Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-6394 State: PUBLISHED Published: 2015-12-05T02:00:00 Last Updated: 2024-08-06T07:22:21.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Cisco NX-OS 5.2(9)N1(1) on Nexus 5000 devices allows local users to cause a denial of service (device crash) via crafted USB parameters, aka Bug ID CSCus89408. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151204-nexus - http://www.securitytracker.com/id/1034295
CVE ID: CVE-2015-6395 State: PUBLISHED Published: 2015-12-12T11:00:00 Last Updated: 2024-08-06T07:22:21.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Prime Service Catalog 10.0, 10.0(R2), 10.1, and 11.0 does not properly restrict access to web pages, which allows remote attackers to modify the configuration via a direct request, aka Bug ID CSCuw48188. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151207-psc - http://www.securitytracker.com/id/1034313
CVE ID: CVE-2015-6396 State: PUBLISHED Published: 2016-08-08T00:00:00 Last Updated: 2024-08-06T07:22:21.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CLI command parser on Cisco RV110W, RV130W, and RV215W devices allows local users to execute arbitrary shell commands as an administrator via crafted parameters, aka Bug IDs CSCuv90134, CSCux58161, and CSCux73567. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160803-rv110_130w1 - https://www.exploit-db.com/exploits/45986/ - http://www.securityfocus.com/bid/92269 - http://www.securitytracker.com/id/1036528
CVE ID: CVE-2015-6397 State: PUBLISHED Published: 2016-08-08T00:00:00 Last Updated: 2024-08-06T07:22:21.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco RV110W, RV130W, and RV215W devices have an incorrect RBAC configuration for the default account, which allows remote authenticated users to obtain root access via a login session with that account, aka Bug IDs CSCuv90139, CSCux58175, and CSCux73557. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92273 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160803-rv110_130w2 - http://www.securitytracker.com/id/1036524
CVE ID: CVE-2015-6398 State: PUBLISHED Published: 2016-02-07T11:00:00 Last Updated: 2024-08-06T07:22:21.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Nexus 9000 Application Centric Infrastructure (ACI) Mode switches with software before 11.0(1c) allow remote attackers to cause a denial of service (device reload) via an IPv4 ICMP packet with the IP Record Route option, aka Bug ID CSCuq57512. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034928 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160203-n9knci
CVE ID: CVE-2015-6399 State: PUBLISHED Published: 2015-12-15T02:00:00 Last Updated: 2024-08-06T07:22:21.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Supervisor 1.0.0.0 and 1.0.0.1 in Cisco Integrated Management Controller (IMC) before 2.0(9) allows remote authenticated users to cause a denial of service (IP interface outage) via crafted parameters in an HTTP request, aka Bug ID CSCuv38286. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151211-imc - http://www.securityfocus.com/bid/79031 - http://www.securitytracker.com/id/1038475 - http://www.securityfocus.com/bid/108851
CVE ID: CVE-2015-6400 State: PUBLISHED Published: 2015-12-13T02:00:00 Last Updated: 2024-08-06T07:22:21.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Cisco Emergency Responder 10.5(1a) allow remote attackers to inject arbitrary web script or HTML via unspecified fields, aka Bug ID CSCuv25547. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151210-cer - http://www.securityfocus.com/bid/78878
CVE ID: CVE-2015-6401 State: PUBLISHED Published: 2015-12-14T02:00:00 Last Updated: 2024-08-06T07:22:21.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco EPC3928 devices with EDVA 5.5.10, 5.5.11, and 5.7.1 allow remote attackers to bypass an intended authentication requirement and execute unspecified administrative functions via a crafted HTTP request, aka Bug ID CSCux24941. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/39904/ - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151208-cwr - http://www.securitytracker.com/id/1034347
CVE ID: CVE-2015-6402 State: PUBLISHED Published: 2015-12-14T02:00:00 Last Updated: 2024-08-06T07:22:21.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the management interface on Cisco EPC3928 devices with EDVA 5.5.10, 5.5.11, and 5.7.1 allows remote attackers to inject arbitrary web script or HTML via an unspecified value, aka Bug ID CSCux24935. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034346 - https://www.exploit-db.com/exploits/39904/ - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151208-wrg
CVE ID: CVE-2015-6403 State: PUBLISHED Published: 2015-12-15T02:00:00 Last Updated: 2024-08-06T07:22:21.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TFTP implementation on Cisco Small Business SPA30x, SPA50x, SPA51x phones 7.5.7 improperly validates firmware-image file integrity, which allows local users to load a Trojan horse image by leveraging shell access, aka Bug ID CSCut67400. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034376 - http://www.securityfocus.com/bid/78739 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151209-ipp
