Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-6245 State: PUBLISHED Published: 2015-08-24T23:00:00 Last Updated: 2024-08-06T07:15:13.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: epan/dissectors/packet-gsm_rlcmac.c in the GSM RLC/MAC dissector in Wireshark 1.12.x before 1.12.7 uses incorrect integer data types, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/76382 - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168837.html - http://www.securitytracker.com/id/1033272 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct
37.html - http://www.securitytracker.com/id/1033272 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11358 - http://www.wireshark.org/security/wnpa-sec-2015-25.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165509.html - http://www.debian.org/security/2015/dsa-3367 - http://lists.opensuse.org/opensuse-updates/2015-10/msg00053.html - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=78bc3dd93a562ca1b1c5dbc8f71d2967008be7ed - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
CVE ID: CVE-2015-6246 State: PUBLISHED Published: 2015-08-24T23:00:00 Last Updated: 2024-08-06T07:15:13.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dissect_wa_payload function in epan/dissectors/packet-waveagent.c in the WaveAgent dissector in Wireshark 1.12.x before 1.12.7 mishandles large tag values, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168837.html - http://www.securitytracker.com/id/1033272 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-271964
ttp://www.securitytracker.com/id/1033272 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11358 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=5523726e6960fe9d7e301376fd7a94599f65fd42 - http://www.securityfocus.com/bid/76381 - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165509.html - http://www.debian.org/security/2015/dsa-3367 - http://www.wireshark.org/security/wnpa-sec-2015-26.html - http://lists.opensuse.org/opensuse-updates/2015-10/msg00053.html - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
CVE ID: CVE-2015-6247 State: PUBLISHED Published: 2015-08-24T23:00:00 Last Updated: 2024-08-06T07:15:13.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dissect_openflow_tablemod_v5 function in epan/dissectors/packet-openflow_v5.c in the OpenFlow dissector in Wireshark 1.12.x before 1.12.7 does not validate a certain offset value, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168837.html - http://www.securitytracker.com/id/1033272 - https://code.wireshark.org/review/gitweb?p=wireshark.git%
ober/168837.html - http://www.securitytracker.com/id/1033272 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=828358d22c6bcf0a1ade5b3ffaa8018a385bfc6c - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11358 - http://www.wireshark.org/security/wnpa-sec-2015-27.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165509.html - http://www.debian.org/security/2015/dsa-3367 - http://lists.opensuse.org/opensuse-updates/2015-10/msg00053.html - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
CVE ID: CVE-2015-6248 State: PUBLISHED Published: 2015-08-24T23:00:00 Last Updated: 2024-08-06T07:15:13.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ptvcursor_add function in the ptvcursor implementation in epan/proto.c in Wireshark 1.12.x before 1.12.7 does not check whether the expected amount of data is available, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=5b53445e815fd6b652d49df03ec3d60b088c4fbc - http://www.wireshark.org/security/wnpa-sec-2015-28.html - https://code.wiresh
5b53445e815fd6b652d49df03ec3d60b088c4fbc - http://www.wireshark.org/security/wnpa-sec-2015-28.html - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=3fc4a831e035604b0af14ed8a5c9f6596a3448d0 - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168837.html - http://www.securitytracker.com/id/1033272 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11358 - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165509.html - http://www.debian.org/security/2015/dsa-3367 - http://www.securityfocus.com/bid/76387 - http://lists.opensuse.org/opensuse
tp://www.debian.org/security/2015/dsa-3367 - http://www.securityfocus.com/bid/76387 - http://lists.opensuse.org/opensuse-updates/2015-10/msg00053.html - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
CVE ID: CVE-2015-6249 State: PUBLISHED Published: 2015-08-24T23:00:00 Last Updated: 2024-08-06T07:15:13.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dissect_wccp2r1_address_table_info function in epan/dissectors/packet-wccp.c in the WCCP dissector in Wireshark 1.12.x before 1.12.7 does not prevent the conflicting use of a table for both IPv4 and IPv6 addresses, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.wireshark.org/security/wnpa-sec-2015-29.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168837.html - http
