Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-3760 State: PUBLISHED Published: 2017-10-17T20:00:00Z Last Updated: 2024-09-16T23:26:54.261Z Vendors: Lenovo Group Ltd. Products: Service Framework application Problem Types: Remote code execution Description: The Lenovo Service Framework Android application uses a set of nonsecure credentials when performing integrity verification of downloaded applications and/or data. This exposes the application to man-in-the-middle attacks leading to possible remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/product_security/LEN-15374
CVE ID: CVE-2017-3761 State: PUBLISHED Published: 2017-10-17T20:00:00Z Last Updated: 2024-09-17T03:29:06.189Z Vendors: Lenovo Group Ltd. Products: Service Framework application Problem Types: Remote code execution Description: The Lenovo Service Framework Android application executes some system commands without proper sanitization of external input. In certain cases, this could lead to command injection which, in turn, could lead to remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/product_security/LEN-15374
CVE ID: CVE-2017-3762 State: PUBLISHED Published: 2018-01-26T01:00:00Z Last Updated: 2024-09-16T16:24:14.952Z Vendors: Lenovo Group Ltd. Products: Lenovo Fingerprint Manager Pro Problem Types: Privilege Escalation Description: Sensitive data stored by Lenovo Fingerprint Manager Pro, version 8.01.86 and earlier, including users' Windows logon credentials and fingerprint data, is encrypted using a weak algorithm, contains a hard-coded password, and is accessible to all users with local non-administrative access to the system in which it is installed. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102837 - https://support.lenovo.com/product_sec
- CVE Program Container: References: - http://www.securityfocus.com/bid/102837 - https://support.lenovo.com/product_security/LEN-15999 - http://www.openwall.com/lists/oss-security/2019/05/08/4 - http://www.openwall.com/lists/oss-security/2019/05/08/3 - http://www.openwall.com/lists/oss-security/2019/05/08/5
CVE ID: CVE-2017-3763 State: PUBLISHED Published: 2017-09-22T14:00:00Z Last Updated: 2024-09-16T22:50:49.427Z Vendors: Lenovo Group Ltd. Products: Lenovo XClarity Administrator (LXCA) Problem Types: Credential disclosure Description: An attacker who obtains access to the location where the LXCA file system is stored may be able to access credentials of local LXCA accounts in LXCA versions earlier than 1.3.2. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/product_security/LEN-16333
CVE ID: CVE-2017-3764 State: PUBLISHED Published: 2017-11-30T19:00:00Z Last Updated: 2024-09-17T02:46:43.637Z Vendors: Lenovo Group Ltd. Products: xClarity Administrator Problem Types: Unauthenticated User Enumeration Description: A vulnerability was identified in Lenovo XClarity Administrator (LXCA) before 1.4.0 where LXCA user account names may be exposed to unauthenticated users with access to the LXCA web user interface. No password information of the user accounts is exposed. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/product_security/LEN-16335
CVE ID: CVE-2017-3765 State: PUBLISHED Published: 2018-01-10T18:00:00Z Last Updated: 2024-09-17T01:10:39.100Z Vendors: Lenovo Group Ltd. Products: Enterprise Network Operating System affecting Lenovo and IBM RackSwitch and BladeCenter Products Problem Types: Authentication Bypass Description: In Enterprise Networking Operating System (ENOS) in Lenovo and IBM RackSwitch and BladeCenter products, an authentication bypass known as "HP Backdoor" was discovered during a Lenovo security audit in the serial console, Telnet, SSH, and Web interfaces. This bypass mechanism can be accessed when performing local authentication under specific circumstances. If exploited, admin-level access to the switch
essed when performing local authentication under specific circumstances. If exploited, admin-level access to the switch is granted. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/product_security/LEN-16095 - http://www.securitytracker.com/id/1040296
CVE ID: CVE-2017-3766 State: REJECTED Published: N/A Last Updated: 2024-07-29T20:41:06.954Z Description: No description available.
