Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-1388 State: PUBLISHED Published: 2016-06-03T01:00:00 Last Updated: 2024-08-05T22:55:14.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Prime Network Analysis Module (NAM) before 6.1(1) patch.6.1-2-final and 6.2.x before 6.2(1) and Prime Virtual Network Analysis Module (vNAM) before 6.1(1) patch.6.1-2-final and 6.2.x before 6.2(1) allow remote attackers to execute arbitrary OS commands via a crafted HTTP request, aka Bug ID CSCuy21882. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036013 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160601-prime
CVE ID: CVE-2016-1389 State: PUBLISHED Published: 2016-04-28T22:00:00 Last Updated: 2024-08-05T22:55:14.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in Cisco WebEx Meetings Server (CWMS) 2.6 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCuy44695. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160428-cwms - http://www.securitytracker.com/id/1035703
CVE ID: CVE-2016-1390 State: PUBLISHED Published: 2016-06-04T01:00:00 Last Updated: 2024-08-05T22:55:14.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Prime Network Analysis Module (NAM) before 6.1(1) patch.6.1-2-final and 6.2.x before 6.2(1) and Prime Virtual Network Analysis Module (vNAM) before 6.1(1) patch.6.1-2-final and 6.2.x before 6.2(1) allow local users to obtain root access via crafted CLI input, aka Bug ID CSCuy21892. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160601-prime1 - http://www.securitytracker.com/id/1036015
CVE ID: CVE-2016-1391 State: PUBLISHED Published: 2016-06-04T01:00:00 Last Updated: 2024-08-05T22:55:14.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Prime Network Analysis Module (NAM) before 6.1(1) patch.6.1-2-final and 6.2.x before 6.2(2) and Prime Virtual Network Analysis Module (vNAM) before 6.1(1) patch.6.1-2-final and 6.2.x before 6.2(2) allow remote authenticated users to execute arbitrary OS commands via a crafted HTTP request, aka Bug ID CSCuy21889. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160601-prime2 - http://www.securitytracker.com/id/1036014
CVE ID: CVE-2016-1392 State: PUBLISHED Published: 2016-05-05T21:00:00 Last Updated: 2024-08-05T22:55:14.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in Cisco Prime Collaboration Assurance Software 10.5 through 11.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCuu34121. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035736 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160503-pca
CVE ID: CVE-2016-1393 State: PUBLISHED Published: 2016-05-12T01:00:00 Last Updated: 2024-08-05T22:55:14.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Cisco Cloud Network Automation Provisioner (CNAP) 1.0 and 1.1 allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCuy72175. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160510-cnap - http://www.securityfocus.com/bid/90519
CVE ID: CVE-2016-1394 State: PUBLISHED Published: 2016-07-03T01:00:00 Last Updated: 2024-08-05T22:55:14.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Firepower System Software 6.0.0 through 6.1.0 has a hardcoded account, which allows remote attackers to obtain CLI access by leveraging knowledge of the password, aka Bug ID CSCuz56238. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91503 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160629-fp
CVE ID: CVE-2016-1395 State: PUBLISHED Published: 2016-06-19T01:00:00 Last Updated: 2024-08-05T22:55:14.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web-based management interface on Cisco RV110W devices with firmware before 1.2.1.7, RV130W devices with firmware before 1.0.3.16, and RV215W devices with firmware before 1.3.0.8 allows remote attackers to execute arbitrary code as root via a crafted HTTP request, aka Bug ID CSCux82428. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036113 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160615-rv
CVE ID: CVE-2016-1396 State: PUBLISHED Published: 2016-06-19T01:00:00 Last Updated: 2024-08-05T22:55:14.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the web-based management interface on Cisco RV110W devices with firmware before 1.2.1.7, RV130W devices with firmware before 1.0.3.16, and RV215W devices with firmware before 1.3.0.8 allows remote attackers to inject arbitrary web script or HTML via a crafted parameter, aka Bug ID CSCux82583. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160615-rv1 - http://www.securitytracker.com/id/10
ols.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160615-rv1 - http://www.securitytracker.com/id/1036114
CVE ID: CVE-2016-1397 State: PUBLISHED Published: 2016-06-19T01:00:00 Last Updated: 2024-08-05T22:55:14.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the web-based management interface on Cisco RV110W devices with firmware before 1.2.1.7, RV130W devices with firmware before 1.0.3.16, and RV215W devices with firmware before 1.3.0.8 allows remote authenticated users to cause a denial of service (device reload) via crafted configuration commands in an HTTP request, aka Bug ID CSCux82523. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160615-rv2 - http://www.secu
