Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
crafted URLs that include SQL statements. An exploit could allow the attacker to modify or delete entries in some database tables, affecting the integrity of the data. Cisco Bug IDs: CSCve13786. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170802-ucm - https://quickview.cloudapps.cisco.com/quickview/bug/CSCve13786 - http://www.securitytracker.com/id/1039063 - http://www.securityfocus.com/bid/100121
CVE ID: CVE-2017-6758 State: PUBLISHED Published: 2017-08-07T06:00:00 Last Updated: 2024-08-05T15:41:17.552Z Vendors: n/a Products: Cisco Unified Communications Manager Problem Types: CWE-22 Description: A vulnerability in the web framework of Cisco Unified Communications Manager 11.5(1.10000.6) could allow an authenticated, remote attacker to access arbitrary files in the context of the web root directory structure on an affected device. The vulnerability is due to insufficient input validation by the affected software. An attacker could exploit this vulnerability by using directory traversal techniques to read files in the web root directory structure on the Cisco Unified Communications Ma
directory traversal techniques to read files in the web root directory structure on the Cisco Unified Communications Manager filesystem. Cisco Bug IDs: CSCve13796. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100119 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170802-ucm1 - https://quickview.cloudapps.cisco.com/quickview/bug/CSCve13796 - http://www.securitytracker.com/id/1039064
CVE ID: CVE-2017-6759 State: PUBLISHED Published: 2017-08-07T06:00:00 Last Updated: 2024-08-05T15:41:17.535Z Vendors: n/a Products: Cisco Prime Collaboration Provisioning Tool Problem Types: CWE-20 Description: A vulnerability in the UpgradeManager of the Cisco Prime Collaboration Provisioning Tool 12.1 could allow an authenticated, remote attacker to write arbitrary files as root on the system. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by triggering the upgrade package installation functionality. Cisco Bug IDs: CSCvc90304. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/con
CSCvc90304. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170802-pcpt - http://www.securitytracker.com/id/1039062 - https://quickview.cloudapps.cisco.com/quickview/bug/CSCvc90304
CVE ID: CVE-2017-6761 State: PUBLISHED Published: 2017-08-07T06:00:00 Last Updated: 2024-08-05T15:41:17.240Z Vendors: n/a Products: Cisco Finesse Problem Types: CWE-79 Description: A vulnerability in the web-based management interface of Cisco Finesse 10.6(1) and 11.5(1) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful
n attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or allow the attacker to access sensitive browser-based information. Cisco Bug IDs: CSCvd96744. Additional Analyst Notes: - CVE Program Container: References: - https://quickview.cloudapps.cisco.com/quickview/bug/CSCvd96744 - http://www.securityfocus.com/bid/100110 - http://www.securitytracker.com/id/1039059 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170802-cf
CVE ID: CVE-2017-6762 State: PUBLISHED Published: 2017-08-07T06:00:00 Last Updated: 2024-08-05T15:41:17.112Z Vendors: n/a Products: Cisco Jabber Guest Server Problem Types: CWE-79 Description: A vulnerability in the web-based management interface of Cisco Jabber Guest Server 10.6(9), 11.0(0), and 11.0(1) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of the affected software. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of the affected software. An attacker could exploit this vulnerability by persuading a user of the interfac
nt interface of the affected software. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or allow the attacker to access sensitive browser-based information. Cisco Bug IDs: CSCve09718. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039060 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170802-cj - http://www.securityfocus.com/bid/100108 - https://quickview.cloudapps.cisco.com/quickview/bug/CSCve09718
CVE ID: CVE-2017-6763 State: PUBLISHED Published: 2017-08-07T06:00:00 Last Updated: 2024-08-05T15:41:17.131Z Vendors: n/a Products: Cisco Meeting Server Problem Types: CWE-20 Description: A vulnerability in the implementation of the H.264 protocol in Cisco Meeting Server (CMS) 2.1.4 could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected system. The vulnerability exists because the affected application does not properly validate Fragmentation Unit (FU-A) protocol packets. An attacker could exploit this vulnerability by sending a crafted H.264 FU-A packet through the affected application. A successful exploit could allow the attacker to caus
ding a crafted H.264 FU-A packet through the affected application. A successful exploit could allow the attacker to cause a DoS condition on the affected system due to an unexpected restart of the CMS media process on the system. Although the CMS platform continues to operate and only the single, affected CMS media process is restarted, a brief interruption of media traffic for certain users could occur. Cisco Bug IDs: CSCve10131. Additional Analyst Notes: - CVE Program Container: References: - https://quickview.cloudapps.cisco.com/quickview/bug/CSCve10131 - http://www.securityfocus.com/bid/100111 - http://www.securitytracker.com/id/1039058 - https://tools.cisco.com/security/center/content/C
