Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-15401 State: PUBLISHED Published: 2018-10-05T14:00:00Z Last Updated: 2024-11-26T14:32:26.442Z Vendors: Cisco Products: Cisco Hosted Collaboration Mediation Fulfillment Problem Types: CWE-352 Description: A vulnerability in the web-based management interface of Cisco Hosted Collaboration Mediation Fulfillment could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected system. The vulnerability is due to insufficient CSRF protections for the web-based management interface. An attacker could exploit this vulnerability by persuading a user of the interface to follow a malicious link. A success
An attacker could exploit this vulnerability by persuading a user of the interface to follow a malicious link. A successful exploit could allow the attacker to perform arbitrary actions on an affected system via a web browser and with the privileges of the user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181003-hcmf-csrf
CVE ID: CVE-2018-15402 State: PUBLISHED Published: 2018-10-17T20:00:00Z Last Updated: 2024-11-26T14:25:09.294Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: Cisco Products: Cisco Enterprise NFV Infrastructure Software Problem Types: CWE-352 Description: A vulnerability in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an unauthenticated, remote attacker to conduct cross-site request forgery (CSRF) attacks. The vulnerability is due to improper validation of Origin headers on HTTP requests within the management interface. An attacker could exploit this vulnerability by convincing a targeted user to follow a URL to a malicious website. An ex
An attacker could exploit this vulnerability by convincing a targeted user to follow a URL to a malicious website. An exploit could allow the attacker to take actions within the software with the privileges of the targeted user or gain access to sensitive information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/105662 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181017-nfvis-csrf
CVE ID: CVE-2018-15403 State: PUBLISHED Published: 2018-10-05T14:00:00Z Last Updated: 2024-11-26T14:32:16.775Z Vendors: Cisco Products: Cisco Emergency Responder Problem Types: CWE-601 Description: A vulnerability in the web interface of Cisco Emergency Responder, Cisco Unified Communications Manager, Cisco Unified Communications Manager IM & Presence Service, and Cisco Unity Connection could allow an authenticated, remote attacker to redirect a user to a malicious web page. The vulnerability is due to improper input validation of the parameters of an HTTP request. An attacker could exploit this vulnerability by crafting an HTTP request that causes the web interface to redirect a request to
ker could exploit this vulnerability by crafting an HTTP request that causes the web interface to redirect a request to a specific malicious URL. This type of vulnerability is known as an open redirect attack and is used in phishing attacks that get users to unknowingly visit malicious sites. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securitytracker.com/id/1041789 - http://www.securitytracker.com/id/1041780 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181003-er-ucm-redirect
CVE ID: CVE-2018-15404 State: PUBLISHED Published: 2018-10-05T14:00:00Z Last Updated: 2024-11-26T14:32:07.570Z Vendors: Cisco Products: Cisco Unified Computing System Director Problem Types: CWE-399 Description: A vulnerability in the web interface of Cisco Integrated Management Controller (IMC) Supervisor and Cisco UCS Director could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected system. The vulnerability is due to insufficient restrictions on the size or total amount of resources allowed via the web interface. An attacker who has valid credentials for the application could exploit this vulnerability by sending a crafted or malformed HTTP
er who has valid credentials for the application could exploit this vulnerability by sending a crafted or malformed HTTP request to the web interface. A successful exploit could allow the attacker to cause oversubscription of system resources or cause a component to become unresponsive, resulting in a DoS condition. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181003-imcs-ucsd-dos
CVE ID: CVE-2018-15405 State: PUBLISHED Published: 2018-10-05T14:00:00Z Last Updated: 2024-11-26T14:31:57.155Z Vendors: Cisco Products: Cisco Unified Computing System Director Problem Types: CWE-285 Description: A vulnerability in the web interface for specific feature sets of Cisco Integrated Management Controller (IMC) Supervisor and Cisco UCS Director could allow an authenticated, remote attacker to access sensitive information. The vulnerability is due to an authorization check that does not properly include the access level of the web interface user. An attacker who has valid application credentials could exploit this vulnerability by sending a crafted HTTP request to the web interface.
