Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-0623 State: PUBLISHED Published: 2014-03-27T10:00:00 Last Updated: 2024-08-06T09:20:19.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Self-Service Console in EMC RSA Authentication Manager 7.1 before SP4 P32 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to a "cross frame scripting" issue. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2014-03/0146.html
CVE ID: CVE-2014-0624 State: PUBLISHED Published: 2014-03-06T11:00:00 Last Updated: 2024-08-06T09:20:20.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC RSA Data Loss Prevention (DLP) 9.x before 9.6-SP2 does not properly manage sessions, which allows remote authenticated users to gain privileges and bypass intended content-reading restrictions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2014/Mar/8
CVE ID: CVE-2014-0625 State: PUBLISHED Published: 2014-02-18T00:00:00 Last Updated: 2024-08-06T09:20:19.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SSLSocket implementation in the (1) JSAFE and (2) JSSE APIs in EMC RSA BSAFE SSL-J 5.x before 5.1.3 and 6.x before 6.0.2 allows remote attackers to cause a denial of service (memory consumption) by triggering application-data processing during the TLS handshake, a time at which the data is internally buffered. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2014-02/0061.html
CVE ID: CVE-2014-0626 State: PUBLISHED Published: 2014-02-18T00:00:00 Last Updated: 2024-08-06T09:20:19.775Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) JSAFE and (2) JSSE APIs in EMC RSA BSAFE SSL-J 5.x before 5.1.3 and 6.x before 6.0.2 make it easier for remote attackers to bypass intended cryptographic protection mechanisms by triggering application-data processing during the TLS handshake, a time at which the data is both unencrypted and unauthenticated. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2014-02/0061.html
CVE ID: CVE-2014-0627 State: PUBLISHED Published: 2014-02-18T00:00:00 Last Updated: 2024-08-06T09:20:19.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SSLEngine API implementation in EMC RSA BSAFE SSL-J 5.x before 5.1.3 and 6.x before 6.0.2 allows remote attackers to trigger the selection of a weak cipher suite by using the wrap method during a certain incomplete-handshake state. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2014-02/0061.html
CVE ID: CVE-2014-0628 State: PUBLISHED Published: 2014-03-25T01:00:00 Last Updated: 2024-08-06T09:20:19.873Z Vendors: n/a Products: n/a Problem Types: n/a Description: The server in EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.5 does not properly process certificate chains, which allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2014-03/0130.html
CVE ID: CVE-2014-0629 State: PUBLISHED Published: 2014-03-06T11:00:00 Last Updated: 2024-08-06T09:20:19.739Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC Documentum TaskSpace (TSP) 6.7SP1 before P25 and 6.7SP2 before P11 does not properly handle the interaction between the dm_world group and the dm_superusers_dynamic group, which allows remote authenticated users to obtain sensitive information and gain privileges in opportunistic circumstances by leveraging an incorrect group-addition implementation. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2014/Mar/33
CVE ID: CVE-2014-0630 State: PUBLISHED Published: 2014-03-06T11:00:00 Last Updated: 2024-08-06T09:20:19.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC Documentum TaskSpace (TSP) 6.7SP1 before P25 and 6.7SP2 before P11 allows remote authenticated users to read arbitrary files via a modified imaging-service URL. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2014/Mar/33
CVE ID: CVE-2014-0631 State: REJECTED Published: 2015-01-07T15:00:00 Last Updated: 2015-01-07T12:57:00 Description: No description available.
CVE ID: CVE-2014-0632 State: PUBLISHED Published: 2014-03-28T19:00:00 Last Updated: 2024-08-06T09:20:19.864Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 allows remote authenticated users to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/66513 - http://archives.neohapsis.com/archives/bugtraq/2014-03/0157.html
CVE ID: CVE-2014-0633 State: PUBLISHED Published: 2014-03-28T19:00:00 Last Updated: 2024-08-06T09:20:19.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GUI in EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 does not properly validate session-timeout values, which might make it easier for remote attackers to execute arbitrary code by leveraging an unattended workstation. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2014-03/0157.html
CVE ID: CVE-2014-0634 State: PUBLISHED Published: 2014-03-28T19:00:00 Last Updated: 2024-08-06T09:20:19.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 does not include the HTTPOnly flag in a Set-Cookie header for an unspecified cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2014-03/0157.html
CVE ID: CVE-2014-0635 State: PUBLISHED Published: 2014-03-28T19:00:00 Last Updated: 2024-08-06T09:20:19.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 allows remote attackers to hijack web sessions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2014-03/0157.html
CVE ID: CVE-2014-0636 State: PUBLISHED Published: 2014-04-11T19:00:00 Last Updated: 2024-08-06T09:20:19.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC RSA BSAFE Micro Edition Suite (MES) 3.2.x before 3.2.6 and 4.0.x before 4.0.5 does not properly validate X.509 certificate chains, which allows man-in-the-middle attackers to spoof SSL servers via a crafted certificate chain. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2014-04/0069.html - http://www.securityfocus.com/bid/66791
CVE ID: CVE-2014-0637 State: PUBLISHED Published: 2014-04-04T15:00:00 Last Updated: 2024-08-06T09:20:19.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the back-office case-management application in RSA Adaptive Authentication (On-Premise) 6.x and 7.x before 7.1 SP0 P2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2014-04/0007.html