rityfocus.com/bid/100111 - http://www.securitytracker.com/id/1039058 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170802-ms
CVE ID: CVE-2017-6764 State: PUBLISHED Published: 2017-08-07T06:00:00 Last Updated: 2024-08-05T15:41:17.366Z Vendors: n/a Products: Cisco Adaptive Security Appliance Problem Types: CWE-79 Description: A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance (ASA) 9.5(1) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading a user of the interface to clic
erface of an affected device. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or allow the attacker to access sensitive browser-based information. Cisco Bug IDs: CSCvd82064. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100107 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170802-asa - https://quickview.cloudapps.cisco.com/quickview/bug/CSCvd82064 - http://www.securitytracker.com/id/1039055
CVE ID: CVE-2017-6765 State: PUBLISHED Published: 2017-08-07T06:00:00 Last Updated: 2024-08-05T15:41:17.595Z Vendors: n/a Products: Cisco Adaptive Security Appliance Problem Types: Cross-Site Scripting Vulnerability Description: A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance (ASA) 9.1(6.11) and 9.4(1.2) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device, aka WebVPN XSS. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected device. An attacker could exploit th
idation of user-supplied input by the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or allow the attacker to access sensitive browser-based information. Cisco Bug IDs: CSCve19179. Additional Analyst Notes: - CVE Program Container: References: - https://quickview.cloudapps.cisco.com/quickview/bug/CSCve19179 - http://www.securitytracker.com/id/1039056 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170802-asa1 - http://www.securityfocus
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170802-asa1 - http://www.securityfocus.com/bid/100150
CVE ID: CVE-2017-6766 State: PUBLISHED Published: 2017-08-07T06:00:00 Last Updated: 2024-08-05T15:41:17.426Z Vendors: n/a Products: Cisco Firepower System Software Problem Types: CWE-310 Description: A vulnerability in the Secure Sockets Layer (SSL) Decryption and Inspection feature of Cisco Firepower System Software 5.4.0, 5.4.1, 6.0.0, 6.1.0, 6.2.0, 6.2.1, and 6.2.2 could allow an unauthenticated, remote attacker to bypass the SSL policy for decrypting and inspecting traffic on an affected system. The vulnerability is due to unexpected interaction with Known Key and Decrypt and Resign configuration settings of SSL policies when the affected software receives unexpected SSL packet headers.
pt and Resign configuration settings of SSL policies when the affected software receives unexpected SSL packet headers. An attacker could exploit this vulnerability by sending a crafted SSL packet through an affected device in a valid SSL session. A successful exploit could allow the attacker to bypass the SSL decryption and inspection policy for the affected system, which could allow traffic to flow through the system without being inspected. Cisco Bug IDs: CSCve12652. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170802-fpw - https://quickview.cloudapps.cisco.com/quickview/bug/CSCve12652
CVE ID: CVE-2017-6767 State: PUBLISHED Published: 2017-08-17T20:00:00Z Last Updated: 2024-09-16T19:31:33.580Z Vendors: Cisco Systems, Inc. Products: Application Policy Infrastructure Controller (APIC) Problem Types: Privilege Escalation Description: A vulnerability in Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to gain higher privileges than the account is assigned. The attacker will be granted the privileges of the last user to log in, regardless of whether those privileges are higher or lower than what should have been granted. The attacker cannot gain root-level privileges. The vulnerability is due to a limitation with how Role-B
e been granted. The attacker cannot gain root-level privileges. The vulnerability is due to a limitation with how Role-Based Access Control (RBAC) grants privileges to remotely authenticated users when login occurs via SSH directly to the local management interface of the APIC. An attacker could exploit this vulnerability by authenticating to the targeted device. The attacker's privilege level will be modified to match that of the last user to log in via SSH. An exploit could allow the attacker to gain elevated privileges and perform CLI commands that should be restricted by the attacker's configured role. Cisco Bug IDs: CSCvc34335. Known Affected Releases: 1.0(1e), 1.0(1h), 1.0(1k), 1.0(1n)
y the attacker's configured role. Cisco Bug IDs: CSCvc34335. Known Affected Releases: 1.0(1e), 1.0(1h), 1.0(1k), 1.0(1n), 1.0(2j), 1.0(2m), 1.0(3f), 1.0(3i), 1.0(3k), 1.0(3n), 1.0(4h), 1.0(4o); 1.1(0.920a), 1.1(1j), 1.1(3f); 1.2 Base, 1.2(2), 1.2(3), 1.2.2; 1.3(1), 1.3(2), 1.3(2f); 2.0 Base, 2.0(1). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100400 - http://www.securitytracker.com/id/1039180 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-apic1
CVE ID: CVE-2017-6768 State: PUBLISHED Published: 2017-08-17T20:00:00Z Last Updated: 2024-09-17T01:41:54.517Z Vendors: Cisco Systems, Inc. Products: Application Policy Infrastructure Controller (APIC) Problem Types: Privilege Escalation Description: A vulnerability in the build procedure for certain executable system files installed at boot time on Cisco Application Policy Infrastructure Controller (APIC) devices could allow an authenticated, local attacker to gain root-level privileges. The vulnerability is due to a custom executable system file that was built to use relative search paths for libraries without properly validating the library to be loaded. An attacker could exploit this vuln
