T20:17:20.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in the help page in Cisco Video Surveillance Operations Manager allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL, aka Bug ID CSCty74490. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3376
CVE ID: CVE-2013-3377 State: PUBLISHED Published: 2013-06-21T10:00:00Z Last Updated: 2024-09-17T03:18:46.037Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco TelePresence TC Software before 5.1.7 and TE Software before 4.1.3 allow remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCue01743. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130619-tpc
CVE ID: CVE-2013-3378 State: PUBLISHED Published: 2013-06-21T10:00:00Z Last Updated: 2024-09-17T01:56:54.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco TelePresence TC Software before 6.1 and TE Software before 4.1.3 allow remote attackers to cause a denial of service (temporary device hang) via crafted SIP packets, aka Bug ID CSCuf89557. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130619-tpc
CVE ID: CVE-2013-3379 State: PUBLISHED Published: 2013-06-21T10:00:00Z Last Updated: 2024-09-16T18:08:43.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: The firewall subsystem in Cisco TelePresence TC Software before 4.2 does not properly implement rules that grant access to hosts, which allows remote attackers to obtain shell access with root privileges by leveraging connectivity to the management network, aka Bug ID CSCts37781. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130619-tpc
CVE ID: CVE-2013-3380 State: PUBLISHED Published: 2013-06-12T01:00:00Z Last Updated: 2024-09-17T03:07:16.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: The administrative web interface in the Access Control Server in Cisco Secure Access Control System (ACS) does not properly restrict the report view page, which allows remote authenticated users to obtain sensitive information via a direct request, aka Bug ID CSCue79279. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3380
CVE ID: CVE-2013-3381 State: PUBLISHED Published: 2013-06-12T01:00:00Z Last Updated: 2024-09-17T03:13:04.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Hosted Collaboration Mediation allows remote attackers to cause a denial of service (CPU consumption) via a flood of malformed UDP packets on port 162, aka Bug ID CSCug85756. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3381
CVE ID: CVE-2013-3382 State: PUBLISHED Published: 2013-06-26T19:00:00Z Last Updated: 2024-09-17T00:35:35.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Next-Generation Firewall (aka NGFW, formerly CX Context-Aware Security) module 9.x before 9.1.1.9 and 9.1.2.x before 9.1.2.12 for Cisco Adaptive Security Appliances (ASA) devices allows remote attackers to cause a denial of service (device reload or traffic-processing outage) via fragmented (1) IPv4 or (2) IPv6 traffic, aka Bug ID CSCue88387. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130626-ngfw
CVE ID: CVE-2013-3383 State: PUBLISHED Published: 2013-06-27T21:00:00Z Last Updated: 2024-09-16T16:58:42.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web framework in IronPort AsyncOS on Cisco Web Security Appliance devices before 7.1.3-013, 7.5 before 7.5.0-838, and 7.7 before 7.7.0-550 allows remote authenticated users to execute arbitrary commands via crafted command-line input in a URL sent over IPv4, aka Bug ID CSCzv69294. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130626-wsa
CVE ID: CVE-2013-3384 State: PUBLISHED Published: 2013-06-27T21:00:00Z Last Updated: 2024-09-16T18:09:15.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web framework in IronPort AsyncOS on Cisco Web Security Appliance devices before 7.1.3-013, 7.5 before 7.5.0-838, and 7.7 before 7.7.0-550; Email Security Appliance devices before 7.1.5-104, 7.3 before 7.3.2-026, 7.5 before 7.5.2-203, and 7.6 before 7.6.3-019; and Content Security Management Appliance devices before 7.2.2-110, 7.7 before 7.7.0-213, and 7.8 and 7.9 before 7.9.1-102 allows remote authenticated users to execute arbitrary commands via crafted command-line input in a URL, aka Bug IDs CSCzv85726, CSCzv44633, an
ated users to execute arbitrary commands via crafted command-line input in a URL, aka Bug IDs CSCzv85726, CSCzv44633, and CSCzv24579. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130626-wsa - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130626-sma - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130626-esa
CVE ID: CVE-2013-3385 State: PUBLISHED Published: 2013-06-27T21:00:00Z Last Updated: 2024-09-16T17:58:38.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: The management GUI in the web framework in IronPort AsyncOS on Cisco Web Security Appliance devices before 7.1.3-013, 7.5 before 7.5.0-838, and 7.7 before 7.7.0-602; Email Security Appliance devices before 7.1.5-106 and 7.3, 7.5, and 7.6 before 7.6.3-019; and Content Security Management Appliance devices before 7.9.1-102 and 8.0 before 8.0.0-404 allows remote attackers to cause a denial of service (system hang) via a series of (1) HTTP or (2) HTTPS requests to a management interface, aka Bug IDs CSCzv58669, CSCzv63329, and CS
ng) via a series of (1) HTTP or (2) HTTPS requests to a management interface, aka Bug IDs CSCzv58669, CSCzv63329, and CSCzv78669. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130626-wsa - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130626-sma - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130626-esa
