Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-1133 State: PUBLISHED Published: 2013-02-27T21:00:00Z Last Updated: 2024-09-17T04:10:31.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Unified Communications Manager (CUCM) 8.6 before 8.6(2a)su2, 8.6 BE3k before 8.6(4) BE3k, and 9.x before 9.0(1) allows remote attackers to cause a denial of service (CPU consumption and GUI and voice outages) via malformed packets to unused UDP ports, aka Bug ID CSCtx43337. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130227-cucm
CVE ID: CVE-2013-1134 State: PUBLISHED Published: 2013-02-27T21:00:00Z Last Updated: 2024-09-16T23:41:58.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Location Bandwidth Manager (LBM) Intracluster-communication feature in Cisco Unified Communications Manager (CUCM) 9.x before 9.1(1) does not require authentication from the remote LBM Hub node, which allows remote attackers to conduct cache-poisoning attacks against transaction records, and cause a denial of service (bandwidth-pool consumption and call outage), via unspecified vectors, aka Bug ID CSCub28920. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/Ci
8920. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130227-cucm
CVE ID: CVE-2013-1135 State: PUBLISHED Published: 2013-02-27T21:00:00 Last Updated: 2024-08-06T14:49:20.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance 8.6 and 9.0 allows remote attackers to cause a denial of service (CPU consumption and monitoring outage) via malformed TLS messages to TCP port (1) 9043 or (2) 9443, aka Bug ID CSCuc07155. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130227-hcs - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1135
CVE ID: CVE-2013-1136 State: PUBLISHED Published: 2013-05-13T10:00:00 Last Updated: 2024-08-06T14:49:20.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: The crypto engine process in Cisco IOS on Aggregation Services Router (ASR) Route Processor 2 does not properly manage memory, which allows local users to cause a denial of service (route processor crash) by creating multiple tunnels and then examining encryption statistics, aka Bug ID CSCuc52193. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1136
CVE ID: CVE-2013-1137 State: PUBLISHED Published: 2013-02-27T21:00:00Z Last Updated: 2024-09-16T22:25:52.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Unified Presence Server (CUPS) 8.6, 9.0, and 9.1 before 9.1.1 allows remote attackers to cause a denial of service (CPU consumption) via crafted packets to the SIP TCP port, aka Bug ID CSCua89930. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130227-cups
CVE ID: CVE-2013-1138 State: PUBLISHED Published: 2013-02-25T20:00:00Z Last Updated: 2024-09-16T18:49:46.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NAT process on Cisco Adaptive Security Appliances (ASA) devices allows remote attackers to cause a denial of service (connections-table memory consumption) via crafted packets, aka Bug ID CSCue46386. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1138
CVE ID: CVE-2013-1139 State: PUBLISHED Published: 2013-02-27T00:00:00Z Last Updated: 2024-09-16T19:46:12.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: The nsAPI interface in Cisco Cloud Portal 9.1 SP1 and SP2, and 9.3 through 9.3.2, does not properly check privileges, which allows remote authenticated users to obtain sensitive information via a crafted URL, aka Bug ID CSCud81134. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1139 - http://tools.cisco.com/security/center/viewAlert.x?alertId=28387
CVE ID: CVE-2013-1140 State: PUBLISHED Published: 2013-03-06T11:00:00Z Last Updated: 2024-09-17T02:21:00.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XML parser in Cisco Security Monitoring, Analysis, and Response System (MARS) allows remote attackers to read arbitrary files via an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka Bug ID CSCue55093. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1140
CVE ID: CVE-2013-1141 State: PUBLISHED Published: 2013-02-28T23:00:00Z Last Updated: 2024-09-16T23:31:40.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mDNS snooping functionality on Cisco Wireless LAN Controller (WLC) devices with software 7.4.1.54 and earlier does not properly manage buffers, which allows remote authenticated users to cause a denial of service (device reload) via crafted mDNS packets, aka Bug ID CSCue04153. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=28417 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1141
CVE ID: CVE-2013-1142 State: PUBLISHED Published: 2013-03-28T23:00:00 Last Updated: 2024-08-06T14:49:20.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the VRF-aware NAT feature in Cisco IOS 12.2 through 12.4 and 15.0 through 15.2 allows remote attackers to cause a denial of service (memory consumption) via IPv4 packets, aka Bug IDs CSCtg47129 and CSCtz96745. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130327-nat - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1142