curity/wnpa-sec-2015-29.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168837.html - http://www.securitytracker.com/id/1033272 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11358 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b1eaf29d4056f05d1bd6a7f3d692553ec069a228 - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165509.html - http://www.debian.org/security/2015/dsa-3367 - http://lists.opensuse.org/opensuse-updates/2015-10/msg00053.html - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
CVE ID: CVE-2015-6250 State: PUBLISHED Published: 2017-09-06T21:00:00 Last Updated: 2024-08-06T07:15:13.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: simple-php-captcha before commit 9d65a945029c7be7bb6bc893759e74c5636be694 allows remote attackers to automatically generate the captcha response by running the same code on the client-side. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/claviska/simple-php-captcha/issues/16 - http://www.openwall.com/lists/oss-security/2015/08/17/7 - https://github.com/claviska/simple-php-captcha/commit/9d65a945029c7be7bb6bc893759e74c5636be694
CVE ID: CVE-2015-6251 State: PUBLISHED Published: 2015-08-24T14:00:00 Last Updated: 2024-08-06T07:15:13.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in GnuTLS before 3.3.17 and 3.4.x before 3.4.4 allows remote attackers to cause a denial of service via a long DistinguishedName (DN) entry in a certificate. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1251902 - http://lists.opensuse.org/opensuse-updates/2015-09/msg00001.html - http://www.securitytracker.com/id/1033226 - http://www.gnutls.org/security.html#GNUTLS-SA-2015-3 - http://www.openwall.com/lists/oss-security/2015/08/10/1 - http:
- http://www.gnutls.org/security.html#GNUTLS-SA-2015-3 - http://www.openwall.com/lists/oss-security/2015/08/10/1 - http://www.securityfocus.com/bid/76267 - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165286.html - https://gitlab.com/gnutls/gnutls/commit/272854367efc130fbd4f1a51840d80c630214e12 - http://www.openwall.com/lists/oss-security/2015/08/17/6 - http://www.debian.org/security/2015/dsa-3334
CVE ID: CVE-2015-6252 State: PUBLISHED Published: 2015-10-19T10:00:00 Last Updated: 2024-08-06T07:15:13.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: The vhost_dev_ioctl function in drivers/vhost/vhost.c in the Linux kernel before 4.1.5 allows local users to cause a denial of service (memory consumption) via a VHOST_SET_LOG_FD ioctl call that triggers permanent file-descriptor allocation. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2748-1 - http://www.securityfocus.com/bid/76400 - http://www.ubuntu.com/usn/USN-2751-1 - http://www.openwall.com/lists/oss-security/2015/08/18/3 - http://www.kernel.org/pub/linux/kernel/v4.x/Chan
/USN-2751-1 - http://www.openwall.com/lists/oss-security/2015/08/18/3 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.5 - http://www.debian.org/security/2015/dsa-3364 - http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00009.html - http://www.ubuntu.com/usn/USN-2752-1 - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00013.html - http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00035.html - http://www.ubuntu.com/usn/USN-2749-1 - https://github.com/torvalds/linux/commit/7932c0bd7740f4cd2aa168d3ce0199e7af7d72d5 - https://bugzilla.redhat.com/show_bug.cgi?id=1251839 - http://www.ubuntu.com/usn/USN-2760-1 - http://www.ubuntu.com/usn/USN-275
//bugzilla.redhat.com/show_bug.cgi?id=1251839 - http://www.ubuntu.com/usn/USN-2760-1 - http://www.ubuntu.com/usn/USN-2759-1 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html - http://www.securitytracker.com/id/1033666 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=7932c0bd7740f4cd2aa168d3ce0199e7af7d72d5 - http://www.ubuntu.com/usn/USN-2777-1
CVE ID: CVE-2015-6253 State: PUBLISHED Published: 2019-07-29T15:36:27 Last Updated: 2024-08-06T07:15:13.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: edx-platform before 2015-08-17 allows XSS in the Studio listing of courses. Additional Analyst Notes: - CVE Program Container: References: - https://open.edx.org/CVE-2015-6253 - https://open.edx.org/announcements/cve-2015-6253/
CVE ID: CVE-2015-6254 State: PUBLISHED Published: 2015-08-17T20:00:00 Last Updated: 2024-08-06T07:15:13.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) Service Provider (SP) and (2) Identity Provider (IdP) in PicketLink before 2.7.0 does not ensure that the Destination attribute in a Response element in a SAML assertion matches the location from which the message was received, which allows remote attackers to have unspecified impact via unknown vectors. NOTE: this identifier was SPLIT from CVE-2015-0277 per ADT2 due to different vulnerability types. Additional Analyst Notes: - CVE Program Container: References: - https://issues.jboss.org/browse/PLINK-680 - http://rhn.
