Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ugzilla.redhat.com/show_bug.cgi?id=720552 - http://rhn.redhat.com/errata/RHSA-2011-1065.html - http://kerneltrap.org/mailarchive/linux-netdev/2010/5/21/6277805 - http://mirror.anl.gov/pub/linux/kernel/v2.6/ChangeLog-2.6.35 - http://rhn.redhat.com/errata/RHSA-2011-1163.html - http://openwall.com/lists/oss-security/2011/07/12/1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=53b0f08042f04813cd1a7473dacd3edfacb28eb3
CVE ID: CVE-2011-2526 State: PUBLISHED Published: 2011-07-14T23:00:00 Last Updated: 2024-08-06T23:00:34.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.19, when sendfile is enabled for the HTTP APR or HTTP NIO connector, does not validate certain request attributes, which allows local users to bypass intended file access restrictions or cause a denial of service (infinite loop or JVM crash) by leveraging an untrusted web application. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/45232 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mi
ferences: - http://secunia.com/advisories/45232 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19514 - http://svn.apache.org/viewvc?view=revision&revision=1145383 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:156 - http://www.debian.org/security/2012/dsa-2401 - http://rhn.redhat.com/errata/RHSA-2012-0325.html - http://secunia.com/advisories/48308 - http://marc.info/?l=bugtraq&m=136485229118404&w=2 - http://rhn.redhat.com/errata/RHSA-2012-0078.html - http://rhn.redhat.com/errata/RHSA-2012-0075.html - http://rhn.redhat.com/errata/RHSA-2012-0074.html - http://tomcat.apache.org/security-7.html - http://marc.info/?l=bugtraq&m=1334692678227
.com/errata/RHSA-2012-0074.html - http://tomcat.apache.org/security-7.html - http://marc.info/?l=bugtraq&m=133469267822771&w=2 - http://svn.apache.org/viewvc?view=revision&revision=1146005 - http://svn.apache.org/viewvc?view=revision&revision=1145571 - http://marc.info/?l=bugtraq&m=132215163318824&w=2 - http://tomcat.apache.org/security-6.html - http://secunia.com/advisories/57126 - https://bugzilla.redhat.com/show_bug.cgi?id=720948 - http://marc.info/?l=bugtraq&m=133469267822771&w=2 - http://www.securityfocus.com/archive/1/518889/100/0/threaded - http://tomcat.apache.org/security-5.html - http://osvdb.org/73797 - http://marc.info/?l=bugtraq&m=132215163318824&w=2 - https://exchange.xforce.ib
ecurity-5.html - http://osvdb.org/73797 - http://marc.info/?l=bugtraq&m=132215163318824&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/68541 - http://marc.info/?l=bugtraq&m=136485229118404&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14573 - http://svn.apache.org/viewvc?view=revision&revision=1145694 - http://osvdb.org/73798 - http://rhn.redhat.com/errata/RHSA-2012-0076.html - http://www.securitytracker.com/id?1025788 - http://marc.info/?l=bugtraq&m=139344343412337&w=2 - http://rhn.redhat.com/errata/RHSA-2012-0077.html - http://www.securityfocus.com/bid/48667 - https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746a
html - http://www.securityfocus.com/bid/48667 - https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2011-2527 State: PUBLISHED Published: 2012-06-21T15:00:00 Last Updated: 2024-08-06T23:00:34.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: The change_process_uid function in os-posix.c in Qemu 0.14.0 and earlier does not properly drop group privileges when the -runas option is used, which allows local guest users to access restricted files on the host. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/68539 - http://www.openwall.com/lists/oss-security/2011/07/12/5 - http://www.securityfocus.com/bid/48659 - http://www.openwall.com/lists/oss-security/2011/07/12/15 - https://www.debian.org/security/
ecurityfocus.com/bid/48659 - http://www.openwall.com/lists/oss-security/2011/07/12/15 - https://www.debian.org/security/2011/dsa-2282 - http://secunia.com/advisories/47992 - http://secunia.com/advisories/45419 - https://bugs.launchpad.net/qemu/+bug/807893 - http://lists.opensuse.org/opensuse-updates/2012-02/msg00009.html - http://www.osvdb.org/74752 - http://secunia.com/advisories/47157 - http://secunia.com/advisories/45188 - http://ubuntu.com/usn/usn-1177-1 - http://secunia.com/advisories/45187 - http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081972.html - http://rhn.redhat.com/errata/RHSA-2011-1531.html