s valid application credentials could exploit this vulnerability by sending a crafted HTTP request to the web interface. A successful exploit could allow the attacker to view sensitive information that belongs to other users. The attacker could then use this information to conduct additional reconnaissance attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securitytracker.com/id/1041779 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181003-imcs-ucsd-id
CVE ID: CVE-2018-15406 State: PUBLISHED Published: 2018-10-05T14:00:00Z Last Updated: 2024-11-26T14:31:47.567Z Vendors: Cisco Products: Cisco Unified Computing System Director Problem Types: CWE-79 Description: A vulnerability in the web-based management interface of Cisco UCS Director could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web-based management interface of an affected system. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected system. An attacker could exploit this vulnerability by persuading a user of the interface to click a malic
an affected system. An attacker could exploit this vulnerability by persuading a user of the interface to click a malicious link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or allow the attacker to access sensitive, browser-based information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181003-ucsd-xss - http://www.securitytracker.com/id/1041783
CVE ID: CVE-2018-15407 State: PUBLISHED Published: 2018-10-05T14:00:00Z Last Updated: 2024-11-26T14:31:37.493Z Vendors: Cisco Products: Cisco HyperFlex HX-Series Problem Types: CWE-200 Description: A vulnerability in the installation process of Cisco HyperFlex Software could allow an authenticated, local attacker to read sensitive information. The vulnerability is due to insufficient cleanup of installation files. An attacker could exploit this vulnerability by accessing the residual installation files on an affected system. A successful exploit could allow the attacker to collect sensitive information regarding the configuration of the system. Additional Analyst Notes: - CVE Program Contain
collect sensitive information regarding the configuration of the system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181003-hyperflex-info
CVE ID: CVE-2018-15408 State: PUBLISHED Published: 2018-10-05T14:00:00Z Last Updated: 2024-11-26T14:31:29.056Z Vendors: Cisco Products: Cisco WebEx WRF Player Problem Types: CWE-20 Description: A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software improperly validates Advanced Recording Format (ARF) and Webex Recording Format (WRF) files. An attacker could exploit this vulnerability by sending a user a malicious ARF or WRF file via a link or an email attachment and persuading the user to ope
erability by sending a user a malicious ARF or WRF file via a link or an email attachment and persuading the user to open the file by using the affected software. A successful exploit could allow the attacker to execute arbitrary code on the affected system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securitytracker.com/id/1041795 - http://www.securityfocus.com/bid/105520 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181003-webex-rce
CVE ID: CVE-2018-15409 State: PUBLISHED Published: 2018-10-05T14:00:00Z Last Updated: 2024-11-26T14:31:20.292Z Vendors: Cisco Products: Cisco WebEx WRF Player Problem Types: CWE-20 Description: A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software improperly validates Advanced Recording Format (ARF) and Webex Recording Format (WRF) files. An attacker could exploit this vulnerability by sending a user a malicious ARF or WRF file via a link or an email attachment and persuading the user to ope
CVE ID: CVE-2018-15410 State: PUBLISHED Published: 2018-10-05T14:00:00Z Last Updated: 2024-11-26T14:31:10.229Z Vendors: Cisco Products: Cisco WebEx WRF Player Problem Types: CWE-20 Description: A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software improperly validates Advanced Recording Format (ARF) and Webex Recording Format (WRF) files. An attacker could exploit this vulnerability by sending a user a malicious ARF or WRF file via a link or an email attachment and persuading the user to ope
CVE ID: CVE-2018-15411 State: PUBLISHED Published: 2018-10-05T14:00:00Z Last Updated: 2024-11-26T14:30:58.206Z Vendors: Cisco Products: Cisco WebEx WRF Player Problem Types: CWE-20 Description: A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software improperly validates Advanced Recording Format (ARF) and Webex Recording Format (WRF) files. An attacker could exploit this vulnerability by sending a user a malicious ARF or WRF file via a link or an email attachment and persuading the user to ope
