Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
device to allow multiple active network interfaces. A successful exploit could allow the attacker to send traffic over a non-authorized network interface. Cisco Bug IDs: CSCvf66539. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171004-anam - http://www.securitytracker.com/id/1039507 - http://www.securityfocus.com/bid/101157
CVE ID: CVE-2017-12269 State: PUBLISHED Published: 2017-10-05T07:00:00 Last Updated: 2024-08-05T18:28:16.645Z Vendors: n/a Products: Cisco Spark Messaging Problem Types: CWE-79 Description: A vulnerability in the web UI of Cisco Spark Messaging Software could allow an authenticated, remote attacker to perform a stored cross-site scripting (XSS) attack. The vulnerability is due to insufficient input validation by the web UI of the affected software. An attacker could exploit this vulnerability by injecting XSS content into the web UI of the affected software. A successful exploit could allow the attacker to force a user to execute code of the attacker's choosing or allow the attacker to retri
ploit could allow the attacker to force a user to execute code of the attacker's choosing or allow the attacker to retrieve sensitive information from the user. Cisco Bug IDs: CSCvf70587, CSCvf70592. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171004-sprk - http://www.securityfocus.com/bid/101150
CVE ID: CVE-2017-12270 State: PUBLISHED Published: 2017-10-05T07:00:00 Last Updated: 2024-08-05T18:36:54.503Z Vendors: n/a Products: Cisco IOS XR Problem Types: CWE-119 Description: A vulnerability in the gRPC code of Cisco IOS XR Software for Cisco Network Convergence System (NCS) 5500 Series Routers could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition when the emsd service stops. The vulnerability is due to the software's inability to process HTTP/2 packets. An attacker could exploit this vulnerability by sending a malformed HTTP/2 frame to the affected device. A successful exploit could allow the attacker to create a DoS condition when the emsd serv
frame to the affected device. A successful exploit could allow the attacker to create a DoS condition when the emsd service stops. Cisco Bug IDs: CSCvb99388. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101171 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171004-ncs - http://www.securitytracker.com/id/1039504
CVE ID: CVE-2017-12271 State: PUBLISHED Published: 2017-10-19T08:00:00 Last Updated: 2024-08-05T18:36:54.419Z Vendors: n/a Products: Cisco SPA300 and SPA500 Series IP Phones Problem Types: CWE-352 Description: A vulnerability in Cisco SPA300 and SPA500 Series IP Phones could allow an unauthenticated, remote attacker to execute unwanted actions on an affected device. The vulnerability is due to a lack of cross-site request forgery (CSRF) protection. An attacker could exploit this vulnerability by tricking the user of a web application into executing an adverse action. Cisco Bug IDs: CSCuz88421, CSCuz91356, CSCve56308. Additional Analyst Notes: - CVE Program Container: References: - http://www
Bug IDs: CSCuz88421, CSCuz91356, CSCve56308. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101524 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171018-spa - http://www.securitytracker.com/id/1039621
CVE ID: CVE-2017-12272 State: PUBLISHED Published: 2017-10-19T08:00:00 Last Updated: 2024-08-05T18:36:56.240Z Vendors: n/a Products: Cisco IOS XE Problem Types: CWE-79 Description: A vulnerability in the web framework code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of the affected software. The vulnerability is due to insufficient input validation of some parameters that are passed to the web server of the affected software. An attacker could exploit this vulnerability by convincing a user of the web interface to access a malicious link or by intercepting a user request for the af
bility by convincing a user of the web interface to access a malicious link or by intercepting a user request for the affected web interface and injecting malicious code into the request. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected web interface or allow the attacker to access sensitive browser-based information. Cisco Bug IDs: CSCvb09516. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039627 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171018-cisco-ios-xe - http://www.securityfocus.com/bid/101494
CVE ID: CVE-2017-12273 State: PUBLISHED Published: 2017-11-02T16:00:00 Last Updated: 2024-08-05T18:36:54.402Z Vendors: n/a Products: Cisco Aironet 1560, 2800, and 3800 Series Access Point Platforms Problem Types: CWE-20 Description: A vulnerability in 802.11 association request frame processing for the Cisco Aironet 1560, 2800, and 3800 Series Access Points could allow an unauthenticated, Layer 2 radio frequency (RF) adjacent attacker to cause the Access Point (AP) to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient frame validation of the 802.11 association request. An attacker could exploit this vulnerability by sending a malformed 802.11 a
lidation of the 802.11 association request. An attacker could exploit this vulnerability by sending a malformed 802.11 association request to the targeted device. An exploit could allow the attacker to cause the AP to reload, resulting in a DoS condition while the AP is reloading. This vulnerability affects the following Cisco products running either the Lightweight AP Software or Mobility Express image: Aironet 1560 Series Access Points, Aironet 2800 Series Access Points, Aironet 3800 Series Access Points. Note: The Cisco Aironet 1560 Series Access Point device is supported as of release 8.3.112.0. Cisco Bug IDs: CSCve12189. Additional Analyst Notes: - CVE Program Container: References: - h
