Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-0460 State: PUBLISHED Published: 2018-10-05T14:00:00Z Last Updated: 2024-11-26T14:39:53.930Z Vendors: Cisco Products: Cisco Enterprise NFV Infrastructure Software Problem Types: CWE-285 Description: A vulnerability in the REST API of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to read any file on an affected system. The vulnerability is due to insufficient authorization and parameter validation checks. An attacker could exploit this vulnerability by sending a malicious API request with the authentication credentials of a low-privileged user. A successful exploit could allow the attacker to read any file on the affected s
n credentials of a low-privileged user. A successful exploit could allow the attacker to read any file on the affected system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/105299 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180905-nfvis-infodis
CVE ID: CVE-2018-0461 State: PUBLISHED Published: 2019-01-10T16:00:00Z Last Updated: 2024-11-19T19:19:17.507Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: Cisco Products: Cisco IP Phone 8800 Series Software Problem Types: CWE-94 Description: A vulnerability in the Cisco IP Phone 8800 Series Software could allow an unauthenticated, remote attacker to conduct an arbitrary script injection attack on an affected device. The vulnerability exists because the software running on an affected device insufficiently validates user-supplied data. An attacker could exploit this vulnerability by persuading a user to click a malicious link provided to the user or throug
attacker could exploit this vulnerability by persuading a user to click a malicious link provided to the user or through the interface of an affected device. A successful exploit could allow an attacker to execute arbitrary script code in the context of the user interface or access sensitive system-based information, which under normal circumstances should be prohibited. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/106515 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190109-phone-script-injection
CVE ID: CVE-2018-0462 State: PUBLISHED Published: 2018-10-05T14:00:00Z Last Updated: 2024-11-26T14:39:39.493Z Vendors: Cisco Products: Cisco Enterprise NFV Infrastructure Software Problem Types: CWE-20 Description: A vulnerability in the user management functionality of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to perform a denial of service (DoS) attack against an affected system. The vulnerability is due to insufficient validation of user-provided input. An attacker could exploit this vulnerability by logging in with a highly privileged user account and performing a sequence of specific user management operations that interfere with
h a highly privileged user account and performing a sequence of specific user management operations that interfere with the underlying operating system. A successful exploit could allow the attacker to permanently degrade the functionality of the affected system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180905-nfvis-dos1 - http://www.securityfocus.com/bid/105291
CVE ID: CVE-2018-0463 State: PUBLISHED Published: 2018-10-05T14:00:00Z Last Updated: 2024-11-26T14:39:29.333Z Vendors: Cisco Products: Cisco Network Services Orchestrator Problem Types: CWE-264 Description: A vulnerability in the Cisco Network Plug and Play server component of Cisco Network Services Orchestrator (NSO) could allow an unauthenticated, remote attacker to gain unauthorized access to configuration data that is stored on an affected NSO system. The vulnerability exists because the Network Plug and Play component performs incomplete validation when configured to use secure unique device identifiers (SUDI) for authentication. An attacker who controls a Cisco device that supports SUD
se secure unique device identifiers (SUDI) for authentication. An attacker who controls a Cisco device that supports SUDI authentication and has connectivity to an affected NSO system could exploit this vulnerability. The attacker would need to leverage information about the devices that are being registered on the NSO server to send crafted Cisco Network Plug and Play authentication packets to an affected system. A successful exploit could allow the attacker to gain unauthorized access to configuration data for devices that will be managed by the NSO system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/cont
lyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180905-nso-infodis
CVE ID: CVE-2018-0464 State: PUBLISHED Published: 2018-10-05T16:00:00Z Last Updated: 2024-11-26T14:26:18.428Z Vendors: Cisco Products: Cisco Data Center Network Manager Problem Types: CWE-22 Description: A vulnerability in Cisco Data Center Network Manager software could allow an authenticated, remote attacker to conduct directory traversal attacks and gain access to sensitive files on the targeted system. The vulnerability is due to improper validation of user requests within the management interface. An attacker could exploit this vulnerability by sending malicious requests containing directory traversal character sequences within the management interface. An exploit could allow the attack