Additional Analyst Notes: - CVE Program Container: References: - https://issues.jboss.org/browse/PLINK-680 - http://rhn.redhat.com/errata/RHSA-2015-0849.html - http://rhn.redhat.com/errata/RHSA-2015-0848.html - http://rhn.redhat.com/errata/RHSA-2015-0846.html - https://bugzilla.redhat.com/show_bug.cgi?id=1194832 - http://rhn.redhat.com/errata/RHSA-2015-0847.html
CVE ID: CVE-2015-6255 State: PUBLISHED Published: 2015-08-19T15:00:00 Last Updated: 2024-08-06T07:15:13.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Cisco Unified Web and E-Mail Interaction Manager 9.0(2) allows remote attackers to inject arbitrary web script or HTML via a crafted chat message, aka Bug ID CSCuo89051. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033330 - http://tools.cisco.com/security/center/viewAlert.x?alertId=40555 - http://www.securityfocus.com/bid/76406
CVE ID: CVE-2015-6256 State: PUBLISHED Published: 2015-08-22T17:00:00 Last Updated: 2024-08-06T07:15:13.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco ASR 5000 devices with software 19.0.M0.60828 allow remote attackers to cause a denial of service (OSPF process restart) via crafted length fields in headers of OSPF packets, aka Bug ID CSCuv62820. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=40585 - http://www.securitytracker.com/id/1033355
CVE ID: CVE-2015-6258 State: PUBLISHED Published: 2015-08-22T17:00:00 Last Updated: 2024-08-06T07:15:13.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Internet Access Point Protocol (IAPP) module on Cisco Wireless LAN Controller (WLC) devices with software 8.1(104.37) allows remote attackers to trigger incorrect traffic forwarding via crafted IPv6 packets, aka Bug ID CSCuv40033. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=40586 - http://www.securitytracker.com/id/1033360
CVE ID: CVE-2015-6259 State: PUBLISHED Published: 2015-09-04T01:00:00 Last Updated: 2024-08-06T07:15:13.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: The JavaServer Pages (JSP) component in Cisco Integrated Management Controller (IMC) Supervisor before 1.0.0.1 and UCS Director (formerly Cloupia Unified Infrastructure Controller) before 5.2.0.1 allows remote attackers to write to arbitrary files via crafted HTTP requests, aka Bug IDs CSCus36435 and CSCus62625. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150902-cimcs - http://www.securitytracker.com/id/1033451
CVE ID: CVE-2015-6260 State: PUBLISHED Published: 2016-03-03T22:00:00 Last Updated: 2024-08-06T07:15:13.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco NX-OS 7.1(1)N1(1) on Nexus 5500, 5600, and 6000 devices does not properly validate PDUs in SNMP packets, which allows remote attackers to cause a denial of service (SNMP application restart) via a crafted packet, aka Bug ID CSCut84645. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035158 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-n5ksnmp
CVE ID: CVE-2015-6261 State: PUBLISHED Published: 2015-08-26T14:00:00 Last Updated: 2024-08-06T07:15:13.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 allows remote authenticated users to bypass intended access restrictions and read configuration files by leveraging the Mobile and Remote Access (MRA) role and establishing a TFTP session, aka Bug ID CSCuv78531. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033379 - http://tools.cisco.com/security/center/viewAlert.x?alertId=40620
CVE ID: CVE-2015-6262 State: PUBLISHED Published: 2015-08-25T01:00:00 Last Updated: 2024-08-06T07:15:13.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Cisco Prime Infrastructure 1.2(0.103) and 2.0(0.0) allows remote attackers to hijack the authentication of arbitrary users, aka Bug IDs CSCum49054 and CSCum49059. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=40652 - http://www.securitytracker.com/id/1033364
