Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
d exploit this vulnerability by sending a crafted TCP traffic stream in which specific types of TCP packets are flooded to an affected device, for example a TCP packet stream in which the TCP FIN bit is set in all the TCP packets. A successful exploit could allow the attacker to cause certain TCP listening ports on the affected system to stop accepting incoming connections for a period of time or until the affected device is restarted, resulting in a DoS condition. In addition, system resources, such as CPU and memory, could be exhausted during the attack. Cisco Bug IDs: CSCva29806. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98532 - http
Cva29806. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98532 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-rem1
CVE ID: CVE-2017-6642 State: PUBLISHED Published: 2017-05-22T01:00:00 Last Updated: 2024-08-05T15:33:20.454Z Vendors: n/a Products: Cisco Remote Expert Manager Problem Types: CWE-200 Description: A vulnerability in the web interface of Cisco Remote Expert Manager Software 11.0.0 could allow an unauthenticated, remote attacker to access sensitive information on an affected system. The vulnerability exists because the affected software does not sufficiently protect sensitive data when responding to HTTP requests that are sent to the web interface of the software. An attacker could exploit this vulnerability by sending crafted HTTP requests to the web interface of the software on an affected sy
could exploit this vulnerability by sending crafted HTTP requests to the web interface of the software on an affected system. A successful exploit could allow the attacker to access sensitive information about the software. The attacker could use this information to conduct additional reconnaissance attacks. Cisco Bug IDs: CSCvc52856. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98534 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-rem2
CVE ID: CVE-2017-6643 State: PUBLISHED Published: 2017-05-22T01:00:00 Last Updated: 2024-08-05T15:33:20.473Z Vendors: n/a Products: Cisco Remote Expert Manager Problem Types: CWE-200 Description: A vulnerability in the web interface of Cisco Remote Expert Manager Software 11.0.0 could allow an unauthenticated, remote attacker to access sensitive Virtual Directory information on an affected system. The vulnerability exists because the affected software does not sufficiently protect sensitive data when responding to HTTP requests that are sent to the web interface of the software. An attacker could exploit this vulnerability by sending crafted HTTP requests to the web interface of the software
ware. An attacker could exploit this vulnerability by sending crafted HTTP requests to the web interface of the software on an affected system. A successful exploit could allow the attacker to access sensitive information about the software. The attacker could use this information to conduct additional reconnaissance attacks. Cisco Bug IDs: CSCvc52858. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98542 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-rem3
CVE ID: CVE-2017-6644 State: PUBLISHED Published: 2017-05-22T01:00:00 Last Updated: 2024-08-05T15:33:20.463Z Vendors: n/a Products: Cisco Remote Expert Manager Problem Types: CWE-200 Description: A vulnerability in the web interface of Cisco Remote Expert Manager Software 11.0.0 could allow an unauthenticated, remote attacker to access sensitive information on an affected system. The vulnerability exists because the affected software does not sufficiently protect sensitive data when responding to HTTP requests that are sent to the web interface of the software. An attacker could exploit this vulnerability by sending crafted HTTP requests to the web interface of the software on an affected sy
could exploit this vulnerability by sending crafted HTTP requests to the web interface of the software on an affected system. A successful exploit could allow the attacker to access sensitive information about the software. The attacker could use this information to conduct additional reconnaissance attacks. Cisco Bug IDs: CSCvc52860. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98539 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-rem4
CVE ID: CVE-2017-6645 State: PUBLISHED Published: 2017-05-22T01:00:00 Last Updated: 2024-08-05T15:33:20.438Z Vendors: n/a Products: Cisco Remote Expert Manager Problem Types: CWE-200 Description: A vulnerability in the web interface of Cisco Remote Expert Manager Software 11.0.0 could allow an unauthenticated, remote attacker to access sensitive Virtual Temporary Directory information on an affected system. The vulnerability exists because the affected software does not sufficiently protect sensitive data when responding to HTTP requests that are sent to the web interface of the software. An attacker could exploit this vulnerability by sending crafted HTTP requests to the web interface of th
f the software. An attacker could exploit this vulnerability by sending crafted HTTP requests to the web interface of the software on an affected system. A successful exploit could allow the attacker to access sensitive information about the software. The attacker could use this information to conduct additional reconnaissance attacks. Cisco Bug IDs: CSCvc52861. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98537 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-rem5