CVE ID: CVE-2017-3767 State: PUBLISHED Published: 2017-11-13T16:00:00Z Last Updated: 2024-09-17T01:27:06.643Z Vendors: Lenovo Group Ltd. Products: Realtek Audio Driver Problem Types: Local priviledge escalation Description: A local privilege escalation vulnerability was identified in the Realtek audio driver versions prior to 6.0.1.8224 in some Lenovo ThinkPad products. An attacker with local privileges could execute code with administrative privileges. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/product_security/LEN-15759
CVE ID: CVE-2017-3768 State: PUBLISHED Published: 2018-01-26T19:00:00Z Last Updated: 2024-09-16T22:02:02.189Z Vendors: Lenovo Group Ltd. Products: Integrated Management Module 2 (IMM2) Problem Types: Denial of Service Description: An unprivileged attacker with connectivity to the IMM2 could cause a denial of service attack on the IMM2 (Versions earlier than 4.4 for Lenovo System x and earlier than 6.4 for IBM System x). Flooding the IMM2 with a high volume of authentication failures via the Common Information Model (CIM) used by LXCA and OneCLI and other tools can exhaust available system memory which can cause the IMM2 to reboot itself until the requests cease. Additional Analyst Notes: - C
vailable system memory which can cause the IMM2 to reboot itself until the requests cease. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/product_security/LEN-14450
CVE ID: CVE-2017-3769 State: REJECTED Published: N/A Last Updated: 2024-07-29T20:41:37.653Z Description: No description available.
CVE ID: CVE-2017-3770 State: PUBLISHED Published: 2017-09-22T14:00:00Z Last Updated: 2024-09-17T00:02:06.053Z Vendors: Lenovo Group Ltd. Products: Lenovo XClarity Administrator (LXCA) Problem Types: Privilege Escalation Description: Privilege escalation vulnerability in LXCA versions earlier than 1.3.2 where an authenticated user may be able to abuse certain web interface functionality to execute privileged commands within the underlying LXCA operating system. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/product_security/LEN-16333
CVE ID: CVE-2017-3771 State: PUBLISHED Published: 2017-10-26T17:00:00 Last Updated: 2024-08-05T14:39:40.932Z Vendors: Lenovo Group Ltd. Products: E95, ThinkCentre M710s/M710t Problem Types: Unauthorized bootloader allowed to run during system boot, reducing protection against rootkits Description: System boot process is not adequately secured In Lenovo E95 and ThinkCentre M710s/M710t because systems were shipped from factory without completing BIOS/UEFI initialization process. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/product_security/LEN-17417
CVE ID: CVE-2017-3772 State: PUBLISHED Published: 2024-07-31T20:30:38.174Z Last Updated: 2024-08-01T15:04:36.566Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Lenovo Products: PC Manager Problem Types: CWE-20 Description: A vulnerability was reported in Lenovo PC Manager versions prior to 2.6.40.3154 that could allow an attacker to cause a system reboot. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://iknow.lenovo.com.cn/detail/171959
CVE ID: CVE-2017-3773 State: REJECTED Published: 2018-04-03T18:00:00 Last Updated: 2018-04-03T17:57:01 Description: No description available.
CVE ID: CVE-2017-3774 State: PUBLISHED Published: 2018-04-19T14:00:00Z Last Updated: 2024-09-16T16:48:19.094Z Vendors: Lenovo Group Ltd., IBM Products: IMM2 Problem Types: Stack overflow leading to memory corruption Description: A stack overflow vulnerability was discovered within the web administration service in Integrated Management Module 2 (IMM2) earlier than version 4.70 used in some Lenovo servers and earlier than version 6.60 used in some IBM servers. An attacker providing a crafted user ID and password combination can cause a portion of the authentication routine to overflow its stack, resulting in stack corruption. Additional Analyst Notes: - CVE Program Container: References: - ht
o overflow its stack, resulting in stack corruption. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/product_security/LEN-19586
CVE ID: CVE-2017-3775 State: PUBLISHED Published: 2018-05-04T16:00:00Z Last Updated: 2024-09-16T23:56:19.792Z Vendors: Lenovo Group Ltd. Products: Some Lenovo Flex System and Lenovo System x products Problem Types: Booting unauthenticated code Description: Some Lenovo System x server BIOS/UEFI versions, when Secure Boot mode is enabled by a system administrator, do not properly authenticate signed code before booting it. As a result, an attacker with physical access to the system could boot unsigned code. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/solutions/LEN-20241
CVE ID: CVE-2017-3776 State: PUBLISHED Published: 2018-04-19T14:00:00Z Last Updated: 2024-09-16T16:38:02.181Z Vendors: Lenovo Group Ltd. Products: Help mobile Android app Problem Types: Cleartext transmission of information Description: Lenovo Help Android mobile app versions earlier than 6.1.2.0327 allowed information to be transmitted over an HTTP channel, permitting others observing the channel to potentially see this information. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/product_security/LEN-20475
CVE ID: CVE-2017-3777 State: REJECTED Published: 2018-03-29T15:00:00 Last Updated: 2018-03-29T14:57:01 Description: No description available.
