Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-3310 State: PUBLISHED Published: 2014-07-10T10:00:00 Last Updated: 2024-08-06T10:43:05.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: The File Transfer feature in WebEx Meetings Client in Cisco WebEx Meetings Server and WebEx Meeting Center does not verify that a requested file was an offered file, which allows remote attackers to read arbitrary files via a modified request, aka Bug IDs CSCup62442 and CSCup58463. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3310 - http://www.securitytracker.com/id/1030551 - http://www.securityfocus.com/bid/68503 - https://exchange
ce/CVE-2014-3310 - http://www.securitytracker.com/id/1030551 - http://www.securityfocus.com/bid/68503 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94431
CVE ID: CVE-2014-3311 State: PUBLISHED Published: 2014-07-10T10:00:00 Last Updated: 2024-08-06T10:43:04.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the file-sharing feature in WebEx Meetings Client in Cisco WebEx Meetings Server and WebEx Meeting Center allows remote attackers to execute arbitrary code via crafted data, aka Bug IDs CSCup62463 and CSCup58467. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3311 - http://www.securityfocus.com/bid/68502 - http://www.securitytracker.com/id/1030550 - https://exchange.xforce.ibmcloud.com/vulnerabilities/944
cus.com/bid/68502 - http://www.securitytracker.com/id/1030550 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94432
CVE ID: CVE-2014-3312 State: PUBLISHED Published: 2014-07-09T10:00:00 Last Updated: 2024-08-06T10:43:05.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: The debug console interface on Cisco Small Business SPA300 and SPA500 phones does not properly perform authentication, which allows local users to execute arbitrary debug-shell commands, or read or modify data in memory or a filesystem, via direct access to this interface, aka Bug ID CSCun77435. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1030552 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3312 - https://exchange.xforce.ibmcloud.com/vulner
/tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3312 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94421 - http://www.securityfocus.com/bid/68465
CVE ID: CVE-2014-3313 State: PUBLISHED Published: 2014-07-09T10:00:00 Last Updated: 2024-08-06T10:43:05.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the web user interface on Cisco Small Business SPA300 and SPA500 phones allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuo52582. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=34885 - http://www.securitytracker.com/id/1030553 - http://www.securityfocus.com/bid/68464 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94422 - http://tools.cisco.com/security/c
rityfocus.com/bid/68464 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94422 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3313 - http://secunia.com/advisories/59808
CVE ID: CVE-2014-3314 State: PUBLISHED Published: 2015-01-14T19:00:00 Last Updated: 2024-08-06T10:43:05.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco AnyConnect on Android and OS X does not properly verify the host type, which allows remote attackers to spoof authentication forms and possibly capture credentials via unspecified vectors, aka Bug IDs CSCuo24931 and CSCuo24940. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3314
CVE ID: CVE-2014-3315 State: PUBLISHED Published: 2014-07-10T10:00:00 Last Updated: 2024-08-06T10:43:05.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in viewfilecontents.do in the Dialed Number Analyzer (DNA) component in Cisco Unified Communications Manager allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCup76308. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3315 - http://tools.cisco.com/security/center/viewAlert.x?alertId=34900 - http://www.securityfocus.com/bid/68477 - http://sec
- http://tools.cisco.com/security/center/viewAlert.x?alertId=34900 - http://www.securityfocus.com/bid/68477 - http://secunia.com/advisories/59739 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94430
CVE ID: CVE-2014-3316 State: PUBLISHED Published: 2014-07-10T10:00:00 Last Updated: 2024-08-06T10:43:05.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Multiple Analyzer in the Dialed Number Analyzer (DNA) component in Cisco Unified Communications Manager allows remote authenticated users to bypass intended upload restrictions via a crafted parameter, aka Bug ID CSCup76297. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1030554 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3316 - http://www.securityfocus.com/bid/68479 - http://secunia.com/advisories/59730 - https://exchange.xforce.ibmcloud
4-3316 - http://www.securityfocus.com/bid/68479 - http://secunia.com/advisories/59730 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94429 - http://tools.cisco.com/security/center/viewAlert.x?alertId=34899
CVE ID: CVE-2014-3317 State: PUBLISHED Published: 2014-07-14T21:00:00 Last Updated: 2024-08-06T10:43:05.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Multiple Analyzer in the Dialed Number Analyzer (DNA) component in Cisco Unified Communications Manager 10.0(1) allows remote authenticated users to delete arbitrary files via a crafted URL, aka Bug ID CSCup76314. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/68481 - http://www.securitytracker.com/id/1030554 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3317 - http://secunia.com/advisories/59727 - http:/
tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3317 - http://secunia.com/advisories/59727 - http://tools.cisco.com/security/center/viewAlert.x?alertId=34898 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94435