CVE ID: CVE-2018-15412 State: PUBLISHED Published: 2018-10-05T14:00:00Z Last Updated: 2024-11-26T14:30:47.436Z Vendors: Cisco Products: Cisco WebEx WRF Player Problem Types: CWE-20 Description: A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software improperly validates Advanced Recording Format (ARF) and Webex Recording Format (WRF) files. An attacker could exploit this vulnerability by sending a user a malicious ARF or WRF file via a link or an email attachment and persuading the user to ope
CVE ID: CVE-2018-15413 State: PUBLISHED Published: 2018-10-05T14:00:00Z Last Updated: 2024-11-26T14:30:37.338Z Vendors: Cisco Products: Cisco WebEx WRF Player Problem Types: CWE-20 Description: A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software improperly validates Advanced Recording Format (ARF) and Webex Recording Format (WRF) files. An attacker could exploit this vulnerability by sending a user a malicious ARF or WRF file via a link or an email attachment and persuading the user to ope
CVE ID: CVE-2018-15414 State: PUBLISHED Published: 2018-10-05T14:00:00Z Last Updated: 2024-11-26T14:30:27.692Z Vendors: Cisco Products: Cisco WebEx ARF Player Problem Types: CWE-20 Description: A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software improperly validates Advanced Recording Format (ARF) and Webex Recording Format (WRF) files. An attacker could exploit this vulnerability by sending a user a malicious ARF or WRF file via a link or an email attachment and persuading the user to ope
erability by sending a user a malicious ARF or WRF file via a link or an email attachment and persuading the user to open the file by using the affected software. A successful exploit could allow the attacker to execute arbitrary code on the affected system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securitytracker.com/id/1041689 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180919-webex - http://www.securityfocus.com/bid/105374
CVE ID: CVE-2018-15415 State: PUBLISHED Published: 2018-10-05T14:00:00Z Last Updated: 2024-11-26T14:30:18.039Z Vendors: Cisco Products: Cisco WebEx WRF Player Problem Types: CWE-20 Description: A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software improperly validates Advanced Recording Format (ARF) and Webex Recording Format (WRF) files. An attacker could exploit this vulnerability by sending a user a malicious ARF or WRF file via a link or an email attachment and persuading the user to ope
CVE ID: CVE-2018-15416 State: PUBLISHED Published: 2018-10-05T14:00:00Z Last Updated: 2024-11-26T14:30:06.903Z Vendors: Cisco Products: Cisco WebEx WRF Player Problem Types: CWE-20 Description: A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software improperly validates Advanced Recording Format (ARF) and Webex Recording Format (WRF) files. An attacker could exploit this vulnerability by sending a user a malicious ARF or WRF file via a link or an email attachment and persuading the user to ope
CVE ID: CVE-2018-15417 State: PUBLISHED Published: 2018-10-05T14:00:00Z Last Updated: 2024-11-26T14:29:56.615Z Vendors: Cisco Products: Cisco WebEx WRF Player Problem Types: CWE-20 Description: A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software improperly validates Advanced Recording Format (ARF) and Webex Recording Format (WRF) files. An attacker could exploit this vulnerability by sending a user a malicious ARF or WRF file via a link or an email attachment and persuading the user to ope
CVE ID: CVE-2018-15418 State: PUBLISHED Published: 2018-10-05T14:00:00Z Last Updated: 2024-11-26T14:29:43.028Z Vendors: Cisco Products: Cisco WebEx WRF Player Problem Types: CWE-20 Description: A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software improperly validates Advanced Recording Format (ARF) and Webex Recording Format (WRF) files. An attacker could exploit this vulnerability by sending a user a malicious ARF or WRF file via a link or an email attachment and persuading the user to ope
CVE ID: CVE-2018-15419 State: PUBLISHED Published: 2018-10-05T14:00:00Z Last Updated: 2024-11-26T14:29:33.502Z Vendors: Cisco Products: Cisco WebEx WRF Player Problem Types: CWE-20 Description: A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software improperly validates Advanced Recording Format (ARF) and Webex Recording Format (WRF) files. An attacker could exploit this vulnerability by sending a user a malicious ARF or WRF file via a link or an email attachment and persuading the user to ope
CVE ID: CVE-2018-15420 State: PUBLISHED Published: 2018-10-05T14:00:00Z Last Updated: 2024-11-26T14:29:23.173Z Vendors: Cisco Products: Cisco WebEx WRF Player Problem Types: CWE-20 Description: A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software improperly validates Advanced Recording Format (ARF) and Webex Recording Format (WRF) files. An attacker could exploit this vulnerability by sending a user a malicious ARF or WRF file via a link or an email attachment and persuading the user to ope