CVE ID: CVE-2017-6646 State: PUBLISHED Published: 2017-05-22T01:00:00 Last Updated: 2024-08-05T15:33:20.478Z Vendors: n/a Products: Cisco Remote Expert Manager Problem Types: CWE-200 Description: A vulnerability in the web interface of Cisco Remote Expert Manager Software 11.0.0 could allow an unauthenticated, remote attacker to access sensitive Order information on an affected system. The vulnerability exists because the affected software does not sufficiently protect sensitive data when responding to HTTP requests that are sent to the web interface of the software. An attacker could exploit this vulnerability by sending crafted HTTP requests to the web interface of the software on an affec
acker could exploit this vulnerability by sending crafted HTTP requests to the web interface of the software on an affected system. A successful exploit could allow the attacker to access sensitive information about the software. The attacker could use this information to conduct additional reconnaissance attacks. Cisco Bug IDs: CSCvc52866 CSCvc52868. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98529 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-rem6
CVE ID: CVE-2017-6647 State: PUBLISHED Published: 2017-05-22T01:00:00 Last Updated: 2024-08-05T15:33:20.474Z Vendors: n/a Products: Cisco Remote Expert Manager Problem Types: CWE-200 Description: A vulnerability in the web interface of Cisco Remote Expert Manager Software 11.0.0 could allow an unauthenticated, remote attacker to access sensitive Temporary File information on an affected system. The vulnerability exists because the affected software does not sufficiently protect sensitive data when responding to HTTP requests that are sent to the web interface of the software. An attacker could exploit this vulnerability by sending crafted HTTP requests to the web interface of the software on
e. An attacker could exploit this vulnerability by sending crafted HTTP requests to the web interface of the software on an affected system. A successful exploit could allow the attacker to access sensitive information about the software. The attacker could use this information to conduct additional reconnaissance attacks. Cisco Bug IDs: CSCvc52875. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-rem7 - http://www.securityfocus.com/bid/98538
CVE ID: CVE-2017-6648 State: PUBLISHED Published: 2017-06-08T13:00:00 Last Updated: 2024-08-05T15:33:20.463Z Vendors: n/a Products: Cisco TelePresence Endpoint Denial of Service Vulnerability Problem Types: CWE-399 Description: A vulnerability in the Session Initiation Protocol (SIP) of the Cisco TelePresence Codec (TC) and Collaboration Endpoint (CE) Software could allow an unauthenticated, remote attacker to cause a TelePresence endpoint to reload unexpectedly, resulting in a denial of service (DoS) condition. The vulnerability is due to a lack of flow-control mechanisms within the software. An attacker could exploit this vulnerability by sending a flood of SIP INVITE packets to the affect
within the software. An attacker could exploit this vulnerability by sending a flood of SIP INVITE packets to the affected device. An exploit could allow the attacker to impact the availability of services and data of the device, including a complete DoS condition. This vulnerability affects the following Cisco TC and CE platforms when running software versions prior to TC 7.3.8 and CE 8.3.0. Cisco Bug IDs: CSCux94002. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-tele - http://www.securityfocus.com/bid/98934 - http://www.securitytracker.com/id/1038624
CVE ID: CVE-2017-6649 State: PUBLISHED Published: 2017-05-22T01:00:00 Last Updated: 2024-08-05T15:33:20.460Z Vendors: n/a Products: Cisco Nexus Series Switches Problem Types: CWE-20 Description: A vulnerability in the CLI of Cisco NX-OS System Software 7.1 through 7.3 running on Cisco Nexus Series Switches could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command arguments. An attacker could exploit this vulnerability by injecting crafted command arguments into a vulnerable CLI command. An exploit could allow the attacker to read or write arbitrary files at the user's privilege level outside of the
mmand. An exploit could allow the attacker to read or write arbitrary files at the user's privilege level outside of the user's path. Cisco Bug IDs: CSCvb86787, CSCve60516, CSCve60555. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038518 - http://www.securityfocus.com/bid/98531 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-nss
CVE ID: CVE-2017-6650 State: PUBLISHED Published: 2017-05-22T01:00:00 Last Updated: 2024-08-05T15:33:20.449Z Vendors: n/a Products: Cisco Nexus Series Switches Problem Types: CWE-20 Description: A vulnerability in the Telnet CLI command of Cisco NX-OS System Software 7.1 through 7.3 running on Cisco Nexus Series Switches could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command arguments. An attacker could exploit this vulnerability by injecting crafted command arguments into the Telnet CLI command. An exploit could allow the attacker to read or write arbitrary files at the user's privilege level o