CVE ID: CVE-2013-1143 State: PUBLISHED Published: 2013-03-28T23:00:00Z Last Updated: 2024-09-17T01:06:43.758Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RSVP protocol implementation in Cisco IOS 12.2 and 15.0 through 15.2 and IOS XE 3.1.xS through 3.4.xS before 3.4.5S and 3.5.xS through 3.7.xS before 3.7.2S, when MPLS-TE is enabled, allows remote attackers to cause a denial of service (incorrect memory access and device reload) via a traffic engineering PATH message in an RSVP packet, aka Bug ID CSCtg39957. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130327-rsvp - http://t
er: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130327-rsvp - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1143
CVE ID: CVE-2013-1144 State: PUBLISHED Published: 2013-03-28T23:00:00Z Last Updated: 2024-09-17T04:18:44.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the IKEv1 implementation in Cisco IOS 15.1 allows remote attackers to cause a denial of service (memory consumption) via unspecified (1) IPv4 or (2) IPv6 IKE packets, aka Bug ID CSCth81055. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130327-ike
CVE ID: CVE-2013-1145 State: PUBLISHED Published: 2013-03-28T23:00:00Z Last Updated: 2024-09-17T03:02:47.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in Cisco IOS 12.2, 12.4, 15.0, and 15.1, when Zone-Based Policy Firewall SIP application layer gateway inspection is enabled, allows remote attackers to cause a denial of service (memory consumption or device reload) via malformed SIP messages, aka Bug ID CSCtl99174. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130327-cce
CVE ID: CVE-2013-1146 State: PUBLISHED Published: 2013-03-28T23:00:00Z Last Updated: 2024-09-17T01:26:38.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Smart Install client functionality in Cisco IOS 12.2 and 15.0 through 15.3 on Catalyst switches allows remote attackers to cause a denial of service (device reload) via crafted image list parameters in Smart Install packets, aka Bug ID CSCub55790. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130327-smartinstall
CVE ID: CVE-2013-1147 State: PUBLISHED Published: 2013-03-28T23:00:00Z Last Updated: 2024-09-16T17:28:14.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Protocol Translation (PT) functionality in Cisco IOS 12.3 through 12.4 and 15.0 through 15.3, when one-step port-23 translation or a Telnet-to-PAD ruleset is configured, does not properly validate TCP connection information, which allows remote attackers to cause a denial of service (device reload) via an attempted connection to a PT resource, aka Bug ID CSCtz35999. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130327-pt
CVE ID: CVE-2013-1148 State: PUBLISHED Published: 2013-03-28T23:00:00Z Last Updated: 2024-09-16T22:50:59.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: The General Responder implementation in the IP Service Level Agreement (SLA) feature in Cisco IOS 15.2 and IOS XE 3.1.xS through 3.4.xS before 3.4.5S and 3.5.xS through 3.7.xS before 3.7.2S allows remote attackers to cause a denial of service (device reload) via crafted (1) IPv4 or (2) IPv6 IP SLA packets on UDP port 1167, aka Bug ID CSCuc72594. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130327-ipsla
CVE ID: CVE-2013-1149 State: PUBLISHED Published: 2013-04-11T10:00:00Z Last Updated: 2024-09-17T04:09:24.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Adaptive Security Appliances (ASA) devices with software 7.x before 7.2(5.10), 8.0 before 8.0(5.28), 8.1 and 8.2 before 8.2(5.35), 8.3 before 8.3(2.34), 8.4 before 8.4(4.11), 8.6 before 8.6(1.10), and 8.7 before 8.7(1.3), and Cisco Firewall Services Module (FWSM) software 3.1 and 3.2 before 3.2(24.1) and 4.0 and 4.1 before 4.1(11.1), allow remote attackers to cause a denial of service (device reload) via a crafted IKEv1 message, aka Bug IDs CSCub85692 and CSCud20267. Additional Analyst Notes: - CVE Program Container: Re
ia a crafted IKEv1 message, aka Bug IDs CSCub85692 and CSCud20267. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130410-asa - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130410-fwsm
CVE ID: CVE-2013-1150 State: PUBLISHED Published: 2013-04-11T10:00:00Z Last Updated: 2024-09-16T19:05:09.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: The authentication-proxy implementation on Cisco Adaptive Security Appliances (ASA) devices with software 7.x before 7.2(5.10), 8.0 before 8.0(5.31), 8.1 and 8.2 before 8.2(5.38), 8.3 before 8.3(2.37), 8.4 before 8.4(5.3), 8.5 and 8.6 before 8.6(1.10), 8.7 before 8.7(1.4), 9.0 before 9.0(1.1), and 9.1 before 9.1(1.2) allows remote attackers to cause a denial of service (device reload) via a crafted URL, aka Bug ID CSCud16590. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/cent