d as of release 8.3.112.0. Cisco Bug IDs: CSCve12189. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171101-aironet1 - http://www.securityfocus.com/bid/101655 - http://www.securitytracker.com/id/1039714
CVE ID: CVE-2017-12274 State: PUBLISHED Published: 2017-11-02T16:00:00 Last Updated: 2024-08-05T18:36:54.416Z Vendors: n/a Products: Cisco Aironet 1560, 2800, and 3800 Series Access Point Platforms Problem Types: CWE-20 Description: A vulnerability in Extensible Authentication Protocol (EAP) ingress frame processing for the Cisco Aironet 1560, 2800, and 3800 Series Access Points could allow an unauthenticated, Layer 2 radio frequency (RF) adjacent attacker to cause the Access Point (AP) to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient validation of the EAP frame. An attacker could exploit this vulnerability by sending a malformed EAP frame
insufficient validation of the EAP frame. An attacker could exploit this vulnerability by sending a malformed EAP frame to the targeted device. A successful exploit could allow the attacker to cause the AP to reload, resulting in a DoS condition while the AP is reloading. It may be necessary to manually power cycle the device in order for it to recover. This vulnerability affects the following Cisco products running either the Lightweight AP Software or Mobility Express image: Aironet 1560 Series Access Points, Aironet 2800 Series Access Points, Aironet 3800 Series Access Points. Note: The Cisco Aironet 1560 Series Access Point device is supported as of release 8.3.112.0. Cisco Bug IDs: CSC
Points. Note: The Cisco Aironet 1560 Series Access Point device is supported as of release 8.3.112.0. Cisco Bug IDs: CSCve18935. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039715 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171101-aironet2 - http://www.securityfocus.com/bid/101648
CVE ID: CVE-2017-12275 State: PUBLISHED Published: 2017-11-02T16:00:00 Last Updated: 2024-08-05T18:36:55.848Z Vendors: n/a Products: Cisco Wireless LAN Controller Problem Types: CWE-20 Description: A vulnerability in the implementation of 802.11v Basic Service Set (BSS) Transition Management functionality in Cisco Wireless LAN Controllers could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient input validation of 802.11v BSS Transition Management Response packets that an affected device receives from wireless clients. An attacker could exploit this vulnerab
agement Response packets that an affected device receives from wireless clients. An attacker could exploit this vulnerability by sending a malformed 802.11v BSS Transition Management Response packet to an affected device. A successful exploit could allow the attacker to cause the affected device to reload unexpectedly, resulting in a DoS condition. Cisco Bug IDs: CSCvb57803. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171101-wlc2 - http://www.securityfocus.com/bid/101657 - http://www.securitytracker.com/id/1039713
CVE ID: CVE-2017-12276 State: PUBLISHED Published: 2017-11-02T16:00:00 Last Updated: 2024-08-05T18:36:54.504Z Vendors: n/a Products: Cisco Prime Collaboration Provisioning Problem Types: CWE-20 Description: A vulnerability in the web framework code for the SQL database interface of the Cisco Prime Collaboration Provisioning application could allow an authenticated, remote attacker to impact the confidentiality and integrity of the application by executing arbitrary SQL queries, aka SQL Injection. The attacker could read or write information from the SQL database. The vulnerability is due to a lack of proper validation on user-supplied input within SQL queries. An attacker could exploit this
ability is due to a lack of proper validation on user-supplied input within SQL queries. An attacker could exploit this vulnerability by sending crafted URLs that contain malicious SQL statements to the affected application. An exploit could allow the attacker to determine the presence of certain values and write malicious input in the SQL database. The attacker would need to have valid user credentials. This vulnerability affects Cisco Prime Collaboration Provisioning Software Releases prior to 12.3. Cisco Bug IDs: CSCvf47935. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039711 - http://www.securityfocus.com/bid/101640 - https://tools.c
ner: References: - http://www.securitytracker.com/id/1039711 - http://www.securityfocus.com/bid/101640 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171101-cpcp
CVE ID: CVE-2017-12277 State: PUBLISHED Published: 2017-11-02T16:00:00 Last Updated: 2024-08-05T18:36:54.479Z Vendors: n/a Products: Cisco Firepower 4100 Series NGFW and Firepower 9300 Security Appliance Problem Types: CWE-20 Description: A vulnerability in the Smart Licensing Manager service of the Cisco Firepower 4100 Series Next-Generation Firewall (NGFW) and Firepower 9300 Security Appliance could allow an authenticated, remote attacker to inject arbitrary commands that could be executed with root privileges. The vulnerability is due to insufficient input validation of certain Smart Licensing configuration parameters. An authenticated attacker could exploit the vulnerability by configuri