ts containing directory traversal character sequences within the management interface. An exploit could allow the attacker to view or create arbitrary files on the targeted system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180828-dcnm-traversal - http://www.securitytracker.com/id/1041585 - https://www.tenable.com/security/research/tra-2018-20 - http://www.securityfocus.com/bid/105159
CVE ID: CVE-2018-0465 State: PUBLISHED Published: 2018-10-05T14:00:00Z Last Updated: 2024-11-26T14:39:19.564Z Vendors: Cisco Products: Cisco Small Business 300 Series Managed Switches Problem Types: CWE-79 Description: A vulnerability in the web-based management interface of Cisco Small Business 300 Series Managed Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected system. The vulnerability exists because the affected management interface performs insufficient validation of user-supplied input. An attacker could exploit this vulnerability by persuading a user of the interface to click a malicio
er-supplied input. An attacker could exploit this vulnerability by persuading a user of the interface to click a malicious link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or allow the attacker to access sensitive, browser-based information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181003-300-switch-xss
CVE ID: CVE-2018-0466 State: PUBLISHED Published: 2018-10-05T14:00:00Z Last Updated: 2024-11-26T14:39:10.675Z Vendors: Cisco Products: Cisco IOS Software Problem Types: CWE-399 Description: A vulnerability in the Open Shortest Path First version 3 (OSPFv3) implementation in Cisco IOS and IOS XE Software could allow an unauthenticated, adjacent attacker to cause an affected device to reload. The vulnerability is due to incorrect handling of specific OSPFv3 packets. An attacker could exploit this vulnerability by sending crafted OSPFv3 Link-State Advertisements (LSA) to an affected device. An exploit could allow the attacker to cause an affected device to reload, leading to a denial of service
fected device. An exploit could allow the attacker to cause an affected device to reload, leading to a denial of service (DoS) condition. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/105403 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180926-ospfv3-dos - http://www.securitytracker.com/id/1041737 - https://ics-cert.us-cert.gov/advisories/ICSA-19-094-03
CVE ID: CVE-2018-0467 State: PUBLISHED Published: 2018-10-05T14:00:00Z Last Updated: 2024-11-26T14:39:00.782Z Vendors: Cisco Products: Cisco IOS Software Problem Types: CWE-20 Description: A vulnerability in the IPv6 processing code of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload. The vulnerability is due to incorrect handling of specific IPv6 hop-by-hop options. An attacker could exploit this vulnerability by sending a malicious IPv6 packet to or through the affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a denial of service (DoS) condition on an affected device. Additio
attacker to cause the device to reload, resulting in a denial of service (DoS) condition on an affected device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180926-ipv6hbh - http://www.securitytracker.com/id/1041737 - https://ics-cert.us-cert.gov/advisories/ICSA-19-094-03
CVE ID: CVE-2018-0468 State: PUBLISHED Published: 2018-12-04T18:00:00 Last Updated: 2024-11-26T14:20:34.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in the configuration of a local database installed as part of the Cisco Energy Management Suite (CEMS) could allow an authenticated, local attacker to access and alter confidential data. The vulnerability is due to the installation of the PostgreSQL database with unchanged default access credentials. An attacker could exploit this vulnerability by logging in to the machine where CEMS is installed and establishing a local connection to the database. The fix for this vulnerability randomizes the database access p
led and establishing a local connection to the database. The fix for this vulnerability randomizes the database access password in new installations; however, the fix will not change the password for existing installations. Users are required to manually change the password, as documented in the Workarounds section of this advisory. There are workarounds that address this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181204-ems-sql-passwrd - http://www.securityfocus.com/bid/106124 - https://www.tenable.com/security/research/tra-2018-42
CVE ID: CVE-2018-0469 State: PUBLISHED Published: 2018-10-05T14:00:00Z Last Updated: 2024-11-26T14:38:47.303Z Vendors: Cisco Products: Cisco IOS XE Software Problem Types: CWE-415 Description: A vulnerability in the web user interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to a double-free-in-memory handling by the affected software when specific HTTP requests are processed. An attacker could exploit this vulnerability by sending specific HTTP requests to the web user interface of the affected software. A successful exploit could allow the attacker to cause the affected device to reload, resulti