Bug ID CSCud16590. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130410-asa - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1150
CVE ID: CVE-2013-1151 State: PUBLISHED Published: 2013-04-11T10:00:00Z Last Updated: 2024-09-16T20:36:48.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Adaptive Security Appliances (ASA) devices with software 7.x before 7.2(5.10), 8.0 before 8.0(5.31), 8.1 and 8.2 before 8.2(5.38), 8.3 before 8.3(2.37), 8.4 before 8.4(5), 8.5 before 8.5(1.17), 8.6 before 8.6(1.10), and 8.7 before 8.7(1.3) allow remote attackers to cause a denial of service (device reload) via a crafted certificate, aka Bug ID CSCuc72408. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130410-asa
CVE ID: CVE-2013-1152 State: PUBLISHED Published: 2013-04-11T10:00:00Z Last Updated: 2024-09-16T23:42:16.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Adaptive Security Appliances (ASA) devices with software 9.0 before 9.0(1.2) allow remote attackers to cause a denial of service (device reload) via a crafted field in a DNS message, aka Bug ID CSCuc80080. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130410-asa
CVE ID: CVE-2013-1153 State: PUBLISHED Published: 2013-03-07T20:00:00Z Last Updated: 2024-09-16T17:37:56.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the web interface in Cisco Prime Infrastructure allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCue84676. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1153
CVE ID: CVE-2013-1154 State: PUBLISHED Published: 2013-03-07T20:00:00Z Last Updated: 2024-09-16T23:45:39.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cisco Small Business 200 Series Smart Switch 1.2.7.76 and earlier, Small Business 300 Series Managed Switch 1.2.7.76 and earlier, and Small Business 500 Series Stackable Managed Switch 1.2.7.76 and earlier allow remote attackers to cause a denial of service (SSL/TLS layer outage) via malformed (1) SSH or (2) SSL packets, aka Bug ID CSCua30246. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000017 - http://tools.cisco.com/security/center/viewAlert.x?alertId=27502 - htt
: - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000017 - http://tools.cisco.com/security/center/viewAlert.x?alertId=27502 - http://jvn.jp/en/jp/JVN05132866/index.html
CVE ID: CVE-2013-1155 State: PUBLISHED Published: 2013-04-11T10:00:00Z Last Updated: 2024-09-16T23:05:45.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: The auth-proxy functionality in Cisco Firewall Services Module (FWSM) software 3.1 and 3.2 before 3.2(20.1), 4.0 before 4.0(15.2), and 4.1 before 4.1(5.1) allows remote attackers to cause a denial of service (device reload) via a crafted URL, aka Bug ID CSCtg02624. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130410-fwsm
CVE ID: CVE-2013-1156 State: PUBLISHED Published: 2013-05-01T10:00:00Z Last Updated: 2024-09-17T03:18:55.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Cisco Prime Central for Hosted Collaboration Solution allows remote attackers to read arbitrary files via a crafted URL, aka Bug ID CSCud51034. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1156
CVE ID: CVE-2013-1157 State: PUBLISHED Published: 2013-05-01T10:00:00Z Last Updated: 2024-09-17T00:01:48.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the IBM Tivoli Monitoring (ITM) Java servlet container in Cisco Prime Central for Hosted Collaboration Solution allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCud51068. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1157
CVE ID: CVE-2013-1158 State: PUBLISHED Published: 2013-05-01T10:00:00Z Last Updated: 2024-09-16T20:21:32.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the IBM Tivoli Monitoring (ITM) help menus in Cisco Prime Central for Hosted Collaboration Solution allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCud54397. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1158
CVE ID: CVE-2013-1159 State: PUBLISHED Published: 2013-05-01T10:00:00Z Last Updated: 2024-09-16T23:35:32.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Netcool Impact (NCI) web menus in Cisco Prime Central for Hosted Collaboration Solution allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCud56706. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1159
CVE ID: CVE-2013-1160 State: PUBLISHED Published: 2013-05-01T10:00:00Z Last Updated: 2024-09-16T16:19:03.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the OpenView web menus in Cisco Prime Central for Hosted Collaboration Solution allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCud56743. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1160