certain Smart Licensing configuration parameters. An authenticated attacker could exploit the vulnerability by configuring a malicious URL within the affected feature. A successful exploit could allow the attacker to execute arbitrary commands with root privileges. This vulnerability affects the following Cisco Firepower Security products running FX-OS code trains 1.1.3, 1.1.4, and 2.0.1 (versions 2.1.1, 2.2.1, and 2.2.2 are not affected): Firepower 4100 Series Next-Generation Firewall and Firepower 9300 Security Appliance. Cisco Bug IDs: CSCvb86863. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101661 - https://tools.cisco.com/security/cen
s: - CVE Program Container: References: - http://www.securityfocus.com/bid/101661 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171101-fpwr
CVE ID: CVE-2017-12278 State: PUBLISHED Published: 2017-11-02T16:00:00 Last Updated: 2024-08-05T18:36:54.416Z Vendors: n/a Products: Cisco Wireless LAN Controller Problem Types: CWE-119 Description: A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco Wireless LAN Controllers could allow an authenticated, remote attacker to cause an affected device to restart, resulting in a denial of service (DoS) condition. The vulnerability is due to a memory leak that occurs on an affected device after the device fails to deallocate a buffer that is used when certain MIBs are polled. An attacker who knows the SNMP Version 2 SNMP Read string or has valid SNMP Version 3 crede
hen certain MIBs are polled. An attacker who knows the SNMP Version 2 SNMP Read string or has valid SNMP Version 3 credentials for an affected device could repeatedly poll the affected MIB object IDs (OIDs) and consume available memory on the device. When memory is sufficiently depleted on the device, the device will restart, resulting in a DoS condition. Cisco Bug IDs: CSCvc71674. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039712 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171101-wlc1 - http://www.securityfocus.com/bid/101642
CVE ID: CVE-2017-12279 State: PUBLISHED Published: 2017-11-02T16:00:00 Last Updated: 2024-08-05T18:36:56.365Z Vendors: n/a Products: Cisco IOS Software for Cisco Aironet Access Points Problem Types: CWE-200 Description: A vulnerability in the packet processing code of Cisco IOS Software for Cisco Aironet Access Points could allow an unauthenticated, adjacent attacker to retrieve content from memory on an affected device, which could lead to the disclosure of confidential information. The vulnerability is due to insufficient condition checks that are performed by the affected device when the device adds padding to egress packets. An attacker could exploit this vulnerability by sending a craft
d device when the device adds padding to egress packets. An attacker could exploit this vulnerability by sending a crafted IP packet to an affected device. A successful exploit could allow the attacker to retrieve content from memory on the affected device, which could lead to the disclosure of confidential information. Cisco Bug IDs: CSCvc21581. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171101-iosap - http://www.securitytracker.com/id/1039720 - http://www.securityfocus.com/bid/101643
CVE ID: CVE-2017-12280 State: PUBLISHED Published: 2017-11-02T16:00:00 Last Updated: 2024-08-05T18:36:54.538Z Vendors: n/a Products: Cisco Wireless LAN Controller Problem Types: CWE-119 Description: A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) Discovery Request parsing functionality of Cisco Wireless LAN Controllers could allow an unauthenticated, remote attacker to cause an affected device to restart unexpectedly, resulting in a denial of service (DoS) condition. The vulnerability is due to incomplete input validation of fields in CAPWAP Discovery Request packets by the affected device. An attacker could exploit this vulnerability by sending crafted CAP
AP Discovery Request packets by the affected device. An attacker could exploit this vulnerability by sending crafted CAPWAP Discovery Request packets to an affected device. A successful exploit could allow the attacker to cause the affected device to restart unexpectedly, resulting in a DoS condition. Cisco Bug IDs: CSCvb95842. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039723 - http://www.securityfocus.com/bid/101646 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171101-wlc3
CVE ID: CVE-2017-12281 State: PUBLISHED Published: 2017-11-02T16:00:00 Last Updated: 2024-08-05T18:36:54.527Z Vendors: n/a Products: Cisco Aironet 1800, 2800, and 3800 Series Access Points Problem Types: CWE-287 Description: A vulnerability in the implementation of Protected Extensible Authentication Protocol (PEAP) functionality for standalone configurations of Cisco Aironet 1800, 2800, and 3800 Series Access Points could allow an unauthenticated, adjacent attacker to bypass authentication and connect to an affected device. The vulnerability exists because the affected device uses an incorrect default configuration setting of fail open when running in standalone mode. An attacker could expl