CVE ID: CVE-2011-2528 State: PUBLISHED Published: 2011-07-19T20:00:00Z Last Updated: 2024-08-06T23:08:21.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in (1) Zope 2.12.x before 2.12.19 and 2.13.x before 2.13.8, as used in Plone 4.x and other products, and (2) PloneHotfix20110720 for Plone 3.x allows attackers to gain privileges via unspecified vectors, related to a "highly serious vulnerability." NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-0720. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/45056 - http://plone.org/products/plone/security/advisories/20110622 - https://bug
nces: - http://secunia.com/advisories/45056 - http://plone.org/products/plone/security/advisories/20110622 - https://bugzilla.redhat.com/show_bug.cgi?id=718824 - http://www.openwall.com/lists/oss-security/2011/07/12/9 - https://mail.zope.org/pipermail/zope-announce/2011-June/002260.html - http://plone.org/products/plone-hotfix/releases/20110622 - http://secunia.com/advisories/45111 - http://www.openwall.com/lists/oss-security/2011/07/04/6
CVE ID: CVE-2011-2529 State: PUBLISHED Published: 2011-07-06T19:00:00 Last Updated: 2024-08-06T23:08:22.019Z Vendors: n/a Products: n/a Problem Types: n/a Description: chan_sip.c in the SIP channel driver in Asterisk Open Source 1.6.x before 1.6.2.18.1 and 1.8.x before 1.8.4.3 does not properly handle '\0' characters in SIP packets, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/68203 - http://www.osvdb.org/73307 - http://www.securityfocus.com/bid/48431 - http://downloads.asterisk.
vulnerabilities/68203 - http://www.osvdb.org/73307 - http://www.securityfocus.com/bid/48431 - http://downloads.asterisk.org/pub/security/AST-2011-008.html - http://secunia.com/advisories/45239 - http://downloads.asterisk.org/pub/security/AST-2011-008.diff - http://www.debian.org/security/2011/dsa-2276 - http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062628.html - http://secunia.com/advisories/45048 - http://securitytracker.com/id?1025706 - http://secunia.com/advisories/45201
CVE ID: CVE-2011-2530 State: PUBLISHED Published: 2011-06-22T21:00:00Z Last Updated: 2024-09-17T01:07:00.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in RSEds.dll in RSHWare.exe in the EDS Hardware Installation Tool 1.0.5.1 and earlier in Rockwell Automation RSLinx Classic before 2.58 allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a malformed .eds file. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/MAPG-8G9PWX - http://www.kb.cert.org/vuls/id/127584 - http://www.securityfocus.com/bid/48092 - http://rockwellautomation.custhelp.com/
http://www.kb.cert.org/vuls/id/127584 - http://www.securityfocus.com/bid/48092 - http://rockwellautomation.custhelp.com/app/answers/detail/a_id/279194
CVE ID: CVE-2011-2531 State: PUBLISHED Published: 2011-06-22T21:00:00Z Last Updated: 2024-09-17T00:10:59.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: Prosody 0.8.x before 0.8.1, when MySQL is used, assigns an incorrect data type to the value column in certain tables, which might allow remote attackers to cause a denial of service (data truncation) by sending a large amount of data. Additional Analyst Notes: - CVE Program Container: References: - http://blog.prosody.im/prosody-0-8-1-released/ - http://hg.prosody.im/0.8/rev/d2406f0ce8a5 - http://hg.prosody.im/0.8/rev/c806a599224a - http://prosody.im/doc/release/0.8.1
CVE ID: CVE-2011-2532 State: PUBLISHED Published: 2011-06-22T21:00:00Z Last Updated: 2024-09-16T22:50:50.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: The json.decode function in util/json.lua in Prosody 0.8.x before 0.8.1 might allow remote attackers to cause a denial of service (infinite loop) via invalid JSON data, as demonstrated by truncated data. Additional Analyst Notes: - CVE Program Container: References: - http://blog.prosody.im/prosody-0-8-1-released/ - http://hg.prosody.im/0.8/rev/20979f124ad9 - http://prosody.im/doc/release/0.8.1