CVE ID: CVE-2017-3778 State: REJECTED Published: 2018-03-29T15:00:00 Last Updated: 2018-03-29T14:57:01 Description: No description available.
CVE ID: CVE-2017-3779 State: REJECTED Published: 2018-03-29T15:00:00 Last Updated: 2018-03-29T14:57:01 Description: No description available.
CVE ID: CVE-2017-3780 State: REJECTED Published: 2018-03-29T15:00:00 Last Updated: 2018-03-29T14:57:01 Description: No description available.
CVE ID: CVE-2017-3781 State: REJECTED Published: 2018-03-29T15:00:00 Last Updated: 2018-03-29T14:57:01 Description: No description available.
CVE ID: CVE-2017-3782 State: REJECTED Published: 2018-03-29T15:00:00 Last Updated: 2018-03-29T14:57:01 Description: No description available.
CVE ID: CVE-2017-3783 State: REJECTED Published: 2018-03-29T15:00:00 Last Updated: 2018-03-29T14:57:01 Description: No description available.
CVE ID: CVE-2017-3784 State: REJECTED Published: 2018-03-29T15:00:00 Last Updated: 2018-03-29T14:57:01 Description: No description available.
CVE ID: CVE-2017-3785 State: REJECTED Published: 2018-03-29T15:00:00 Last Updated: 2018-03-29T14:57:01 Description: No description available.
CVE ID: CVE-2017-3786 State: REJECTED Published: 2018-03-29T15:00:00 Last Updated: 2018-03-29T14:57:01 Description: No description available.
CVE ID: CVE-2017-3787 State: REJECTED Published: 2018-03-29T15:00:00 Last Updated: 2018-03-29T14:57:01 Description: No description available.
CVE ID: CVE-2017-3788 State: REJECTED Published: 2018-03-29T15:00:00 Last Updated: 2018-03-29T14:57:01 Description: No description available.
CVE ID: CVE-2017-3789 State: REJECTED Published: 2018-03-29T15:00:00 Last Updated: 2018-03-29T14:57:01 Description: No description available.
CVE ID: CVE-2017-3790 State: PUBLISHED Published: 2017-02-01T19:00:00 Last Updated: 2024-08-05T14:39:41.187Z Vendors: n/a Products: Cisco Expressway Series Software and Cisco TelePresence VCS Software All versions prior to version X8.8.2 are vulnerable Problem Types: CWE-399 Description: A vulnerability in the received packet parser of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) software could allow an unauthenticated, remote attacker to cause a reload of the affected system, resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient size validation of user-supplied data. An attacker could exploit this vulnerability by sendi
lity is due to insufficient size validation of user-supplied data. An attacker could exploit this vulnerability by sending crafted H.224 data in Real-Time Transport Protocol (RTP) packets in an H.323 call. An exploit could allow the attacker to overflow a buffer in a cache that belongs to the received packet parser, which will result in a crash of the application, resulting in a DoS condition. All versions of Cisco Expressway Series Software and Cisco TelePresence VCS Software prior to version X8.8.2 are vulnerable. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. Cisco Bug IDs: CSCus99263. Additional Analyst Notes
erability. There are no workarounds that address this vulnerability. Cisco Bug IDs: CSCus99263. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170125-expressway - http://www.securityfocus.com/bid/95786 - http://www.securitytracker.com/id/1037697
CVE ID: CVE-2017-3791 State: PUBLISHED Published: 2017-02-01T19:00:00 Last Updated: 2024-08-05T14:39:41.051Z Vendors: n/a Products: Cisco Prime Home versions from 6.3.0.0 to the first fixed release 6.5.0.1 Problem Types: CWE-287 Description: A vulnerability in the web-based GUI of Cisco Prime Home could allow an unauthenticated, remote attacker to bypass authentication and execute actions with administrator privileges. The vulnerability is due to a processing error in the role-based access control (RBAC) of URLs. An attacker could exploit this vulnerability by sending API commands via HTTP to a particular URL without prior authentication. An exploit could allow the attacker to perform any ac
ommands via HTTP to a particular URL without prior authentication. An exploit could allow the attacker to perform any actions in Cisco Prime Home with administrator privileges. This vulnerability affects Cisco Prime Home versions from 6.3.0.0 to the first fixed release 6.5.0.1. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. Cisco Bug IDs: CSCvb49837. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170201-prime-home - http://www.securityfocus.com/bid/95933