CVE ID: CVE-2014-3318 State: PUBLISHED Published: 2014-07-10T10:00:00 Last Updated: 2024-08-06T10:43:05.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in dna/viewfilecontents.do in the Dialed Number Analyzer (DNA) component in Cisco Unified Communications Manager allows remote authenticated users to read arbitrary files via a crafted URL, aka Bug ID CSCup76318. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/68482 - http://www.securitytracker.com/id/1030554 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3318 - http://tools.cisco.com/security/center/viewAlert.x?a
sco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3318 - http://tools.cisco.com/security/center/viewAlert.x?alertId=34897 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94433 - http://secunia.com/advisories/59728
CVE ID: CVE-2014-3319 State: PUBLISHED Published: 2014-07-14T21:00:00 Last Updated: 2024-08-06T10:43:04.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Real-Time Monitoring Tool (RTMT) in Cisco Unified Communications Manager (CM) 10.0(1) allows remote authenticated users to read arbitrary files via a crafted URL, aka Bug ID CSCup57676. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=34909 - http://www.securitytracker.com/id/1030554 - http://secunia.com/advisories/59734 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3319 - https://
cunia.com/advisories/59734 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3319 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94436
CVE ID: CVE-2014-3320 State: PUBLISHED Published: 2014-07-18T01:00:00 Last Updated: 2024-08-06T10:43:05.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple open redirect vulnerabilities in the admin web interface in the web framework in Cisco Unified Communications Domain Manager (CDM) 8.1(.4) and earlier allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via crafted URLs for unspecified scripts, aka Bug ID CSCuo48835. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1030613 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3320 - http://tools.cisco.com
m/id/1030613 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3320 - http://tools.cisco.com/security/center/viewAlert.x?alertId=34960 - http://www.securityfocus.com/bid/68694
CVE ID: CVE-2014-3321 State: PUBLISHED Published: 2014-07-18T01:00:00 Last Updated: 2024-08-06T10:43:05.197Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS XR 4.3.4 and earlier on ASR 9000 devices, when bridge-group virtual interface (BVI) routing is enabled, allows remote attackers to cause a denial of service (chip and card hangs) via a series of crafted MPLS packets, aka Bug ID CSCuo91149. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=34936 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3321 - http://www.securitytracker.com/id/1030597
CVE ID: CVE-2014-3322 State: PUBLISHED Published: 2014-07-24T14:00:00 Last Updated: 2024-08-06T10:43:05.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS XR 4.3(.2) and earlier on ASR 9000 devices does not properly perform NetFlow sampling of IP packets, which allows remote attackers to cause a denial of service (chip and card hangs) via malformed (1) IPv4 or (2) IPv6 packets, aka Bug ID CSCuo68417. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/60311 - http://www.securitytracker.com/id/1030623 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3322 - http://www.securityfocus.com/bid/68833 - ht
/tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3322 - http://www.securityfocus.com/bid/68833 - http://tools.cisco.com/security/center/viewAlert.x?alertId=35009
CVE ID: CVE-2014-3323 State: PUBLISHED Published: 2014-07-18T01:00:00 Last Updated: 2024-08-06T10:43:05.007Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Cisco Unified Contact Center Enterprise allows remote authenticated users to read arbitrary web-root files via a crafted URL, aka Bug ID CSCun25262. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1030612 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3323 - http://www.securityfocus.com/bid/68686
CVE ID: CVE-2014-3324 State: PUBLISHED Published: 2014-07-26T10:00:00 Last Updated: 2024-08-06T10:43:05.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the login page in the administrative web interface in Cisco TelePresence Server Software 4.0(2.8) allow remote attackers to inject arbitrary web script or HTML via a crafted parameter, aka Bug ID CSCup90060. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3324 - http://secunia.com/advisories/60456 - http://www.securityfocus.com/bid/68885 - http://www.securitytracker.com/id/1030640
ttp://secunia.com/advisories/60456 - http://www.securityfocus.com/bid/68885 - http://www.securitytracker.com/id/1030640 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94847 - http://tools.cisco.com/security/center/viewAlert.x?alertId=35031
CVE ID: CVE-2014-3325 State: PUBLISHED Published: 2014-07-19T19:00:00 Last Updated: 2024-08-06T10:43:05.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unified Customer Voice Portal (CVP) allow remote attackers to inject arbitrary web script or HTML via a crafted parameter, aka Bug IDs CSCuh61711, CSCuh61720, CSCuh61723, CSCuh61726, CSCuh61727, CSCuh61731, and CSCuh61733. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/68691 - http://secunia.com/advisories/60546 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3325
CVE ID: CVE-2014-3326 State: PUBLISHED Published: 2014-07-26T10:00:00 Last Updated: 2024-08-06T10:43:05.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the web framework in Cisco Security Manager 4.5 and 4.6 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCup26957. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=35029 - http://secunia.com/advisories/60455 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94841 - http://www.securityfocus.com/bid/68877 - http://www.securitytracker.com/id/1030639 - http://tools.