CVE ID: CVE-2015-6404 State: PUBLISHED Published: 2015-12-15T02:00:00 Last Updated: 2024-08-06T07:22:21.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Hosted Collaboration Mediation Fulfillment 10.6(3) does not use RBAC, which allows remote authenticated users to obtain sensitive credential information by leveraging admin access and making SOAP API requests, aka Bug ID CSCuw84374. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/78874 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151210-hcm
CVE ID: CVE-2015-6405 State: PUBLISHED Published: 2015-12-13T02:00:00 Last Updated: 2024-08-06T07:22:21.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Cisco Emergency Responder 10.5(1) and 10.5(1a) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuv26501. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151209-cers - http://www.securityfocus.com/bid/78812 - http://www.securitytracker.com/id/1034385
CVE ID: CVE-2015-6406 State: PUBLISHED Published: 2015-12-13T02:00:00 Last Updated: 2024-08-06T07:22:21.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Tools menu in Cisco Emergency Responder 10.5(1.10000.5) allows remote authenticated users to write to arbitrary files via a crafted filename, aka Bug ID CSCuv21781. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034384 - http://www.securityfocus.com/bid/78816 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151209-ert
CVE ID: CVE-2015-6407 State: PUBLISHED Published: 2015-12-13T02:00:00 Last Updated: 2024-08-06T07:22:21.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Emergency Responder 10.5(3.10000.9) allows remote attackers to upload files to arbitrary locations via a crafted parameter, aka Bug ID CSCuv25501. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034383 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151209-erw - http://www.securityfocus.com/bid/78817
CVE ID: CVE-2015-6408 State: PUBLISHED Published: 2015-12-12T16:00:00 Last Updated: 2024-08-06T07:22:21.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Cisco Unity Connection 11.5(0.98) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCux24578. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151209-uc - http://www.securityfocus.com/bid/78875 - http://www.securitytracker.com/id/1034379
CVE ID: CVE-2015-6409 State: PUBLISHED Published: 2015-12-26T22:00:00 Last Updated: 2024-08-06T07:22:21.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Jabber 10.6.x, 11.0.x, and 11.1.x on Windows allows man-in-the-middle attackers to conduct STARTTLS downgrade attacks and trigger cleartext XMPP sessions via unspecified vectors, aka Bug ID CSCuw87419. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/79678 - http://www.synacktiv.com/ressources/cisco_jabber_starttls_downgrade.pdf - http://www.securitytracker.com/id/1034540 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151224-jab
CVE ID: CVE-2015-6410 State: PUBLISHED Published: 2015-12-14T02:00:00 Last Updated: 2024-08-06T07:22:21.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Mobile and Remote Access (MRA) services implementation in Cisco Unified Communications Manager mishandles edge-device identity validation, which allows remote attackers to bypass intended call-reception and call-setup restrictions by spoofing a user, aka Bug ID CSCuu97283. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034377 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151209-ucm - http://www.securityfocus.com/bid/78741
CVE ID: CVE-2015-6411 State: PUBLISHED Published: 2015-12-15T02:00:00 Last Updated: 2024-08-06T07:22:21.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco FirePOWER Management Center 5.4.1.3, 6.0.0, and 6.0.1 provides verbose responses to requests for help files, which allows remote attackers to obtain potentially sensitive version information by reading an unspecified field, aka Bug ID CSCux37061. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/78740 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151209-fmc
CVE ID: CVE-2015-6412 State: PUBLISHED Published: 2016-01-22T11:00:00 Last Updated: 2024-08-06T07:22:21.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Modular Encoding Platform D9036 Software before 02.04.70 has hardcoded (1) root and (2) guest passwords, which makes it easier for remote attackers to obtain access via an SSH session, aka Bug ID CSCut88070. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160120-d9036