ive search paths for libraries without properly validating the library to be loaded. An attacker could exploit this vulnerability by authenticating to the device and loading a malicious library that can escalate the privilege level. A successful exploit could allow the attacker to gain root-level privileges and take full control of the device. The attacker must have valid user credentials to log in to the device. Cisco Bug IDs: CSCvc96087. Known Affected Releases: 1.1(0.920a), 1.1(1j), 1.1(3f); 1.2 Base, 1.2(2), 1.2(3), 1.2.2; 1.3(1), 1.3(2), 1.3(2f); 2.0 Base, 2.0(1). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100363 - http://www.securi
tional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100363 - http://www.securitytracker.com/id/1039179 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-apic2
CVE ID: CVE-2017-6769 State: PUBLISHED Published: 2017-08-07T06:00:00 Last Updated: 2024-08-05T15:41:17.539Z Vendors: n/a Products: Cisco Access Control System Problem Types: Stored Cross-Site Scripting Vulnerability Description: A vulnerability in the web-based management interface of the Cisco Secure Access Control System (ACS) could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web interface of the affected system. More Information: CSCve70587. Known Affected Releases: 5.8(0.8) 5.8(1.5). Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038996 - https://tools.cisco.com/s
lyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038996 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170726-acs - http://www.securityfocus.com/bid/99985
CVE ID: CVE-2017-6770 State: PUBLISHED Published: 2017-08-07T06:00:00 Last Updated: 2024-08-05T15:41:17.249Z Vendors: n/a Products: Multiple Cisco Products Problem Types: CWE-20 Description: Cisco IOS 12.0 through 15.6, Adaptive Security Appliance (ASA) Software 7.0.1 through 9.7.1.2, NX-OS 4.0 through 12.0, and IOS XE 3.6 through 3.18 are affected by a vulnerability involving the Open Shortest Path First (OSPF) Routing Protocol Link State Advertisement (LSA) database. This vulnerability could allow an unauthenticated, remote attacker to take full control of the OSPF Autonomous System (AS) domain routing table, allowing the attacker to intercept or black-hole traffic. The attacker could expl
mous System (AS) domain routing table, allowing the attacker to intercept or black-hole traffic. The attacker could exploit this vulnerability by injecting crafted OSPF packets. Successful exploitation could cause the targeted router to flush its routing table and propagate the crafted OSPF LSA type 1 update throughout the OSPF AS domain. To exploit this vulnerability, an attacker must accurately determine certain parameters within the LSA database on the target router. This vulnerability can only be triggered by sending crafted unicast or multicast OSPF LSA type 1 packets. No other LSA type packets can trigger this vulnerability. OSPFv3 is not affected by this vulnerability. Fabric Shortest
No other LSA type packets can trigger this vulnerability. OSPFv3 is not affected by this vulnerability. Fabric Shortest Path First (FSPF) protocol is not affected by this vulnerability. Cisco Bug IDs: CSCva74756, CSCve47393, CSCve47401. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039005 - http://www.securitytracker.com/id/1039006 - http://www.securityfocus.com/bid/100005 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170727-ospf - http://www.securitytracker.com/id/1039007
CVE ID: CVE-2017-6771 State: PUBLISHED Published: 2017-08-17T20:00:00Z Last Updated: 2024-09-17T01:21:39.369Z Vendors: Cisco Systems, Inc. Products: Ultra Services Framework Problem Types: Information Disclosure Description: A vulnerability in the AutoVNF automation tool of the Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to acquire sensitive information. The vulnerability is due to insufficient protection of sensitive data. An attacker could exploit this vulnerability by browsing to a specific URL of an affected device. An exploit could allow the attacker to view sensitive configuration information about the deployment. Cisco Bug IDs: CSCvd29358. Known Affe
low the attacker to view sensitive configuration information about the deployment. Cisco Bug IDs: CSCvd29358. Known Affected Releases: 21.0.v0.65839. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100385 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-usf
CVE ID: CVE-2017-6772 State: PUBLISHED Published: 2017-08-17T20:00:00Z Last Updated: 2024-09-16T21:57:05.977Z Vendors: Cisco Systems, Inc. Products: Elastic Services Controller Problem Types: Information Disclosure Description: A vulnerability in Cisco Elastic Services Controller (ESC) could allow an authenticated, remote attacker to view sensitive information. The vulnerability is due to insufficient protection of sensitive data. An attacker could exploit this vulnerability by authenticating to the application and navigating to certain configuration files. An exploit could allow the attacker to view sensitive system configuration files. Cisco Bug IDs: CSCvd29408. Known Affected Releases: 2.