Telnet CLI command. An exploit could allow the attacker to read or write arbitrary files at the user's privilege level outside of the user's path. Cisco Bug IDs: CSCvb86771. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038518 - http://www.securityfocus.com/bid/98528 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-nss1
CVE ID: CVE-2017-6651 State: PUBLISHED Published: 2017-05-16T17:00:00 Last Updated: 2024-08-05T15:33:20.479Z Vendors: n/a Products: Cisco WebEx Meetings Server Problem Types: CWE-200 Description: A vulnerability in Cisco WebEx Meetings Server could allow unauthenticated, remote attackers to gain information that could allow them to access scheduled customer meetings. The vulnerability is due to an incomplete configuration of the robots.txt file on customer-hosted WebEx solutions and occurs when the Short URL functionality is not activated. All releases of Cisco WebEx Meetings Server later than release 2.5MR4 provide this functionality. An attacker could exploit this vulnerability via an expo
gs Server later than release 2.5MR4 provide this functionality. An attacker could exploit this vulnerability via an exposed parameter to search for indexed meeting information. A successful exploit could allow the attacker to obtain scheduled meeting information and potentially allow the attacker to attend scheduled, customer meetings. This vulnerability affects the following releases of Cisco WebEx Meetings Server: 2.5, 2.6, 2.7, 2.8. Cisco Bug IDs: CSCve25950. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038459 - http://www.securityfocus.com/bid/98387 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-2017
://www.securityfocus.com/bid/98387 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170510-cwms
CVE ID: CVE-2017-6652 State: PUBLISHED Published: 2017-05-18T19:00:00 Last Updated: 2024-08-05T15:33:20.520Z Vendors: n/a Products: Cisco TelePresence IX5000 Series Problem Types: CWE-22 Description: A vulnerability in the web framework of the Cisco TelePresence IX5000 Series could allow an unauthenticated, remote attacker to access arbitrary files on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by using directory traversal techniques to read files within the Cisco TelePresence IX5000 Series filesystem. This vulnerability affects Cisco TelePresence IX5000 Series devices running software version 8.2.0. Cisco Bug ID
system. This vulnerability affects Cisco TelePresence IX5000 Series devices running software version 8.2.0. Cisco Bug IDs: CSCvc52325. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98519 - http://www.securitytracker.com/id/1038509 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-telepresence-ix5000
CVE ID: CVE-2017-6653 State: PUBLISHED Published: 2017-05-22T01:00:00 Last Updated: 2024-08-05T15:33:20.460Z Vendors: n/a Products: Cisco Identity Services Engine Problem Types: CWE-399 Description: A vulnerability in the TCP throttling process for the GUI of the Cisco Identity Services Engine (ISE) 2.1(0.474) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device where the ISE GUI may fail to respond to new or established connection requests. The vulnerability is due to insufficient TCP rate limiting protection on the GUI. An attacker could exploit this vulnerability by sending the affected device a high rate of TCP connections to
the GUI. An attacker could exploit this vulnerability by sending the affected device a high rate of TCP connections to the GUI. An exploit could allow the attacker to cause the GUI to stop responding while the high rate of connections is in progress. Cisco Bug IDs: CSCvc81803. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98536 - http://www.securitytracker.com/id/1038516 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-ise
CVE ID: CVE-2017-6654 State: PUBLISHED Published: 2017-05-22T01:00:00 Last Updated: 2024-08-05T15:33:20.440Z Vendors: n/a Products: Cisco Unified Communications Manager Problem Types: CWE-79 Description: A vulnerability in the web-based management interface of Cisco Unified Communications Manager 10.5 through 11.5 could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading a user of the inte
anagement interface of an affected device. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or allow the attacker to access sensitive browser-based information. Cisco Bug IDs: CSCvc06608. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038512 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-ucm - http://www.securityfocus.com/bid/98527
CVE ID: CVE-2017-6655 State: PUBLISHED Published: 2017-06-13T06:00:00 Last Updated: 2024-08-05T15:33:20.457Z Vendors: n/a Products: Cisco NX-OS Software Fibre Channel over Ethernet Problem Types: Denial of Service Vulnerability Description: A vulnerability in the Fibre Channel over Ethernet (FCoE) protocol implementation in Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition when an FCoE-related process unexpectedly reloads. This vulnerability affects Cisco NX-OS Software on the following Cisco devices when they are configured for FCoE: Multilayer Director Switches, Nexus 7000 Series Switches, Nexus 7700 Series Switches. More In