ferences: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160615-rv2 - http://www.securitytracker.com/id/1036115
CVE ID: CVE-2016-1398 State: PUBLISHED Published: 2016-07-03T21:00:00 Last Updated: 2024-08-05T22:55:14.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the web-based management interface on Cisco RV110W devices with firmware through 1.2.1.4, RV130W devices with firmware through 1.0.2.7, and RV215W devices with firmware through 1.3.0.7 allows remote authenticated users to cause a denial of service (device reload) via a crafted HTTP request, aka Bug ID CSCux86669. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036115 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160615-r
curitytracker.com/id/1036115 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160615-rv3
CVE ID: CVE-2016-1399 State: PUBLISHED Published: 2016-05-14T01:00:00 Last Updated: 2024-08-05T22:55:14.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: The packet-processing microcode in Cisco IOS 15.2(2)EA, 15.2(2)EA1, 15.2(2)EA2, and 15.2(4)EA on Industrial Ethernet 4000 devices and 15.2(2)EB and 15.2(2)EB1 on Industrial Ethernet 5000 devices allows remote attackers to cause a denial of service (packet data corruption) via crafted IPv4 ICMP packets, aka Bug ID CSCuy13431. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/90665 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160513-ies - https:
ocus.com/bid/90665 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160513-ies - https://ics-cert.us-cert.gov/advisories/ICSA-16-175-01 - http://www.securitytracker.com/id/1035898
CVE ID: CVE-2016-1400 State: PUBLISHED Published: 2016-05-25T01:00:00 Last Updated: 2024-08-05T22:55:14.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco TelePresence Video Communications Server (VCS) X8.x before X8.7.2 allows remote attackers to cause a denial of service (service disruption) via a crafted URI in a SIP header, aka Bug ID CSCuy43258. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035899 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160516-vcs
CVE ID: CVE-2016-1401 State: PUBLISHED Published: 2016-05-21T01:00:00 Last Updated: 2024-08-05T22:55:14.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the management interface in Cisco Unified Computing System (UCS) Central Software 1.4(1a) allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCuy91250. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035933 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160517-ucs
CVE ID: CVE-2016-1402 State: PUBLISHED Published: 2016-05-21T01:00:00 Last Updated: 2024-08-05T22:55:14.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Active Directory (AD) integration component in Cisco Identity Service Engine (ISE) before 1.2.0.899 patch 7, when AD group-membership authorization is enabled, allows remote attackers to cause a denial of service (authentication outage) via a crafted Password Authentication Protocol (PAP) authentication request, aka Bug ID CSCun25815. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035946 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-2016
/www.securitytracker.com/id/1035946 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160517-ise
CVE ID: CVE-2016-1403 State: PUBLISHED Published: 2016-06-04T14:00:00 Last Updated: 2024-08-05T22:55:14.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: CISCO IP 8800 phones with software 11.0.1 and earlier allow local users to gain privileges for OS command execution via crafted CLI commands, aka Bug ID CSCuz03005. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160603-ipp
CVE ID: CVE-2016-1404 State: PUBLISHED Published: 2016-05-29T22:00:00 Last Updated: 2024-08-05T22:55:14.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco UCS Invicta 4.3, 4.5, and 5.0.1 on Invicta appliances and Invicta Scaling System uses the same hardcoded GnuPG encryption key across different customers' installations, which allows remote attackers to defeat cryptographic protection mechanisms by sniffing network traffic to an Autosupport server and leveraging knowledge of this key from another installation, aka Bug ID CSCur85504. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035957 - http://tools.cisco.com/security/
tes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035957 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160524-ucs-inv
CVE ID: CVE-2016-1405 State: PUBLISHED Published: 2016-06-08T14:00:00 Last Updated: 2024-08-05T22:55:14.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: libclamav in ClamAV (aka Clam AntiVirus), as used in Advanced Malware Protection (AMP) on Cisco Email Security Appliance (ESA) devices before 9.7.0-125 and Web Security Appliance (WSA) devices before 9.0.1-135 and 9.1.x before 9.1.1-041, allows remote attackers to cause a denial of service (AMP process restart) via a crafted document, aka Bug IDs CSCuv78533 and CSCuw60503. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/90968 - https://github.com/vrtadmin/clamav-devel/blob/mast