CVE ID: CVE-2011-2533 State: PUBLISHED Published: 2011-06-22T23:00:00 Last Updated: 2024-08-06T23:08:22.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: The configure script in D-Bus (aka DBus) 1.2.x before 1.2.28 allows local users to overwrite arbitrary files via a symlink attack on an unspecified file in /tmp/. Additional Analyst Notes: - CVE Program Container: References: - http://cgit.freedesktop.org/dbus/dbus/tree/NEWS?h=dbus-1.2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/68173 - http://www.securitytracker.com/id?1025720
CVE ID: CVE-2011-2534 State: PUBLISHED Published: 2011-06-22T23:00:00 Last Updated: 2024-08-06T23:08:22.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the clusterip_proc_write function in net/ipv4/netfilter/ipt_CLUSTERIP.c in the Linux kernel before 2.6.39 might allow local users to cause a denial of service or have unspecified other impact via a crafted write operation, related to string data that lacks a terminating '\0' character. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/03/18/15 - https://bugzilla.redhat.com/show_bug.cgi?id=689337 - http://www.securityfocus.com/bid/46921 - http://m
y/2011/03/18/15 - https://bugzilla.redhat.com/show_bug.cgi?id=689337 - http://www.securityfocus.com/bid/46921 - http://marc.info/?l=netfilter-devel&m=130036157327564&w=2 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39 - http://securityreason.com/securityalert/8284 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=961ed183a9fd080cf306c659b8736007e44065a5 - http://marc.info/?l=netfilter&m=129978077509888&w=2 - http://www.openwall.com/lists/oss-security/2011/03/21/4 - http://www.openwall.com/lists/oss-security/2011/03/21/1
CVE ID: CVE-2011-2535 State: PUBLISHED Published: 2011-07-06T19:00:00 Last Updated: 2024-08-06T23:08:22.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: chan_iax2.c in the IAX2 channel driver in Asterisk Open Source 1.4.x before 1.4.41.1, 1.6.2.x before 1.6.2.18.1, and 1.8.x before 1.8.4.3, and Asterisk Business Edition C.3 before C.3.7.3, accesses a memory address contained in an option control frame, which allows remote attackers to cause a denial of service (daemon crash) or possibly have unspecified other impact via a crafted frame. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/44973 - http://downloads.asterisk.org/pub/secur
es: - CVE Program Container: References: - http://secunia.com/advisories/44973 - http://downloads.asterisk.org/pub/security/AST-2011-010-1.8.diff - https://exchange.xforce.ibmcloud.com/vulnerabilities/68205 - http://downloads.asterisk.org/pub/security/AST-2011-010.html - http://www.securityfocus.com/bid/48431 - http://securitytracker.com/id?1025708 - http://secunia.com/advisories/45239 - http://www.debian.org/security/2011/dsa-2276 - http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062628.html - http://secunia.com/advisories/45048 - http://www.osvdb.org/73309 - http://secunia.com/advisories/45201
CVE ID: CVE-2011-2536 State: PUBLISHED Published: 2011-07-06T19:00:00 Last Updated: 2024-08-06T23:08:22.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: chan_sip.c in the SIP channel driver in Asterisk Open Source 1.4.x before 1.4.41.2, 1.6.2.x before 1.6.2.18.2, and 1.8.x before 1.8.4.4, and Asterisk Business Edition C.3.x before C.3.7.3, disregards the alwaysauthreject option and generates different responses for invalid SIP requests depending on whether the user account exists, which allows remote attackers to enumerate account names via a series of requests. Additional Analyst Notes: - CVE Program Container: References: - http://downloads.asterisk.org/pub/security/AST-2011
ts. Additional Analyst Notes: - CVE Program Container: References: - http://downloads.asterisk.org/pub/security/AST-2011-011-1.8.diff - http://downloads.asterisk.org/pub/security/AST-2011-011.html - http://www.securitytracker.com/id?1025734