CVE ID: CVE-2013-1161 State: PUBLISHED Published: 2013-03-26T01:00:00Z Last Updated: 2024-09-17T03:52:34.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XML parser in the Cisco Jabber IM application for Android allows remote authenticated users to cause a denial of service (blocked connection) by leveraging an entry on a Buddy list and sending a crafted XMPP presence update message, aka Bug ID CSCue38383. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1161
CVE ID: CVE-2013-1162 State: PUBLISHED Published: 2013-03-26T01:00:00Z Last Updated: 2024-09-16T21:58:09.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: The traffic engineering (TE) processing subsystem in Cisco IOS XR allows remote attackers to cause a denial of service (process restart) via crafted TE packets, aka Bug ID CSCue04000. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1162
CVE ID: CVE-2013-1163 State: PUBLISHED Published: 2013-04-01T19:00:00Z Last Updated: 2024-09-16T22:56:12.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the device-management implementation in Cisco Connected Grid Network Management System (CG-NMS) allow remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug IDs CSCue14553 and CSCue38746. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1163
CVE ID: CVE-2013-1164 State: PUBLISHED Published: 2013-04-11T10:00:00Z Last Updated: 2024-09-16T18:24:22.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS XE 3.4 before 3.4.4S, 3.5, and 3.6 on 1000 series Aggregation Services Routers (ASR) does not properly implement the Cisco Multicast Leaf Recycle Elimination (MLRE) feature, which allows remote attackers to cause a denial of service (card reload) via fragmented IPv6 multicast packets, aka Bug ID CSCtz97563. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130410-asr1000
CVE ID: CVE-2013-1165 State: PUBLISHED Published: 2013-04-11T10:00:00Z Last Updated: 2024-09-16T18:07:52.745Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS XE 2.x and 3.x before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series Aggregation Services Routers (ASR) allows remote attackers to cause a denial of service (card reload) by sending many crafted L2TP packets, aka Bug ID CSCtz23293. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130410-asr1000
CVE ID: CVE-2013-1166 State: PUBLISHED Published: 2013-04-11T10:00:00Z Last Updated: 2024-09-17T02:33:12.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS XE 3.2 through 3.4 before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series Aggregation Services Routers (ASR), when VRF-aware NAT and SIP ALG are enabled, allows remote attackers to cause a denial of service (card reload) by sending many SIP packets, aka Bug ID CSCuc65609. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130410-asr1000
CVE ID: CVE-2013-1167 State: PUBLISHED Published: 2013-04-11T10:00:00Z Last Updated: 2024-09-17T04:04:47.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS XE 3.2 through 3.4 before 3.4.2S, and 3.5, on 1000 series Aggregation Services Routers (ASR), when bridge domain interface (BDI) is enabled, allows remote attackers to cause a denial of service (card reload) via packets that are not properly handled during the processing of encapsulation, aka Bug ID CSCtt11558. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130410-asr1000
CVE ID: CVE-2013-1168 State: PUBLISHED Published: 2013-04-11T10:00:00Z Last Updated: 2024-09-16T18:50:23.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web server in Cisco Unified MeetingPlace Application Server 7.x before 7.1MR1 Patch 2, 8.0 before 8.0MR1 Patch 1, and 8.5 before 8.5MR3 Patch 1 does not invalidate a session upon a logout action, which makes it easier for remote attackers to hijack sessions by leveraging knowledge of a session cookie, aka Bug ID CSCuc64885. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130410-mp
CVE ID: CVE-2013-1169 State: PUBLISHED Published: 2013-04-11T10:00:00Z Last Updated: 2024-09-17T03:48:07.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Unified MeetingPlace Web Conferencing Server 7.x before 7.1MR1 Patch 2, 8.0 before 8.0MR1 Patch 2, and 8.5 before 8.5MR3 Patch 1, when the Remember Me option is used, does not properly verify cookies, which allows remote attackers to impersonate users via a crafted login request, aka Bug ID CSCuc64846. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130410-mp
CVE ID: CVE-2013-1170 State: PUBLISHED Published: 2013-04-11T10:00:00Z Last Updated: 2024-09-17T00:36:32.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cisco Prime Network Control System (NCS) appliance with software before 1.1.1.24 has a default password for the database user account, which makes it easier for remote attackers to change the configuration or cause a denial of service (service disruption) via unspecified vectors, aka Bug ID CSCtz30468. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130410-ncs