CVE ID: CVE-2015-6413 State: PUBLISHED Published: 2015-12-13T02:00:00 Last Updated: 2024-08-06T07:22:21.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco TelePresence Video Communication Server (VCS) Expressway X8.6 allows remote authenticated users to bypass intended read-only restrictions and upload Tandberg Linux Package (TLP) files by visiting an administrative page, aka Bug ID CSCuw55651. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/79088 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151209-tvc - http://www.securitytracker.com/id/1034378
CVE ID: CVE-2015-6414 State: PUBLISHED Published: 2015-12-13T02:00:00 Last Updated: 2024-08-06T07:22:21.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco TelePresence Video Communication Server (VCS) X8.6 uses the same encryption key across different customers' installations, which makes it easier for local users to defeat cryptographic protection mechanisms by leveraging knowledge of a key from another installation, aka Bug ID CSCuw64516. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034429 - http://www.securityfocus.com/bid/79065 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151210
www.securityfocus.com/bid/79065 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151210-tvcs
CVE ID: CVE-2015-6415 State: PUBLISHED Published: 2015-12-12T16:00:00 Last Updated: 2024-08-06T07:22:21.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Unified Computing System (UCS) 2.2(3f)A on Fabric Interconnect 6200 devices allows remote attackers to cause a denial of service (CPU consumption or device outage) via a SYN flood on the SSH port during the booting process, aka Bug ID CSCuu81757. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034381 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151210-ucs - http://www.securityfocus.com/bid/85711
CVE ID: CVE-2015-6416 State: PUBLISHED Published: 2015-12-14T02:00:00 Last Updated: 2024-08-06T07:22:21.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Cisco Unified Email Interaction Manager and Unified Web Interaction Manager 11.0(1) allows remote attackers to inject arbitrary web script or HTML a crafted URL, aka Bug ID CSCuw24479. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034382 - http://www.securityfocus.com/bid/79034 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151210-uim
CVE ID: CVE-2015-6417 State: PUBLISHED Published: 2015-12-12T11:00:00 Last Updated: 2024-08-06T07:22:21.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Videoscape Distribution Suite Service Manager (VDS-SM) 3.4.0 and earlier does not always use RBAC for backend database access, which allows remote authenticated users to read or write to database entries via (1) the GUI or (2) a crafted HTTP request, aka Bug ID CSCuv87025. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/78871 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151210-vdssm
CVE ID: CVE-2015-6418 State: PUBLISHED Published: 2015-12-13T02:00:00 Last Updated: 2024-08-06T07:22:21.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: The random-number generator on Cisco Small Business RV routers 4.x and SA500 security appliances 2.2.07 does not have sufficient entropy, which makes it easier for remote attackers to determine a TLS key pair via unspecified computations upon handshake key-exchange data, aka Bug ID CSCus15224. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151210-dwvr - http://www.securitytracker.com/id/1034408 - http://www.securitytracker.com/id/
SecurityAdvisory/cisco-sa-20151210-dwvr - http://www.securitytracker.com/id/1034408 - http://www.securitytracker.com/id/1034409 - http://www.securityfocus.com/bid/78876
CVE ID: CVE-2015-6419 State: PUBLISHED Published: 2015-12-12T16:00:00 Last Updated: 2024-08-06T07:22:21.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco FireSIGHT Management Center with software 4.10.3, 5.2.0, 5.3.0, 5.3.1, and 5.4.0 allows remote authenticated users to read arbitrary files via a crafted GET request, aka Bug ID CSCur25410. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/79033 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151211-fmc
CVE ID: CVE-2015-6420 State: PUBLISHED Published: 2015-12-15T02:00:00.000Z Last Updated: 2025-03-25T16:42:10.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: Serialized-object interfaces in certain Cisco Collaboration and Social Media; Endpoint Clients and Client Software; Network Application, Service, and Acceleration; Network and Content Security Devices; Network Management and Provisioning; Routing and Switching - Enterprise and Service Provider; Unified Computing; Voice and Unified Communications Devices; Video, Streaming, TelePresence, and Transcoding Devices; Wireless; and Cisco Hosted Services products allow remote attackers to execute arbitrary commands via a crafted s
vices; Wireless; and Cisco Hosted Services products allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05376917 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151209-java-deserialization - http://www.securityfocus.com/bid/78872 - https://www.tenable.com/security/research/tra-2017-23 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docD