CVE ID: CVE-2011-2538 State: PUBLISHED Published: 2019-10-28T20:19:09 Last Updated: 2024-11-20T17:04:58.550Z Vendors: Cisco Products: Cisco Video Communications Server (VCS) Problem Types: Other Description: Cisco Video Communications Server (VCS) before X7.0.3 contains a command injection vulnerability which allows remote, authenticated attackers to execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisco.com/c/dam/en/us/td/docs/telepresence/infrastructure/vcs/release_note/Cisco_VCS_Release_Note_X7-0-3.pdf
CVE ID: CVE-2011-2543 State: PUBLISHED Published: 2011-09-23T10:00:00 Last Updated: 2024-08-06T23:08:22.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the cuil component in Cisco Telepresence System Integrator C Series 4.x before TC4.2.0 allows remote authenticated users to cause a denial of service (endpoint reboot or process crash) or possibly execute arbitrary code via a long location parameter to the getxml program, aka Bug ID CSCtq46496. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/49670 - http://securityreason.com/securityalert/8393 - http://secunia.com/advisories/46057 - http://secunia.com/advisor
/49670 - http://securityreason.com/securityalert/8393 - http://secunia.com/advisories/46057 - http://secunia.com/advisories/46109 - http://securitytracker.com/id?1026072 - http://www.securityfocus.com/archive/1/519698/100/0/threaded - http://www.exploit-db.com/exploits/17871 - https://exchange.xforce.ibmcloud.com/vulnerabilities/69907
CVE ID: CVE-2011-2544 State: PUBLISHED Published: 2011-09-23T10:00:00 Last Updated: 2024-08-06T23:08:22.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the web interface in Cisco TelePresence System MXP Series F9.1 and earlier allows remote authenticated users to inject arbitrary web script or HTML via a crafted Call ID, as demonstrated by resultant cross-site request forgery (CSRF) attacks that change passwords or cause a denial of service, aka Bug ID CSCtq46488. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/49670 - http://securityreason.com/securityalert/8393 - http://secunia.com
References: - http://www.securityfocus.com/bid/49670 - http://securityreason.com/securityalert/8393 - http://secunia.com/advisories/46057 - http://secunia.com/advisories/46109 - http://securitytracker.com/id?1026072 - http://www.securityfocus.com/archive/1/519698/100/0/threaded - http://www.exploit-db.com/exploits/17871 - https://exchange.xforce.ibmcloud.com/vulnerabilities/69906
CVE ID: CVE-2011-2545 State: PUBLISHED Published: 2012-06-13T20:00:00Z Last Updated: 2024-09-17T01:36:19.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the SIP implementation on the Cisco SPA8000 and SPA8800 before 6.1.11, SPA2102 and SPA3102 before 5.2.13, and SPA 500 series IP phones before 7.4.9 allows remote attackers to inject arbitrary web script or HTML via the FROM field of an INVITE message, aka Bug IDs CSCtr27277, CSCtr27256, CSCtr27274, and CSCtr14715. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=26037
CVE ID: CVE-2011-2546 State: PUBLISHED Published: 2011-07-28T22:00:00 Last Updated: 2024-08-06T23:08:22.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the web-based management interface on Cisco SA 500 series security appliances with software before 2.1.19 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCtq65669. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/45355 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8915e.shtml - http://securitytracker.com/id?1025810 - https://exchange.xforce.ibmcloud.com/vulnerabilities/68737
6a0080b8915e.shtml - http://securitytracker.com/id?1025810 - https://exchange.xforce.ibmcloud.com/vulnerabilities/68737 - http://www.securityfocus.com/bid/48812
CVE ID: CVE-2011-2547 State: PUBLISHED Published: 2011-07-28T22:00:00 Last Updated: 2024-08-06T23:08:22.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web-based management interface on Cisco SA 500 series security appliances with software before 2.1.19 allows remote authenticated users to execute arbitrary commands via crafted parameters to web forms, aka Bug ID CSCtq65681. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/45355 - https://exchange.xforce.ibmcloud.com/vulnerabilities/68738 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8915e.shtml - http://securitytracker.com/id?1025810 - http://www.