CVE ID: CVE-2015-6263 State: PUBLISHED Published: 2015-10-12T01:00:00 Last Updated: 2024-08-06T07:15:13.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RADIUS client implementation in Cisco IOS 15.4(3)M2.2, when a shared RADIUS secret is configured, allows remote RADIUS servers to cause a denial of service (device reload) via malformed answers, aka Bug ID CSCuu59324. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033747 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151005-ios-radius
CVE ID: CVE-2015-6264 State: REJECTED Published: 2016-04-01T22:00:00 Last Updated: 2016-04-01T21:57:01 Description: No description available.
CVE ID: CVE-2015-6265 State: PUBLISHED Published: 2015-08-27T01:50:00 Last Updated: 2024-08-06T07:15:13.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CLI in Cisco Application Control Engine (ACE) 4700 A5 3.0 and earlier allows local users to bypass intended access restrictions, and read or write to files, by entering an unspecified CLI command with a crafted file as this command's input, aka Bug ID CSCur23662. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033381 - http://tools.cisco.com/security/center/viewAlert.x?alertId=40666 - http://www.securityfocus.com/bid/76491
CVE ID: CVE-2015-6266 State: PUBLISHED Published: 2015-08-28T14:00:00 Last Updated: 2024-08-06T07:15:13.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: The guest portal in Cisco Identity Services Engine (ISE) 3300 1.2(0.899) does not restrict access to uploaded HTML documents, which allows remote attackers to obtain sensitive information from customized documents via a direct request, aka Bug ID CSCuo78045. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=40691 - http://www.securitytracker.com/id/1033405
CVE ID: CVE-2015-6267 State: PUBLISHED Published: 2015-08-29T01:00:00 Last Updated: 2024-08-06T07:15:13.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS XE before 2.2.3 on ASR 1000 devices allows remote attackers to cause a denial of service (Embedded Services Processor crash) via a crafted L2TP packet, aka Bug IDs CSCsw95722 and CSCsw95496. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033410 - http://tools.cisco.com/security/center/viewAlert.x?alertId=40684
CVE ID: CVE-2015-6268 State: PUBLISHED Published: 2015-08-29T01:00:00 Last Updated: 2024-08-06T07:15:13.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS XE before 2.2.3 on ASR 1000 devices allows remote attackers to cause a denial of service (Embedded Services Processor crash) via a crafted IPv4 UDP packet, aka Bug ID CSCsw95482. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033406 - http://tools.cisco.com/security/center/viewAlert.x?alertId=40685
CVE ID: CVE-2015-6269 State: PUBLISHED Published: 2015-08-31T20:00:00 Last Updated: 2024-08-06T07:15:13.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS XE before 2.2.3 on ASR 1000 devices allows remote attackers to cause a denial of service (Embedded Services Processor crash) via a crafted (1) IPv4 or (2) IPv6 packet, aka Bug ID CSCsw69990. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033410 - http://tools.cisco.com/security/center/viewAlert.x?alertId=40686
CVE ID: CVE-2015-6270 State: PUBLISHED Published: 2015-08-31T20:00:00 Last Updated: 2024-08-06T07:15:13.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS XE before 2.2.3 on ASR 1000 devices allows remote attackers to cause a denial of service (Embedded Services Processor crash) via a crafted IPv6 packet, aka Bug ID CSCsv98555. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033410 - http://tools.cisco.com/security/center/viewAlert.x?alertId=40687