CVE ID: CVE-2013-3386 State: PUBLISHED Published: 2013-06-27T21:00:00Z Last Updated: 2024-09-16T22:41:27.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IronPort Spam Quarantine (ISQ) component in the web framework in IronPort AsyncOS on Cisco Email Security Appliance devices before 7.1.5-106 and 7.3, 7.5, and 7.6 before 7.6.3-019 and Content Security Management Appliance devices before 7.9.1-102 and 8.0 before 8.0.0-404 allows remote attackers to cause a denial of service (service crash or hang) via a high rate of TCP connection attempts, aka Bug IDs CSCzv25573 and CSCzv81712. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/securit
Czv25573 and CSCzv81712. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130626-sma - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130626-esa
CVE ID: CVE-2013-3387 State: PUBLISHED Published: 2013-08-25T01:00:00Z Last Updated: 2024-09-17T02:20:36.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance 8.6 and 9.x before 9.2(1) allows remote attackers to cause a denial of service (disk consumption) via a flood of TCP packets to port 5400, leading to large error-log files, aka Bug ID CSCua42724. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130821-hcm
CVE ID: CVE-2013-3388 State: PUBLISHED Published: 2013-08-25T01:00:00Z Last Updated: 2024-09-16T20:31:23.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance 8.6 and 9.x before 9.2(1) allows remote attackers to cause a denial of service (memory consumption) via a flood of TCP packets to port 44444, aka Bug ID CSCtz92776. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130821-hcm
CVE ID: CVE-2013-3389 State: PUBLISHED Published: 2013-08-25T01:00:00Z Last Updated: 2024-09-16T21:56:43.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance 8.6 and 9.x before 9.2(1) allows remote attackers to cause a denial of service (memory consumption) via a flood of TCP packets to port (1) 61615 or (2) 61616, aka Bug ID CSCtz90114. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130821-hcm
CVE ID: CVE-2013-3390 State: PUBLISHED Published: 2013-08-25T01:00:00Z Last Updated: 2024-09-17T01:11:00.893Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance 8.6 and 9.x before 9.2(1) allows remote attackers to cause a denial of service (memory consumption) via a flood of TCP packets, aka Bug ID CSCub59158. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130821-hcm
CVE ID: CVE-2013-3392 State: PUBLISHED Published: 2013-06-21T21:00:00Z Last Updated: 2024-09-16T23:55:53.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Cisco WebEx Social allow remote attackers to hijack the authentication of arbitrary users via unspecified vectors, aka Bug IDs CSCuh10405 and CSCuh10355. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3392
CVE ID: CVE-2013-3393 State: PUBLISHED Published: 2013-06-26T19:00:00Z Last Updated: 2024-09-17T02:37:00.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Precision Video Engine component in Cisco Jabber for Windows and Cisco Virtualization Experience Media Engine allows remote attackers to cause a denial of service (process crash and call disconnection) via crafted RTP packets, aka Bug IDs CSCuh60706 and CSCue21117. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3393
CVE ID: CVE-2013-3394 State: PUBLISHED Published: 2013-11-27T02:00:00 Last Updated: 2024-08-06T16:07:38.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the web interface in Cisco Prime Network Registrar 8.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted field, aka Bug ID CSCuh41429. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3394 - http://tools.cisco.com/security/center/viewAlert.x?alertId=31921
CVE ID: CVE-2013-3395 State: PUBLISHED Published: 2013-07-02T01:00:00Z Last Updated: 2024-09-16T19:01:42.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the web framework on Cisco IronPort Web Security Appliance (WSA) devices, Email Security Appliance (ESA) devices, and Content Security Management Appliance (SMA) devices allows remote attackers to hijack the authentication of arbitrary users, aka Bug IDs CSCuh70263, CSCuh70323, and CSCuh26634. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3395
CVE ID: CVE-2013-3396 State: PUBLISHED Published: 2013-06-26T21:00:00 Last Updated: 2024-08-06T16:07:37.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the web framework in Cisco Content Security Management on Security Management Appliance (SMA) devices allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCuh24749. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/60829 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3396
CVE ID: CVE-2013-3397 State: PUBLISHED Published: 2013-06-26T21:00:00Z Last Updated: 2024-09-17T03:48:56.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Unified Serviceability component in Cisco Unified Communications Manager (CUCM) allows remote attackers to hijack the authentication of arbitrary users for requests that perform Unified Serviceability actions, aka Bug ID CSCuh10298. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3397
CVE ID: CVE-2013-3398 State: PUBLISHED Published: 2013-06-26T21:00:00Z Last Updated: 2024-09-16T19:00:06.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web framework in Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance provides different responses to requests for arbitrary pathnames depending on whether the pathname exists, which allows remote attackers to enumerate directories and files via a series of crafted requests, aka Bug ID CSCuh64574. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3398