om/en/US/products/products_security_advisory09186a0080b8915e.shtml - http://securitytracker.com/id?1025810 - http://www.securityfocus.com/bid/48810
CVE ID: CVE-2011-2549 State: PUBLISHED Published: 2011-07-28T22:00:00 Last Updated: 2024-08-06T23:08:22.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Cisco IOS XR 4.1.x before 4.1.1 on Cisco Aggregation Services Routers (ASR) 9000 series devices allows remote attackers to cause a denial of service (line-card reload) via an IPv4 packet, aka Bug ID CSCtr26695. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/48811 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b89155.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/68733 - http://securitytracker.com/id?1025811
6a0080b89155.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/68733 - http://securitytracker.com/id?1025811 - http://secunia.com/advisories/45333
CVE ID: CVE-2011-2555 State: PUBLISHED Published: 2011-08-29T20:00:00 Last Updated: 2024-08-06T23:08:23.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco TelePresence Recording Server 1.7.2.x before 1.7.2.1 has a default password for the root administrator account, which makes it easier for remote attackers to modify the configuration via an SSH session, aka Bug ID CSCtr76182. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/68887 - http://securitytracker.com/id?1025872 - http://www.securityfocus.com/bid/48932 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8ad3f.shtml
CVE ID: CVE-2011-2560 State: PUBLISHED Published: 2011-08-29T15:00:00Z Last Updated: 2024-09-17T04:19:34.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Packet Capture Service in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x does not properly handle idle TCP connections, which allows remote attackers to cause a denial of service (memory consumption and restart) by making many connections, aka Bug ID CSCtf97162. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8f531.shtml
CVE ID: CVE-2011-2561 State: PUBLISHED Published: 2011-08-29T15:00:00Z Last Updated: 2024-09-17T00:11:11.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SIP process in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 7.x before 7.1(5b)su4 and 8.x before 8.0(1) does not properly handle SDP data within a SIP call in certain situations related to use of the g729ar8 codec for a Media Termination Point (MTP), which allows remote attackers to cause a denial of service (service outage) via a crafted call, aka Bug ID CSCtc61990. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186
nalyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8f531.shtml
CVE ID: CVE-2011-2562 State: PUBLISHED Published: 2011-08-29T15:00:00Z Last Updated: 2024-09-16T23:41:34.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)su2, 7.x before 7.1(5b)su3, 8.x before 8.0(3a)su1, and 8.5 before 8.5(1) allows remote attackers to cause a denial of service (service outage) via a SIP INVITE message, aka Bug ID CSCth43256. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8f531.shtml
CVE ID: CVE-2011-2563 State: PUBLISHED Published: 2011-08-29T15:00:00 Last Updated: 2024-08-06T23:08:23.754Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Service Advertisement Framework (SAF) in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 8.x before 8.5(1) and Cisco Intercompany Media Engine 8.x before 8.5(1) allows remote attackers to cause a denial of service (device reload) via crafted SAF packets, aka Bug ID CSCth26669. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8f531.shtml - http://www.securitytracker.com/id?1025969 - htt
co.com/en/US/products/products_security_advisory09186a0080b8f531.shtml - http://www.securitytracker.com/id?1025969 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8f533.shtml
CVE ID: CVE-2011-2564 State: PUBLISHED Published: 2011-08-29T15:00:00 Last Updated: 2024-08-06T23:08:22.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Service Advertisement Framework (SAF) in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 8.x before 8.5(1) and Cisco Intercompany Media Engine 8.x before 8.5(1) allows remote attackers to cause a denial of service (device reload) via crafted SAF packets, aka Bug ID CSCth19417. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8f531.shtml - http://www.securitytracker.com/id?1025969 - htt