ram Container: References: - http://www.securityfocus.com/bid/90968 - https://github.com/vrtadmin/clamav-devel/blob/master/ChangeLog - http://www.ubuntu.com/usn/USN-3093-1 - http://www.securitytracker.com/id/1035993 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160531-wsa-esa - http://www.securitytracker.com/id/1035994
CVE ID: CVE-2016-1406 State: PUBLISHED Published: 2016-05-25T01:00:00 Last Updated: 2024-08-05T22:55:14.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: The API web interface in Cisco Prime Infrastructure before 3.1 and Cisco Evolved Programmable Network Manager before 1.2.4 allows remote authenticated users to bypass intended RBAC restrictions and obtain sensitive information, and consequently gain privileges, via crafted JSON data, aka Bug ID CSCuy12409. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035948 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160523-pi-epnm
CVE ID: CVE-2016-1407 State: PUBLISHED Published: 2016-05-25T01:00:00 Last Updated: 2024-08-05T22:55:14.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS XR through 5.3.2 mishandles Local Packet Transport Services (LPTS) flow-base entries, which allows remote attackers to cause a denial of service (session drop) by making many connection attempts to open TCP ports, aka Bug ID CSCux95576. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160519-ios-xr - http://www.securitytracker.com/id/1035934
CVE ID: CVE-2016-1408 State: PUBLISHED Published: 2016-07-02T14:00:00 Last Updated: 2024-08-05T22:55:14.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Prime Infrastructure 1.2 through 3.1 and Evolved Programmable Network Manager (EPNM) 1.2 and 2.0 allow remote authenticated users to execute arbitrary commands or upload files via a crafted HTTP request, aka Bug ID CSCuz01488. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160629-pi-epnm - http://www.securitytracker.com/id/1036197 - http://www.securityfocus.com/bid/91506
CVE ID: CVE-2016-1409 State: PUBLISHED Published: 2016-05-29T22:00:00 Last Updated: 2024-08-05T22:55:14.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Cisco IOS XE 2.1 through 3.17S, IOS XR 2.0.0 through 5.3.2, and NX-OS allows remote attackers to cause a denial of service (packet-processing outage) via crafted ND messages, aka Bug ID CSCuz66542, as exploited in the wild in May 2016. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160525-ipv6 - http://www.securitytracker.com/id/1035964 - http://www.securityf
/content/CiscoSecurityAdvisory/cisco-sa-20160525-ipv6 - http://www.securitytracker.com/id/1035964 - http://www.securityfocus.com/bid/90872 - http://www.securitytracker.com/id/1035965 - http://www.securitytracker.com/id/1035962 - http://www.securitytracker.com/id/1036651 - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160824-01-ipv6-en - http://www.securitytracker.com/id/1035963
CVE ID: CVE-2016-1410 State: PUBLISHED Published: 2016-05-28T01:00:00 Last Updated: 2024-08-05T22:55:14.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco WebEx Meeting Center Original Release Base allows remote attackers to obtain sensitive information about username validity by (1) attending or (2) hosting a meeting, aka Bug ID CSCux84312. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035977 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160526-wmc - http://www.securityfocus.com/bid/90908
CVE ID: CVE-2016-1411 State: PUBLISHED Published: 2016-12-14T00:37:00 Last Updated: 2024-08-05T22:55:14.485Z Vendors: n/a Products: Cisco AsyncOS Problem Types: unspecified Description: A vulnerability in the update functionality of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA), Cisco Web Security Appliance (WSA), and Cisco Content Management Security Appliance (SMA) could allow an unauthenticated, remote attacker to impersonate the update server. More Information: CSCul88715, CSCul94617, CSCul94627. Known Affected Releases: 7.5.2-201 7.6.3-025 8.0.1-023 8.5.0-000 8.5.0-ER1-198 7.5.2-HP2-303 7.7.0-608 7.7.5-835 8.5.1-021 8.8.0-000 7.9.1-102 8.0.0-404 8.1.1-013 8.2.0-222. Kn
.5.0-000 8.5.0-ER1-198 7.5.2-HP2-303 7.7.0-608 7.7.5-835 8.5.1-021 8.8.0-000 7.9.1-102 8.0.0-404 8.1.1-013 8.2.0-222. Known Fixed Releases: 8.0.2-069 8.0.2-074 8.5.7-042 9.1.0-032 8.5.2-027 9.6.1-019. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-asyncos - http://www.securityfocus.com/bid/94791
CVE ID: CVE-2016-1413 State: PUBLISHED Published: 2016-05-28T01:00:00 Last Updated: 2024-08-05T22:55:14.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface in Cisco Firepower Management Center 5.4.0 through 6.0.0.1 allows remote authenticated users to modify pages by placing crafted code in a parameter value, aka Bug ID CSCuy76517. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160527-fmc