CVE ID: CVE-2017-3792 State: PUBLISHED Published: 2017-02-01T19:00:00 Last Updated: 2024-08-05T14:39:40.690Z Vendors: n/a Products: Cisco TelePresence Multipoint Control Unit (MCU) software version 4.3(1.68) or later configured for Passthrough content mode Problem Types: CWE-20 Description: A vulnerability in a proprietary device driver in the kernel of Cisco TelePresence Multipoint Control Unit (MCU) Software could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition. The vulnerability is due to improper size validation when reassembling fragmented IPv4 or IPv6 packets. An attacker could exploit this vulnerability by sending crafte
dation when reassembling fragmented IPv4 or IPv6 packets. An attacker could exploit this vulnerability by sending crafted IPv4 or IPv6 fragments to a port receiving content in Passthrough content mode. An exploit could allow the attacker to overflow a buffer. If successful, the attacker could execute arbitrary code or cause a DoS condition on the affected system. Cisco TelePresence MCU platforms TelePresence MCU 5300 Series, TelePresence MCU MSE 8510 and TelePresence MCU 4500 are affected when running software version 4.3(1.68) or later configured for Passthrough content mode. Cisco has released software updates that address this vulnerability. Workarounds that address this vulnerability are
de. Cisco has released software updates that address this vulnerability. Workarounds that address this vulnerability are not available, but mitigations are available. Cisco Bug IDs: CSCuu67675. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170125-telepresence - http://www.securityfocus.com/bid/95787 - http://www.securitytracker.com/id/1037698
CVE ID: CVE-2017-3793 State: PUBLISHED Published: 2017-04-20T22:00:00 Last Updated: 2024-08-05T14:39:40.398Z Vendors: n/a Products: Cisco ASA Software and Cisco FTD Software Problem Types: CWE-399 Description: A vulnerability in the TCP normalizer of Cisco Adaptive Security Appliance (ASA) Software (8.0 through 8.7 and 9.0 through 9.6) and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause Cisco ASA and FTD to drop any further incoming traffic on all interfaces, resulting in a denial of service (DoS) condition. The vulnerability is due to improper limitation of the global out-of-order TCP queue for specific block sizes. An attacker could ex
bility is due to improper limitation of the global out-of-order TCP queue for specific block sizes. An attacker could exploit this vulnerability by sending a large number of unique permitted TCP connections with out-of-order segments. An exploit could allow the attacker to exhaust available blocks in the global out-of-order TCP queue, causing the dropping of any further incoming traffic on all interfaces and resulting in a DoS condition. Cisco Bug IDs: CSCvb46321. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97923 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-asa-norm - http://www.securitytracker
://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-asa-norm - http://www.securitytracker.com/id/1038329
CVE ID: CVE-2017-3794 State: PUBLISHED Published: 2017-01-26T07:45:00 Last Updated: 2024-08-05T14:39:41.056Z Vendors: n/a Products: Cisco WebEx Meetings Server 2.6 Problem Types: unspecified Description: A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack against an administrative user. More Information: CSCuz03317. Known Affected Releases: 2.6. Known Fixed Releases: 2.7.1.12. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95635 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170118-wms - http://www.securitytrac
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170118-wms - http://www.securitytracker.com/id/1037649