CVE ID: CVE-2015-6271 State: PUBLISHED Published: 2015-08-31T20:00:00 Last Updated: 2024-08-06T07:15:13.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS XE 2.1.0 through 2.4.3 and 2.5.0 on ASR 1000 devices, when NAT Application Layer Gateway is used, allows remote attackers to cause a denial of service (Embedded Services Processor crash) via a crafted SIP packet, aka Bug IDs CSCta74749 and CSCta77008. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033410 - http://tools.cisco.com/security/center/viewAlert.x?alertId=40688
CVE ID: CVE-2015-6272 State: PUBLISHED Published: 2015-08-31T20:00:00 Last Updated: 2024-08-06T07:15:13.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS XE 2.1.0 through 2.2.3 and 2.3.0 on ASR 1000 devices, when NAT Application Layer Gateway is used, allows remote attackers to cause a denial of service (Embedded Services Processor crash) via a crafted H.323 packet, aka Bug ID CSCsx35393, CSCsx07094, and CSCsw93064. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033410 - http://tools.cisco.com/security/center/viewAlert.x?alertId=40689
CVE ID: CVE-2015-6273 State: PUBLISHED Published: 2015-08-29T01:00:00 Last Updated: 2024-08-06T07:15:13.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS XE before 3.1.2S on ASR 1000 devices mishandles the automatic setup of Virtual Fragment Reassembly (VFR) by certain firewall and NAT components, which allows remote attackers to cause a denial of service (Embedded Services Processor crash) via crafted IP packets, aka Bug IDs CSCtf87624, CSCte93229, CSCtd19103, and CSCti63623. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033408 - http://tools.cisco.com/security/center/viewAlert.x?alertId=40690
CVE ID: CVE-2015-6274 State: PUBLISHED Published: 2015-09-02T16:00:00 Last Updated: 2024-08-06T07:15:13.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IPv4 implementation on Cisco ASR 1000 devices with software 15.5(3)S allows remote attackers to cause a denial of service (ESP QFP CPU consumption) by triggering packet fragmentation and reassembly, aka Bug ID CSCuv71273. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=40708 - http://www.securitytracker.com/id/1033437
CVE ID: CVE-2015-6276 State: PUBLISHED Published: 2015-09-05T01:00:00 Last Updated: 2024-08-06T07:15:13.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco TelePresence IX5000 8.0.3 stores a private key associated with an X.509 certificate under the web root with insufficient access control, which allows remote attackers to obtain cleartext versions of HTTPS traffic or spoof devices via a direct request to the certificate directory, aka Bug ID CSCuu63501. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033477 - http://tools.cisco.com/security/center/viewAlert.x?alertId=40727
CVE ID: CVE-2015-6277 State: PUBLISHED Published: 2015-09-02T16:00:00 Last Updated: 2024-08-06T07:15:13.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ARP implementation in Cisco NX-OS on Nexus 1000V devices for VMware vSphere 5.2(1)SV3(1.4), Nexus 3000 devices 7.3(0)ZD(0.47), Nexus 4000 devices 4.1(2)E1, Nexus 9000 devices 7.3(0)ZD(0.61), and MDS 9000 devices 7.0(0)HSK(0.353) and SAN-OS NX-OS on MDS 9000 devices 7.0(0)HSK(0.353) allows remote attackers to cause a denial of service (ARP process restart) via crafted packet-header fields, aka Bug ID CSCut25292. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033443 - http
25292. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033443 - http://tools.cisco.com/security/center/viewAlert.x?alertId=40748