lnerabilities/94841 - http://www.securityfocus.com/bid/68877 - http://www.securitytracker.com/id/1030639 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3326
CVE ID: CVE-2014-3327 State: PUBLISHED Published: 2014-08-11T22:00:00 Last Updated: 2024-08-06T10:43:05.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: The EnergyWise module in Cisco IOS 12.2, 15.0, 15.1, 15.2, and 15.4 and IOS XE 3.2.xXO, 3.3.xSG, 3.4.xSG, and 3.5.xE before 3.5.3E allows remote attackers to cause a denial of service (device reload) via a crafted IPv4 packet, aka Bug ID CSCup52101. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/60650 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140806-energywise - http://www.securitytracker.com/id/1030682 - https://exchange.xforce.ibmcloud.co
yAdvisory/cisco-sa-20140806-energywise - http://www.securitytracker.com/id/1030682 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95137 - http://www.securityfocus.com/bid/69066
CVE ID: CVE-2014-3328 State: PUBLISHED Published: 2014-07-26T10:00:00 Last Updated: 2024-08-06T10:43:04.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Intercluster Sync Agent Service in Cisco Unified Presence Server allows remote attackers to cause a denial of service via a TCP SYN flood, aka Bug ID CSCun34125. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/68901 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3328 - http://www.securitytracker.com/id/1030643 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94879
CVE ID: CVE-2014-3329 State: PUBLISHED Published: 2014-07-29T20:00:00 Last Updated: 2024-08-06T10:43:05.012Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the web-server component in Cisco Prime Data Center Network Manager (DCNM) 6.3(2) and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCum86620. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3329 - http://www.securitytracker.com/id/1030652 - http://tools.cisco.com/security/center/viewAlert.x?alertId=35065 - https://exchange.xforce.ibmclo
acker.com/id/1030652 - http://tools.cisco.com/security/center/viewAlert.x?alertId=35065 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94889 - http://www.securityfocus.com/bid/68926
CVE ID: CVE-2014-3330 State: PUBLISHED Published: 2014-08-11T22:00:00 Last Updated: 2024-08-06T10:43:05.185Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco NX-OS 6.1(2)I2(1) on Nexus 9000 switches does not properly process packet-drop policy checks for logged packets, which allows remote attackers to bypass intended access restrictions via a flood of packets matching a policy that contains the log keyword, aka Bug ID CSCuo02489. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1030676 - http://tools.cisco.com/security/center/viewAlert.x?alertId=35181 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-20
om/security/center/viewAlert.x?alertId=35181 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3330 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95122 - http://www.securityfocus.com/bid/69057
CVE ID: CVE-2014-3331 State: PUBLISHED Published: 2014-08-20T10:00:00 Last Updated: 2024-08-06T10:43:05.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Session Manager component in Packet Data Network Gateway (aka PGW) in Cisco ASR 5000 Series Software 11.0, 12.0, 12.1, 12.2, 14.0, 15.0, 16.x through 16.1.2, and 17.0 allows remote attackers to cause a denial of service (process crash) via a crafted TCP packet, aka Bug ID CSCuo21914. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/60706 - http://www.securitytracker.com/id/1030747 - http://tools.cisco.com/security/center/viewAlert.x?alertId=35346 - http://www.securityfocus.com/
racker.com/id/1030747 - http://tools.cisco.com/security/center/viewAlert.x?alertId=35346 - http://www.securityfocus.com/bid/69281 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3331 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95357
CVE ID: CVE-2014-3332 State: PUBLISHED Published: 2014-08-11T20:00:00 Last Updated: 2024-08-06T10:43:05.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Unified Communications Manager (CM) 8.6(.2) and earlier has an incorrect CLI restrictions setting, which allows remote authenticated users to establish undetected concurrent logins via unspecified vectors, aka Bug ID CSCup98029. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/95136 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3332 - http://www.securityfocus.com/bid/69068 - http://www.securitytracker.com/id/1030687 - htt