of the affected software. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition on an affected device. To exploit this vulnerability, the attacker must have access to the management interface of the affected software, which is typically connected to a restricted management network. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180926-webuidos - http://www.securitytracker.com/id/1041737 - http://www.securityfocus.com/bid/105423
CVE ID: CVE-2018-0470 State: PUBLISHED Published: 2018-10-05T14:00:00Z Last Updated: 2024-11-26T14:38:31.873Z Vendors: Cisco Products: Cisco IOS XE Software Problem Types: CWE-399 Description: A vulnerability in the web framework of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a buffer overflow condition on an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to the affected software improperly parsing malformed HTTP packets that are destined to a device. An attacker could exploit this vulnerability by sending a malformed HTTP packet to an affected device for processing. A successful exploit could allow the attacker
by sending a malformed HTTP packet to an affected device for processing. A successful exploit could allow the attacker to cause a buffer overflow condition on the affected device, resulting in a DoS condition. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180926-webdos - http://www.securitytracker.com/id/1041737 - http://www.securityfocus.com/bid/105397 - https://ics-cert.us-cert.gov/advisories/ICSA-19-094-03
CVE ID: CVE-2018-0471 State: PUBLISHED Published: 2018-10-05T14:00:00Z Last Updated: 2024-11-26T14:38:18.834Z Vendors: Cisco Products: Cisco IOS XE Software Problem Types: CWE-400 Description: A vulnerability in the Cisco Discovery Protocol (CDP) module of Cisco IOS XE Software Releases 16.6.1 and 16.6.2 could allow an unauthenticated, adjacent attacker to cause a memory leak that may lead to a denial of service (DoS) condition. The vulnerability is due to incorrect processing of certain CDP packets. An attacker could exploit this vulnerability by sending certain CDP packets to an affected device. A successful exploit could cause an affected device to continuously consume memory and eventual
s to an affected device. A successful exploit could cause an affected device to continuously consume memory and eventually result in a memory allocation failure that leads to a crash, triggering a reload of the affected device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180926-cdp-memleak - http://www.securityfocus.com/bid/105398 - http://www.securitytracker.com/id/1041737
CVE ID: CVE-2018-0472 State: PUBLISHED Published: 2018-10-05T14:00:00Z Last Updated: 2024-11-26T14:38:07.134Z Vendors: Cisco Products: Cisco Adaptive Security Appliance (ASA) Software Problem Types: CWE-20 Description: A vulnerability in the IPsec driver code of multiple Cisco IOS XE Software platforms and the Cisco ASA 5500-X Series Adaptive Security Appliance (ASA) could allow an unauthenticated, remote attacker to cause the device to reload. The vulnerability is due to improper processing of malformed IPsec Authentication Header (AH) or Encapsulating Security Payload (ESP) packets. An attacker could exploit this vulnerability by sending malformed IPsec packets to be processed by an affect
P) packets. An attacker could exploit this vulnerability by sending malformed IPsec packets to be processed by an affected device. An exploit could allow the attacker to cause a reload of the affected device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/105418 - http://www.securitytracker.com/id/1041737 - http://www.securitytracker.com/id/1041735 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180926-ipsec - https://ics-cert.us-cert.gov/advisories/ICSA-19-094-04
CVE ID: CVE-2018-0473 State: PUBLISHED Published: 2018-10-05T14:00:00Z Last Updated: 2024-11-26T14:37:50.785Z Vendors: Cisco Products: Cisco IOS Software Problem Types: CWE-399 Description: A vulnerability in the Precision Time Protocol (PTP) subsystem of Cisco IOS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition of the Precision Time Protocol. The vulnerability is due to insufficient processing of PTP packets. An attacker could exploit this vulnerability by sending a custom PTP packet to, or through, an affected device. A successful exploit could allow the attacker to cause a DoS condition for the PTP subsystem, resulting in time synchron
A successful exploit could allow the attacker to cause a DoS condition for the PTP subsystem, resulting in time synchronization issues across the network. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180926-ptp - http://www.securitytracker.com/id/1041737 - http://www.securityfocus.com/bid/105427 - https://ics-cert.us-cert.gov/advisories/ICSA-19-094-03
CVE ID: CVE-2018-0474 State: PUBLISHED Published: 2019-01-10T16:00:00Z Last Updated: 2024-11-21T19:49:36.731Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Cisco Products: Cisco Unified Communications Manager Problem Types: CWE-200 Description: A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to view digest credentials in clear text. The vulnerability is due to the incorrect inclusion of saved passwords in configuration pages. An attacker could exploit this vulnerability by logging in to the Cisco Unified Communications Manager web-based management interface and view