CVE ID: CVE-2013-3399 State: PUBLISHED Published: 2013-07-02T01:00:00Z Last Updated: 2024-09-17T02:57:18.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in an unspecified Android API on the Cisco Desktop Collaboration Experience DX650 allows attackers to execute arbitrary code via vectors that leverage incorrect memory allocation, aka Bug IDs CSCuf93957, CSCug22352, and CSCug22462. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3399
CVE ID: CVE-2013-3400 State: PUBLISHED Published: 2013-07-10T20:00:00 Last Updated: 2024-08-06T16:07:37.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: The license-installation module in Cisco NX-OS on Nexus 1000V devices allows local users to execute arbitrary commands via crafted "install license" arguments, aka Bug ID CSCuh30824. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1028763 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3400
CVE ID: CVE-2013-3401 State: PUBLISHED Published: 2013-07-02T01:00:00Z Last Updated: 2024-09-17T03:32:36.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SIP implementation in Cisco TelePresence TC Software allows remote attackers to trigger unintended use of NOTIFY messages via unspecified vectors, aka Bug ID CSCud96080. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3401
CVE ID: CVE-2013-3402 State: PUBLISHED Published: 2013-07-18T00:00:00 Last Updated: 2024-08-06T16:07:38.002Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unspecified function in Cisco Unified Communications Manager (CUCM) 7.1(x) through 9.1(2) allows remote authenticated users to execute arbitrary commands via unknown vectors, aka Bug ID CSCuh73440. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/54249 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130717-cucm
CVE ID: CVE-2013-3403 State: PUBLISHED Published: 2013-07-18T00:00:00 Last Updated: 2024-08-06T16:07:37.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple untrusted search path vulnerabilities in Cisco Unified Communications Manager (CUCM) 7.1(x) through 9.1(1a) allow local users to gain privileges by leveraging unspecified file-permission and environment-variable issues for privileged programs, aka Bug ID CSCuh73454. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/54249 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130717-cucm
CVE ID: CVE-2013-3404 State: PUBLISHED Published: 2013-07-18T00:00:00 Last Updated: 2024-08-06T16:07:37.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Cisco Unified Communications Manager (CUCM) 7.1(x) through 9.1(1a) allows remote attackers to execute arbitrary SQL commands via unspecified vectors, leading to discovery of encrypted credentials by leveraging metadata, aka Bug ID CSCuh01051. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/54249 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130717-cucm
CVE ID: CVE-2013-3405 State: PUBLISHED Published: 2013-07-10T20:00:00Z Last Updated: 2024-09-17T00:57:08.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web portal in TC software on Cisco TelePresence endpoints does not require an exact password match during a login attempt by a user who has not configured a password, which allows remote attackers to bypass authentication by sending an arbitrary password, aka Bug ID CSCud96071. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3405
CVE ID: CVE-2013-3406 State: PUBLISHED Published: 2013-11-16T02:00:00Z Last Updated: 2024-09-17T03:32:37.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "Files Available for Download" implementation in the Cisco Intelligent Automation for Cloud component in Cisco Services Portal 9.4(1) allows remote authenticated users to read arbitrary files via a crafted request, aka Bug ID CSCug65687. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=31775 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3406
CVE ID: CVE-2013-3407 State: PUBLISHED Published: 2013-11-16T02:00:00Z Last Updated: 2024-09-16T17:28:31.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface in Cisco Server Provisioner 6.4.0 Patch 5-1301292331 and earlier does not require authentication for unspecified pages, which allows remote attackers to obtain sensitive information via a direct request, aka Bug ID CSCug65664. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=31776 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3407
CVE ID: CVE-2013-3408 State: PUBLISHED Published: 2013-07-10T21:00:00 Last Updated: 2024-08-06T16:07:37.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: The firmware on Cisco Virtualization Experience Client 6000 devices sets incorrect operating-system permissions, which allows local users to gain privileges via an unspecified sequence of commands, aka Bug ID CSCuc31764. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3408 - http://www.securitytracker.com/id/1028764
CVE ID: CVE-2013-3409 State: PUBLISHED Published: 2013-10-10T10:00:00Z Last Updated: 2024-09-16T20:37:12.014Z Vendors: n/a Products: n/a Problem Types: n/a Description: The portal in Cisco Prime Central for Hosted Collaboration Solution (HCS) places cleartext credentials in temporary files, which allows local users to obtain sensitive information by leveraging weak file permissions to read these files, aka Bug IDs CSCuh33735 and CSCuh34230. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3409
CVE ID: CVE-2013-3410 State: PUBLISHED Published: 2013-07-18T00:00:00 Last Updated: 2024-08-06T16:07:38.004Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Intrusion Prevention System (IPS) Software on IPS NME devices before 7.0(9)E4 allows remote attackers to cause a denial of service (device reload) via malformed IPv4 packets that trigger incorrect memory allocation, aka Bug ID CSCua61977. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130717-ips - http://secunia.com/advisories/54243