oSecurityNotice/CVE-2014-3332 - http://www.securityfocus.com/bid/69068 - http://www.securitytracker.com/id/1030687 - http://tools.cisco.com/security/center/viewAlert.x?alertId=35198
CVE ID: CVE-2014-3333 State: PUBLISHED Published: 2014-08-11T20:00:00 Last Updated: 2024-08-06T10:43:05.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: The server in Cisco Unity Connection 9.1(1) and 9.1(2) allows remote authenticated users to obtain privileged access by conducting an "HTTP Intercept" attack and leveraging the ability to read files within the context of the web-server user account, aka Bug ID CSCup41014. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/95135 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3333 - http://secunia.com/advisories/59768 - http://tools
cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3333 - http://secunia.com/advisories/59768 - http://tools.cisco.com/security/center/viewAlert.x?alertId=35200 - http://www.securityfocus.com/bid/69074 - http://www.securitytracker.com/id/1030688
CVE ID: CVE-2014-3334 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-3335 State: PUBLISHED Published: 2014-08-26T10:00:00 Last Updated: 2024-08-06T10:43:05.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS XR 4.3(.2) and earlier on ASR 9000 devices does not properly perform NetFlow sampling of packets with multicast destination MAC addresses, which allows remote attackers to cause a denial of service (chip and card hangs) via a crafted packet, aka Bug ID CSCup77750. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/95443 - http://www.securityfocus.com/bid/69383 - http://secunia.com/advisories/60222 - http://tools.cisco.com/security/center/content/Cisco
securityfocus.com/bid/69383 - http://secunia.com/advisories/60222 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3335 - http://tools.cisco.com/security/center/viewAlert.x?alertId=35416 - http://www.securitytracker.com/id/1030757
CVE ID: CVE-2014-3336 State: PUBLISHED Published: 2014-08-11T20:00:00 Last Updated: 2024-08-06T10:43:05.010Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the web framework in Cisco Unity Connection 9.1(2) and earlier allows remote authenticated users to execute arbitrary SQL commands via a crafted request, aka Bug ID CSCuq31016. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/95187 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3336 - http://tools.cisco.com/security/center/viewAlert.x?alertId=35228 - http://www.securityfocus.com/bid/69163 - http://
36 - http://tools.cisco.com/security/center/viewAlert.x?alertId=35228 - http://www.securityfocus.com/bid/69163 - http://secunia.com/advisories/59498 - http://www.securitytracker.com/id/1030704
CVE ID: CVE-2014-3337 State: PUBLISHED Published: 2014-08-12T22:00:00 Last Updated: 2024-08-06T10:43:05.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SIP implementation in Cisco Unified Communications Manager (CM) 8.6(.2) and earlier allows remote authenticated users to cause a denial of service (process crash) via a crafted SIP message that is not properly handled during processing of an XML document, aka Bug ID CSCtq76428. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/69177 - http://www.securitytracker.com/id/1030709 - http://tools.cisco.com/security/center/viewAlert.x?alertId=35257 - http://secunia.com/advisories/60
ker.com/id/1030709 - http://tools.cisco.com/security/center/viewAlert.x?alertId=35257 - http://secunia.com/advisories/60088 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95245 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3337
CVE ID: CVE-2014-3338 State: PUBLISHED Published: 2014-08-12T23:00:00 Last Updated: 2024-08-06T10:43:05.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CTIManager module in Cisco Unified Communications Manager (CM) 10.0(1), when single sign-on is enabled, does not properly validate Kerberos SSO tokens, which allows remote authenticated users to gain privileges and execute arbitrary commands via crafted token data, aka Bug ID CSCum95491. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/60054 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3338 - https://exchange.xforce.ibmcloud.com/vulnerabilities/
co.com/security/center/content/CiscoSecurityNotice/CVE-2014-3338 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95246 - http://www.securitytracker.com/id/1030710 - http://tools.cisco.com/security/center/viewAlert.x?alertId=35258 - http://www.securityfocus.com/bid/69176