oit this vulnerability by logging in to the Cisco Unified Communications Manager web-based management interface and viewing the source code for the configuration page. A successful exploit could allow the attacker to recover passwords and expose those accounts to further attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190109-cucm-creds-disclosr - http://www.securityfocus.com/bid/106538
CVE ID: CVE-2018-0475 State: PUBLISHED Published: 2018-10-05T14:00:00Z Last Updated: 2024-11-26T14:37:37.364Z Vendors: Cisco Products: Cisco IOS Software Problem Types: CWE-20 Description: A vulnerability in the implementation of the cluster feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to trigger a denial of service (DoS) condition on an affected device. The vulnerability is due to improper input validation when handling Cluster Management Protocol (CMP) messages. An attacker could exploit this vulnerability by sending a malicious CMP message to an affected device. A successful exploit could allow the attacker to cause the switch t
nding a malicious CMP message to an affected device. A successful exploit could allow the attacker to cause the switch to crash and reload or to hang, resulting in a DoS condition. If the switch hangs it will not reboot automatically, and it will need to be power cycled manually to recover. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/105404 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180926-cmp - http://www.securitytracker.com/id/1041737
CVE ID: CVE-2018-0476 State: PUBLISHED Published: 2018-10-05T14:00:00Z Last Updated: 2024-11-26T14:37:24.207Z Vendors: Cisco Products: Cisco IOS XE Software Problem Types: CWE-399 Description: A vulnerability in the Network Address Translation (NAT) Session Initiation Protocol (SIP) Application Layer Gateway (ALG) of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to improper processing of SIP packets in transit while NAT is performed on an affected device. An unauthenticated, remote attacker could exploit this vulnerability by sending crafted SIP packets via UDP port 5060 through an affected device that is
ker could exploit this vulnerability by sending crafted SIP packets via UDP port 5060 through an affected device that is performing NAT for SIP packets. A successful exploit could allow an attacker to cause the device to reload, resulting in a denial of service (DoS) condition. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180926-sip-alg - http://www.securitytracker.com/id/1041734 - http://www.securityfocus.com/bid/105419 - http://www.securitytracker.com/id/1041737
CVE ID: CVE-2018-0477 State: PUBLISHED Published: 2018-10-05T14:00:00Z Last Updated: 2024-11-26T14:37:15.515Z Vendors: Cisco Products: Cisco IOS XE Software Problem Types: CWE-77 Description: A vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to execute commands on the underlying Linux shell of an affected device with root privileges. The vulnerability exist because the affected software improperly sanitizes command arguments, failing to prevent access to certain internal data structures on an affected device. An attacker who has privileged EXEC mode (privilege level 15) access to an affected device could exploit these vulnerabilities on t
who has privileged EXEC mode (privilege level 15) access to an affected device could exploit these vulnerabilities on the device by executing CLI commands that contain custom arguments. A successful exploit could allow the attacker to execute arbitrary commands with root privileges on the affected device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180926-iosxe-cmdinj - http://www.securitytracker.com/id/1041737
CVE ID: CVE-2018-0480 State: PUBLISHED Published: 2018-10-05T14:00:00Z Last Updated: 2024-11-26T14:37:02.816Z Vendors: Cisco Products: Cisco IOS XE Software Problem Types: CWE-362 Description: A vulnerability in the errdisable per VLAN feature of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause the device to crash, leading to a denial of service (DoS) condition. The vulnerability is due to a race condition that occurs when the VLAN and port enter an errdisabled state, resulting in an incorrect state in the software. An attacker could exploit this vulnerability by sending frames that trigger the errdisable condition. A successful exploit could allow the attacke
this vulnerability by sending frames that trigger the errdisable condition. A successful exploit could allow the attacker to cause the affected device to crash, leading to a DoS condition. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180926-errdisable - http://www.securityfocus.com/bid/105400 - http://www.securitytracker.com/id/1041737
CVE ID: CVE-2018-0481 State: PUBLISHED Published: 2018-10-05T14:00:00Z Last Updated: 2024-11-26T14:36:54.049Z Vendors: Cisco Products: Cisco IOS XE Software Problem Types: CWE-77 Description: A vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to execute commands on the underlying Linux shell of an affected device with root privileges. The vulnerability exist because the affected software improperly sanitizes command arguments, failing to prevent access to certain internal data structures on an affected device. An attacker who has privileged EXEC mode (privilege level 15) access to an affected device could exploit these vulnerabilities on t