CVE ID: CVE-2016-1415 State: PUBLISHED Published: 2016-09-03T20:00:00 Last Updated: 2024-08-05T22:55:14.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco WebEx Meetings Player T29.10, when WRF file support is enabled, allows remote attackers to cause a denial of service (application crash) via a crafted file, aka Bug ID CSCuz80455. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160831-webex - http://www.securitytracker.com/id/1036713 - http://www.securityfocus.com/bid/92711 - https://www.exploit-db.com/exploits/40509/
CVE ID: CVE-2016-1416 State: PUBLISHED Published: 2016-07-02T14:00:00 Last Updated: 2024-08-05T22:55:14.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Prime Collaboration Provisioning 10.6 SP2 (aka 10.6.0.10602) mishandles LDAP authentication, which allows remote attackers to obtain administrator privileges via a crafted login attempt, aka Bug ID CSCuv37513. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91505 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160629-cpcpauthbypass - http://www.securitytracker.com/id/1036212
CVE ID: CVE-2016-1417 State: PUBLISHED Published: 2017-01-23T21:00:00 Last Updated: 2024-08-05T22:55:14.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Snort 2.9.7.0-WIN32 allows remote attackers to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse tcapi.dll that is located in the same folder on a remote file share as a pcap file that is being processed. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036936 - http://hyp3rlinx.altervista.org/advisories/SNORT-DLL-HIJACK.txt - http://www.securityfocus.com/bid/93269 - http://packetstormsecurity.com/files/138915/Sn
dvisories/SNORT-DLL-HIJACK.txt - http://www.securityfocus.com/bid/93269 - http://packetstormsecurity.com/files/138915/Snort-2.9.7.0-WIN32-DLL-Hijacking.html - http://www.securityfocus.com/archive/1/539579/100/0/threaded
CVE ID: CVE-2016-1418 State: PUBLISHED Published: 2016-06-08T14:00:00 Last Updated: 2024-08-05T22:55:14.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Aironet Access Point Software 8.2(100.0) on 1830e, 1830i, 1850e, 1850i, 2800, and 3800 access points allows local users to obtain Linux root access via crafted CLI command parameters, aka Bug ID CSCuy64037. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036042 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160606-aap
CVE ID: CVE-2016-1419 State: PUBLISHED Published: 2016-06-10T01:00:00 Last Updated: 2024-08-05T22:55:14.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Access Point devices with software 8.2(102.43) allow remote attackers to cause a denial of service (device reload) via crafted ARP packets, aka Bug ID CSCuy55803. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160608-aironet - http://www.securitytracker.com/id/1036626
CVE ID: CVE-2016-1420 State: PUBLISHED Published: 2016-06-10T01:00:00 Last Updated: 2024-08-05T22:55:14.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: The installation component on Cisco Application Policy Infrastructure Controller (APIC) devices with software before 1.3(2f) mishandles binary files, which allows local users to obtain root access via unspecified vectors, aka Bug ID CSCuz72347. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160609-apic
CVE ID: CVE-2016-1421 State: PUBLISHED Published: 2016-06-10T01:00:00 Last Updated: 2024-08-05T22:55:14.385Z Vendors: Cisco Products: Cisco IP Phones Problem Types: CWE-119 Description: A vulnerability in the web application for Cisco IP Phones could allow an unauthenticated, remote attacker to execute code with root privileges or cause a reload of an affected IP phone, resulting in a denial of service (DoS) condition. The vulnerability exists because the affected software fails to check the bounds of input data. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web server of a targeted device. A successful exploit could allow the attacker to remotely exec
fted HTTP request to the web server of a targeted device. A successful exploit could allow the attacker to remotely execute code with root privileges or cause a reload of an affected IP phone, resulting in a DoS condition. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160609-ipp - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160609-ipp - https://www.tenable.com/security/research/tra-2020-24
CVE ID: CVE-2016-1423 State: PUBLISHED Published: 2016-10-28T10:00:00 Last Updated: 2024-08-05T22:55:14.323Z Vendors: n/a Products: Cisco AsyncOS 8.0.2-069 Problem Types: unspecified Description: A vulnerability in the display of email messages in the Messages in Quarantine (MIQ) view in Cisco AsyncOS for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause a user to click a malicious link in the MIQ view. The malicious link could be used to facilitate a cross-site scripting (XSS) or HTML injection attack. More Information: CSCuz02235. Known Affected Releases: 8.0.2-069. Known Fixed Releases: 9.1.1-038 9.7.2-047. Additional Analyst Notes: - CVE Progra
5. Known Affected Releases: 8.0.2-069. Known Fixed Releases: 9.1.1-038 9.7.2-047. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161026-esa4 - http://www.securitytracker.com/id/1037113 - http://www.securityfocus.com/bid/93912