72 - https://www.tenable.com/security/research/tra-2017-23 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 - https://www.kb.cert.org/vuls/id/581311 - https://www.tenable.com/security/research/tra-2017-14 - https://lists.apache.org/thread.html/r352e40ca9874d1beb4ad95403792adca7eb295e6bc3bd7b65fabcc21%40%3Ccommits.samza.apache.org%3E
CVE ID: CVE-2015-6421 State: PUBLISHED Published: 2016-01-27T22:00:00 Last Updated: 2024-08-06T07:22:21.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: cifs-ao in the CIFS optimization functionality on Cisco Wide Area Application Service (WAAS) and Virtual WAAS (vWAAS) devices 5.x before 5.3.5d and 5.4 and 5.5 before 5.5.3 allows remote attackers to cause a denial of service (resource consumption and device reload) via crafted network traffic, aka Bug ID CSCus85330. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034831 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-waascifs
CVE ID: CVE-2015-6422 State: PUBLISHED Published: 2015-12-14T02:00:00 Last Updated: 2024-08-06T07:22:21.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: The self-service application in Cisco Unified Communications Domain Manager (CUCDM) 10.6(1) allows remote authenticated users to cause a denial of service (subapplication outage) via malformed requests, aka Bug ID CSCuu10981. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/79032 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151211-ucdm - http://www.securitytracker.com/id/1034407
CVE ID: CVE-2015-6423 State: PUBLISHED Published: 2016-01-15T02:00:00 Last Updated: 2024-08-06T07:22:21.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DCERPC Inspection implementation in Cisco Adaptive Security Appliance (ASA) Software 9.4.1 through 9.5.1 allows remote authenticated users to bypass an intended DCERPC-only ACL by sending arbitrary network traffic, aka Bug ID CSCuu67782. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160111-asa - http://www.securitytracker.com/id/1034644
CVE ID: CVE-2015-6424 State: PUBLISHED Published: 2015-12-18T11:00:00 Last Updated: 2024-08-06T07:22:21.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: The boot manager in Cisco Application Policy Infrastructure Controller (APIC) 1.1(0.920a) allows local users to bypass intended access restrictions and obtain single-user-mode root access via unspecified vectors, aka Bug ID CSCuu83985. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151216-apic - http://www.securityfocus.com/bid/79410 - http://www.securitytracker.com/id/1034468
CVE ID: CVE-2015-6425 State: PUBLISHED Published: 2015-12-16T15:00:00 Last Updated: 2024-08-06T07:22:21.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WebApplications Identity Management subsystem in Cisco Unified Communications Manager 10.5(0.98000.88) allows remote attackers to cause a denial of service (subsystem outage) via invalid session tokens, aka Bug ID CSCul83786. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151215-ucmim - http://www.securityfocus.com/bid/79275 - http://www.securitytracker.com/id/1034431
CVE ID: CVE-2015-6426 State: PUBLISHED Published: 2015-12-18T11:00:00 Last Updated: 2024-08-06T07:22:21.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Prime Network Services Controller 3.0 allows local users to bypass intended access restrictions and execute arbitrary commands via additional parameters to an unspecified command, aka Bug ID CSCus99427. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151217-pnsc - http://www.securityfocus.com/bid/79582
CVE ID: CVE-2015-6427 State: PUBLISHED Published: 2015-12-18T11:00:00 Last Updated: 2024-08-06T07:22:21.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco FireSIGHT Management Center allows remote attackers to bypass the HTTP attack detection feature and avoid triggering Snort IDS rules via an SSL session that is mishandled after decryption, aka Bug ID CSCux53437. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034488 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151217-fsm
CVE ID: CVE-2015-6428 State: PUBLISHED Published: 2015-12-18T11:00:00 Last Updated: 2024-08-06T07:22:21.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco DPQ3925 devices with EDVA r1 Base allow remote attackers to obtain sensitive information via a crafted HTTP request, aka Bug ID CSCuv03958. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/79594 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151217-gateway - http://www.securitytracker.com/id/1034487
CVE ID: CVE-2015-6429 State: PUBLISHED Published: 2015-12-19T11:00:00 Last Updated: 2024-08-06T07:22:21.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IKEv1 state machine in Cisco IOS 15.4 through 15.6 and IOS XE 3.15 through 3.17 allows remote attackers to cause a denial of service (IPsec connection termination) via a crafted IKEv1 packet to a tunnel endpoint, aka Bug ID CSCuw08236. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151218-ios - http://www.securitytracker.com/id/1034505