ice uses an incorrect default configuration setting of fail open when running in standalone mode. An attacker could exploit this vulnerability by attempting to connect to an affected device. A successful exploit could allow the attacker to bypass authentication and connect to the affected device. This vulnerability affects Cisco Aironet 1800, 2800, and 3800 Series Access Points that are running a vulnerable software release and use WLAN configuration settings that include FlexConnect local switching and central authentication with MAC filtering. Cisco Bug IDs: CSCvd46314. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101649 - http://www.sec
dditional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101649 - http://www.securitytracker.com/id/1039725 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171101-aironet3
CVE ID: CVE-2017-12282 State: PUBLISHED Published: 2017-11-02T16:00:00 Last Updated: 2024-08-05T18:36:55.880Z Vendors: n/a Products: Cisco Wireless LAN Controller Problem Types: CWE-119 Description: A vulnerability in the Access Network Query Protocol (ANQP) ingress frame processing functionality of Cisco Wireless LAN Controllers could allow an unauthenticated, Layer 2 RF-adjacent attacker to cause an affected device to restart unexpectedly, resulting in a denial of service (DoS) condition. The vulnerability is due to incomplete input validation of ANQP query frames by the affected device. An attacker could exploit this vulnerability by sending a malformed ANQP query frame to an affected dev
affected device. An attacker could exploit this vulnerability by sending a malformed ANQP query frame to an affected device that is on an RF-adjacent network. A successful exploit could allow the attacker to cause the affected device to restart unexpectedly, resulting in a DoS condition. This vulnerability affects Cisco Wireless LAN Controllers that are running a vulnerable release of Cisco WLC Software and are configured to support Hotspot 2.0. Cisco Bug IDs: CSCve05779. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101650 - http://www.securitytracker.com/id/1039724 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/ci
0 - http://www.securitytracker.com/id/1039724 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171101-wlc4
CVE ID: CVE-2017-12283 State: PUBLISHED Published: 2017-11-02T16:00:00 Last Updated: 2024-08-05T18:36:54.498Z Vendors: n/a Products: Cisco Aironet 3800 Series Access Points Problem Types: CWE-119 Description: A vulnerability in the handling of 802.11w Protected Management Frames (PAF) by Cisco Aironet 3800 Series Access Points could allow an unauthenticated, adjacent attacker to terminate a valid user connection to an affected device, aka Denial of Service. The vulnerability exists because the affected device does not properly validate 802.11w PAF disassociation and deauthentication frames that it receives. An attacker could exploit this vulnerability by sending a spoofed 802.11w PAF frame f
ntication frames that it receives. An attacker could exploit this vulnerability by sending a spoofed 802.11w PAF frame from a valid, authenticated client on an adjacent network to an affected device. A successful exploit could allow the attacker to terminate a single valid user connection to the affected device. This vulnerability affects Access Points that are configured to run in FlexConnect mode. Cisco Bug IDs: CSCvc20627. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039718 - http://www.securityfocus.com/bid/101645 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171101-aironet4
CVE ID: CVE-2017-12284 State: PUBLISHED Published: 2017-10-19T08:00:00 Last Updated: 2024-08-05T18:36:55.722Z Vendors: n/a Products: Cisco Jabber for Windows Client Problem Types: CWE-200 Description: A vulnerability in the web interface of Cisco Jabber for Windows Client could allow an authenticated, local attacker to retrieve user profile information, which could lead to the disclosure of confidential information. The vulnerability is due to a lack of input- and validation-checking mechanisms in the system. An attacker could exploit this vulnerability by issuing specific commands after authenticating to the system. A successful exploit could allow the attacker to view profile information w
commands after authenticating to the system. A successful exploit could allow the attacker to view profile information where only certain parameters should be visible. Cisco Bug IDs: CSCve14401. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171018-jab - http://www.securitytracker.com/id/1039624 - http://www.securityfocus.com/bid/101501
CVE ID: CVE-2017-12285 State: PUBLISHED Published: 2017-10-19T08:00:00 Last Updated: 2024-08-05T18:36:55.684Z Vendors: n/a Products: Cisco Network Analysis Module Problem Types: CWE-20 Description: A vulnerability in the web interface of Cisco Network Analysis Module Software could allow an unauthenticated, remote attacker to delete arbitrary files from an affected system, aka Directory Traversal. The vulnerability exists because the affected software does not perform proper input validation of HTTP requests that it receives and the software does not apply role-based access controls (RBACs) to requested HTTP URLs. An attacker could exploit this vulnerability by sending a crafted HTTP request
controls (RBACs) to requested HTTP URLs. An attacker could exploit this vulnerability by sending a crafted HTTP request to the affected software. A successful exploit could allow the attacker to delete arbitrary files from the affected system. Cisco Bug IDs: CSCvf41365. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101527 - http://www.securitytracker.com/id/1039623 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171018-nam