allow the attacker to view sensitive system configuration files. Cisco Bug IDs: CSCvd29408. Known Affected Releases: 2.3(2). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100388 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-esc1
CVE ID: CVE-2017-6773 State: PUBLISHED Published: 2017-08-17T20:00:00Z Last Updated: 2024-09-17T02:21:21.737Z Vendors: Cisco Systems, Inc. Products: StarOS for ASR 5000 Series Aggregated Services Routers Problem Types: Security Bypass Description: A vulnerability in the CLI of Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an authenticated, local attacker to bypass the CLI restrictions and execute commands on the underlying operating system. The vulnerability is due to insufficient input sanitization of user-supplied input at the CLI. An attacker could exploit this vulnerability by crafting a script on the device that will allow them t
input at the CLI. An attacker could exploit this vulnerability by crafting a script on the device that will allow them to bypass built-in restrictions. An exploit could allow the unauthorized user to launch the CLI directly from a command shell. Cisco Bug IDs: CSCvd47722. Known Affected Releases: 21.0.v0.65839. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100376 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-staros1 - http://www.securitytracker.com/id/1039181
CVE ID: CVE-2017-6774 State: PUBLISHED Published: 2017-08-17T20:00:00Z Last Updated: 2024-09-17T03:49:16.049Z Vendors: Cisco Systems, Inc. Products: StarOS for ASR 5000 Series Aggregated Services Routers Problem Types: File Modification Description: A vulnerability in Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an authenticated, remote attacker to overwrite or modify sensitive system files. The vulnerability is due to the inclusion of sensitive system files within specific FTP subdirectories. An attacker could exploit this vulnerability by overwriting sensitive configuration files through FTP. An exploit could allow the attacker to
oit this vulnerability by overwriting sensitive configuration files through FTP. An exploit could allow the attacker to overwrite configuration files on an affected system. Cisco Bug IDs: CSCvd47739. Known Affected Releases: 21.0.v0.65839. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-staros2 - http://www.securityfocus.com/bid/100386 - http://www.securitytracker.com/id/1039182
CVE ID: CVE-2017-6775 State: PUBLISHED Published: 2017-08-17T20:00:00Z Last Updated: 2024-09-16T20:32:22.230Z Vendors: Cisco Systems, Inc. Products: StarOS for ASR 5000 Series Aggregated Services Routers Problem Types: Privilege Escalation Description: A vulnerability in the CLI of Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an authenticated, local attacker to elevate their privileges to admin-level privileges. The vulnerability is due to incorrect permissions that are given to a set of users. An attacker could exploit this vulnerability by logging in to the shell of an affected device and elevating their privileges by modifying env
loit this vulnerability by logging in to the shell of an affected device and elevating their privileges by modifying environment variables. An exploit could allow the attacker to gain admin-level privileges and take control of the affected device. Cisco Bug IDs: CSCvd47741. Known Affected Releases: 21.0.v0.65839. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100381 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-staros3 - http://www.securitytracker.com/id/1039183
CVE ID: CVE-2017-6776 State: PUBLISHED Published: 2017-08-17T20:00:00Z Last Updated: 2024-09-16T19:04:16.348Z Vendors: Cisco Systems, Inc. Products: Elastic Services Controller Problem Types: Cross-Site Scripting Description: A vulnerability in the web framework of Cisco Elastic Services Controller (ESC) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface. The vulnerability is due to insufficient validation of user-supplied input by the affected software. An attacker could exploit this vulnerability by convincing a user to access a malicious link or by intercepting a user request and injecting malicious code into