y are configured for FCoE: Multilayer Director Switches, Nexus 7000 Series Switches, Nexus 7700 Series Switches. More Information: CSCvc91729. Known Affected Releases: 8.3(0)CV(0.833). Known Fixed Releases: 8.3(0)ISH(0.62) 8.3(0)CV(0.944) 8.1(1) 8.1(0.8)S0 7.3(2)D1(0.47). Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038628 - http://www.securityfocus.com/bid/98991 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-nxos
CVE ID: CVE-2017-6656 State: PUBLISHED Published: 2017-06-13T06:00:00 Last Updated: 2024-08-05T15:33:20.462Z Vendors: n/a Products: Cisco IP Phone 8800 Series Problem Types: Denial of Service Vulnerability Description: A vulnerability in Session Initiation Protocol (SIP) call handling of Cisco IP Phone 8800 Series devices could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition due to the SIP process unexpectedly restarting. All active phone calls are dropped as the SIP process restarts. More Information: CSCvc29353. Known Affected Releases: 11.0(0.1). Known Fixed Releases: 11.0(0)MP2.153 11.0(0)MP2.62. Additional Analyst Notes: - CVE Program Container: Re
es: 11.0(0.1). Known Fixed Releases: 11.0(0)MP2.153 11.0(0)MP2.62. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98996 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-sip - http://www.securitytracker.com/id/1038636
CVE ID: CVE-2017-6657 State: PUBLISHED Published: 2017-05-16T17:00:00 Last Updated: 2024-08-05T15:33:20.453Z Vendors: n/a Products: Snort 3.0 All versions prior to build 233. Problem Types: input validation error Description: Cisco Sourcefire Snort 3.0 before build 233 mishandles Ether Type Validation. Since valid ether type and IP protocol numbers do not overlap, Snort++ stores all protocol decoders in a single array. That makes it possible to craft packets that have IP protocol numbers in the ether type field which will confuse the Snort++ decoder. For example, an eth:llc:snap:icmp6 packet will cause a crash because there is no ip6 header with which to calculate the icmp6 checksum. Affecte
:snap:icmp6 packet will cause a crash because there is no ip6 header with which to calculate the icmp6 checksum. Affected decoders include gre, llc, trans_bridge, ciscometadata, linux_sll, and token_ring. The fix adds a check in the packet manager to validate the ether type before indexing the decoder array. An out of range ether type will raise 116:473. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038483 - http://blog.snort.org/2017/05/snort-vulnerabilities-found.html
CVE ID: CVE-2017-6658 State: PUBLISHED Published: 2017-05-16T17:00:00 Last Updated: 2024-08-05T15:33:20.437Z Vendors: n/a Products: Snort 3.0 All versions prior to build 233. Problem Types: buffer overread Description: Cisco Sourcefire Snort 3.0 before build 233 has a Buffer Overread related to use of a decoder array. The size was off by one making it possible to read past the end of the array with an ether type of 0xFFFF. Increasing the array size solves this problem. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038483 - http://blog.snort.org/2017/05/snort-vulnerabilities-found.html
CVE ID: CVE-2017-6659 State: PUBLISHED Published: 2017-06-13T06:00:00 Last Updated: 2024-08-05T15:33:20.487Z Vendors: n/a Products: Cisco Prime Collaboration Assurance Problem Types: Cross-Site Request Forgery Vulnerability Description: A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected device. More Information: CSCvc91800. Known Affected Releases: 11.5(0) 11.6. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038633 - http://www.securityfocus.com/bid/9897
- CVE Program Container: References: - http://www.securitytracker.com/id/1038633 - http://www.securityfocus.com/bid/98970 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-pca
CVE ID: CVE-2017-6661 State: PUBLISHED Published: 2017-06-13T06:00:00 Last Updated: 2024-08-05T15:33:20.452Z Vendors: n/a Products: Cisco Email Security and Content Security Management Appliance Problem Types: Cross-Site Scripting Vulnerability Description: A vulnerability in the web-based management interface of Cisco Email Security Appliance (ESA) and Cisco Content Security Management Appliance (SMA) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device, aka Message Tracking XSS. More Information: CSCvd30805 CSCvd34861. Known Affected Releases: 10.0.0-203 10.1.0-049. Addition
Message Tracking XSS. More Information: CSCvd30805 CSCvd34861. Known Affected Releases: 10.0.0-203 10.1.0-049. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038638 - http://www.securityfocus.com/bid/98950 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-esa - http://www.securitytracker.com/id/1038637
CVE ID: CVE-2017-6662 State: PUBLISHED Published: 2017-06-26T07:00:00 Last Updated: 2024-08-05T15:33:20.477Z Vendors: n/a Products: Cisco Prime Infrastructure and Evolved Programmable Network Manager Problem Types: CWE-20 Description: A vulnerability in the web-based user interface of Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker read and write access to information stored in the affected system as well as perform remote code execution. The attacker must have valid user credentials. The vulnerability is due to improper handling of XML External Entity (XXE) entries when parsing an XML file. An attacker could explo