CVE ID: CVE-2018-15421 State: PUBLISHED Published: 2018-10-05T14:00:00Z Last Updated: 2024-11-26T14:29:13.806Z Vendors: Cisco Products: Cisco WebEx ARF Player Problem Types: CWE-20 Description: A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software improperly validates Advanced Recording Format (ARF) and Webex Recording Format (WRF) files. An attacker could exploit this vulnerability by sending a user a malicious ARF or WRF file via a link or an email attachment and persuading the user to ope
CVE ID: CVE-2018-15422 State: PUBLISHED Published: 2018-10-05T14:00:00Z Last Updated: 2024-11-26T14:28:50.729Z Vendors: Cisco Products: Cisco WebEx ARF Player Problem Types: CWE-20 Description: A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software improperly validates Advanced Recording Format (ARF) and Webex Recording Format (WRF) files. An attacker could exploit this vulnerability by sending a user a malicious ARF or WRF file via a link or an email attachment and persuading the user to ope
CVE ID: CVE-2018-15423 State: PUBLISHED Published: 2018-10-05T14:00:00Z Last Updated: 2024-11-26T14:28:42.706Z Vendors: Cisco Products: Cisco HyperFlex HX-Series Problem Types: CWE-693 Description: A vulnerability in the web UI of Cisco HyperFlex Software could allow an unauthenticated, remote attacker to affect the integrity of a device via a clickjacking attack. The vulnerability is due to insufficient input validation of iFrame data in HTTP requests that are sent to an affected device. An attacker could exploit this vulnerability by sending crafted HTTP packets with malicious iFrame data. A successful exploit could allow the attacker to perform a clickjacking attack where the user is tric
cious iFrame data. A successful exploit could allow the attacker to perform a clickjacking attack where the user is tricked into clicking a malicious link. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181003-hyperflex-clickjacking
CVE ID: CVE-2018-15424 State: PUBLISHED Published: 2018-10-05T14:00:00Z Last Updated: 2024-11-26T14:28:31.280Z Vendors: Cisco Products: Cisco Identity Services Engine Software Problem Types: CWE-20 Description: A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device with the privileges of the web server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181003-ise-mult-vulns - http://www.securitytracker.c
.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181003-ise-mult-vulns - http://www.securitytracker.com/id/1041792
CVE ID: CVE-2018-15425 State: PUBLISHED Published: 2018-10-05T14:00:00Z Last Updated: 2024-11-26T14:28:20.404Z Vendors: Cisco Products: Cisco Identity Services Engine Software Problem Types: CWE-20 Description: A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device with the privileges of the web server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181003-ise-mult-vulns - http://www.securitytracker.c
CVE ID: CVE-2018-15426 State: PUBLISHED Published: 2018-10-05T14:00:00Z Last Updated: 2024-11-26T14:28:09.720Z Vendors: Cisco Products: Cisco Unity Connection Problem Types: CWE-79 Description: A vulnerability in the web-based interface of Cisco Unity Connection could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web-based interface of the affected software. The vulnerability is due to insufficient validation of user-supplied input that is processed by the web-based interface of the affected software. An attacker could exploit this vulnerability by persuading a user of the web-based interface to click a malicious link. A s
attacker could exploit this vulnerability by persuading a user of the web-based interface to click a malicious link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or access sensitive, browser-based information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181003-uc-xss - http://www.securitytracker.com/id/1041781
CVE ID: CVE-2018-15427 State: PUBLISHED Published: 2018-10-05T14:00:00Z Last Updated: 2024-11-26T14:27:51.332Z Vendors: Cisco Products: Cisco Video Surveillance Manager Problem Types: CWE-798 Description: A vulnerability in Cisco Video Surveillance Manager (VSM) Software running on certain Cisco Connected Safety and Security Unified Computing System (UCS) platforms could allow an unauthenticated, remote attacker to log in to an affected system by using the root account, which has default, static user credentials. The vulnerability is due to the presence of undocumented, default, static user credentials for the root account of the affected software on certain systems. An attacker could exploi