CVE ID: CVE-2017-3795 State: PUBLISHED Published: 2017-01-26T07:45:00 Last Updated: 2024-08-05T14:39:40.994Z Vendors: n/a Products: Cisco WebEx Meetings Server 2.6 Problem Types: unspecified Description: A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to conduct arbitrary password changes against any non-administrative user. More Information: CSCuz03345. Known Affected Releases: 2.6. Known Fixed Releases: 2.7.1.12. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037650 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170118-wms1 - http://www.securityfocus.com/bid
/tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170118-wms1 - http://www.securityfocus.com/bid/95643
CVE ID: CVE-2017-3796 State: PUBLISHED Published: 2017-01-26T07:45:00 Last Updated: 2024-08-05T14:39:41.042Z Vendors: n/a Products: Cisco WebEx Meetings Server 2.6 Problem Types: unspecified Description: A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to execute predetermined shell commands on other hosts. More Information: CSCuz03353. Known Affected Releases: 2.6. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037651 - http://www.securityfocus.com/bid/95641 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170118-wms2
CVE ID: CVE-2017-3797 State: PUBLISHED Published: 2017-01-26T07:45:00 Last Updated: 2024-08-05T14:39:41.307Z Vendors: n/a Products: Cisco WebEx Meetings Server 2.7 Problem Types: unspecified Description: A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to view the fully qualified domain name of the Cisco WebEx administration server. More Information: CSCvb60655. Known Affected Releases: 2.7. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95639 - http://www.securitytracker.com/id/1037648 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170118-wms3
CVE ID: CVE-2017-3798 State: PUBLISHED Published: 2017-01-26T07:45:00 Last Updated: 2024-08-05T14:39:40.385Z Vendors: n/a Products: Cisco Unified Communications Manager Problem Types: unspecified Description: A cross-site scripting (XSS) filter bypass vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to mount XSS attacks against a user of an affected device. More Information: CSCvb97237. Known Affected Releases: 11.0(1.10000.10) 11.5(1.10000.6). Known Fixed Releases: 11.5(1.12029.1) 11.5(1.12900.11) 12.0(0.98000.369) 12.0(0.98000.370) 12.0(0.98000.398) 12.0(0.98000.457). Additional Analyst Notes: - CVE
.5(1.12900.11) 12.0(0.98000.369) 12.0(0.98000.370) 12.0(0.98000.398) 12.0(0.98000.457). Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037653 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170118-cucm - http://www.securityfocus.com/bid/95872
CVE ID: CVE-2017-3799 State: PUBLISHED Published: 2017-01-26T07:45:00 Last Updated: 2024-08-05T14:39:40.622Z Vendors: n/a Products: Cisco WebEx Meeting Center T28.1 Problem Types: unspecified Description: A vulnerability in a URL parameter of Cisco WebEx Meeting Center could allow an unauthenticated, remote attacker to perform site redirection. More Information: CSCzu78401. Known Affected Releases: T28.1. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037647 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170118-wms4 - http://www.securityfocus.com/bid/95642
CVE ID: CVE-2017-3800 State: PUBLISHED Published: 2017-01-26T07:45:00 Last Updated: 2024-08-05T14:39:41.058Z Vendors: n/a Products: Cisco AsyncOS Problem Types: unspecified Description: A vulnerability in the content scanning engine of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) could allow an unauthenticated, remote attacker to bypass configured message or content filters on the device. Affected Products: This vulnerability affects all releases prior to the first fixed release of Cisco AsyncOS Software for Cisco Email Security Appliances, both virtual and hardware appliances, if the software is configured to apply a message filter or content filter to incoming email att
and hardware appliances, if the software is configured to apply a message filter or content filter to incoming email attachments. The vulnerability is not limited to any specific rules or actions for a message filter or content filter. More Information: CSCuz16076. Known Affected Releases: 9.7.1-066 9.7.1-HP2-207 9.8.5-085. Known Fixed Releases: 10.0.1-083 10.0.1-087. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170118-esa - http://www.securitytracker.com/id/1037656 - http://www.securityfocus.com/bid/95637