CVE ID: CVE-2014-0638 State: PUBLISHED Published: 2014-04-04T15:00:00 Last Updated: 2024-08-06T09:20:19.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in RSA Adaptive Authentication (On-Premise) 6.x and 7.x before 7.1 SP0 P2 allows remote attackers to inject arbitrary web script or HTML via vectors involving FRAME elements, related to a "cross-frame scripting" issue. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2014-04/0007.html
CVE ID: CVE-2014-0639 State: PUBLISHED Published: 2014-05-25T22:00:00 Last Updated: 2024-08-06T09:20:19.873Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in EMC RSA Archer 5.x before GRC 5.4 SP1 P3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1030281 - http://packetstormsecurity.com/files/126788/RSA-Archer-GRC-Cross-Site-Scripting.html - http://archives.neohapsis.com/archives/bugtraq/2014-05/0134.html - http://www.securityfocus.com/bid/67602
CVE ID: CVE-2014-0640 State: PUBLISHED Published: 2014-08-20T10:00:00 Last Updated: 2024-08-06T09:20:19.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC RSA Archer GRC Platform 5.x before 5.5 SP1 allows remote authenticated users to bypass intended restrictions on resource access via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/95362 - http://archives.neohapsis.com/archives/bugtraq/2014-08/0097.html - http://www.securitytracker.com/id/1030738 - http://www.securityfocus.com/bid/69288
CVE ID: CVE-2014-0641 State: PUBLISHED Published: 2014-08-20T10:00:00 Last Updated: 2024-08-06T09:20:20.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in EMC RSA Archer GRC Platform 5.x before 5.5 SP1 allows remote attackers to hijack the authentication of arbitrary users. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/69289 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95361 - http://archives.neohapsis.com/archives/bugtraq/2014-08/0097.html - http://www.securitytracker.com/id/1030738
CVE ID: CVE-2014-0642 State: PUBLISHED Published: 2014-04-15T23:00:00 Last Updated: 2024-08-06T09:20:20.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC Documentum Content Server before 6.7 SP1 P26, 6.7 SP2 before P13, 7.0 before P13, and 7.1 before P02 allows remote authenticated users to bypass intended access restrictions and read metadata from certain folders via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2014-04/0072.html - http://twitter.com/artika4biz/statuses/455358950116823040
CVE ID: CVE-2014-0643 State: PUBLISHED Published: 2014-05-16T10:00:00 Last Updated: 2024-08-06T09:20:19.781Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC RSA NetWitness before 9.8.5.19 and RSA Security Analytics before 10.2.4 and 10.3.x before 10.3.2, when Kerberos PAM is enabled, do not require a password, which allows remote attackers to bypass authentication by leveraging knowledge of a valid account name. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2014-05/0052.html
CVE ID: CVE-2014-0644 State: PUBLISHED Published: 2014-04-17T01:00:00 Last Updated: 2024-08-06T09:20:19.877Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC Cloud Tiering Appliance (CTA) 10 through SP1 allows remote attackers to read arbitrary files via an api/login request containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, as demonstrated by reading the /etc/shadow file. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2014-04/0094.html - https://gist.github.com/brandonprry/9895721 - http://seclists.org/fulldisclosure/2014/Mar/426
CVE ID: CVE-2014-0645 State: PUBLISHED Published: 2014-04-17T01:00:00 Last Updated: 2024-08-06T09:20:19.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC Cloud Tiering Appliance (CTA) 9.x through 10 SP1 and File Management Appliance (FMA) 7.x store DES password hashes for the root, super, and admin accounts, which makes it easier for context-dependent attackers to obtain sensitive information via a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2014-04/0094.html - https://gist.github.com/brandonprry/9895721 - http://seclists.org/fulldisclosure/2014/Mar/426
CVE ID: CVE-2014-0646 State: PUBLISHED Published: 2014-05-01T17:00:00 Last Updated: 2024-08-06T09:20:19.846Z Vendors: n/a Products: n/a Problem Types: n/a Description: The runtime WS component in the server in EMC RSA Access Manager 6.1.3 before 6.1.3.39, 6.1.4 before 6.1.4.22, 6.2.0 before 6.2.0.11, and 6.2.1 before 6.2.1.03, when INFO logging is enabled, allows local users to discover cleartext passwords by reading log files. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2014-04/0191.html
CVE ID: CVE-2014-0647 State: PUBLISHED Published: 2014-01-28T00:00:00 Last Updated: 2024-08-06T09:20:19.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Starbucks 2.6.1 application for iOS stores sensitive information in plaintext in the Crashlytics log file (/Library/Caches/com.crashlytics.data/com.starbucks.mystarbucks/session.clslog), which allows attackers to discover usernames, passwords, and e-mail addresses via an application that reads session.clslog. Additional Analyst Notes: - CVE Program Container: References: - http://www.zdnet.com/the-starbucks-bug-not-as-awful-as-reported-7000025269/ - http://seclists.org/fulldisclosure/2014/Jan/64 - https://itunes.apple.com/
ks-bug-not-as-awful-as-reported-7000025269/ - http://seclists.org/fulldisclosure/2014/Jan/64 - https://itunes.apple.com/us/app/starbucks/id331177714?mt=8 - http://www.zdnet.com/starbucks-fixes-ios-app-bugs-7000025323/ - http://www.securityfocus.com/archive/1/530756/100/0/threaded - http://seclists.org/fulldisclosure/2014/Jan/123 - http://www.securityfocus.com/bid/64942 - http://www.osvdb.org/102514 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90412
CVE ID: CVE-2014-0648 State: PUBLISHED Published: 2014-01-16T19:00:00 Last Updated: 2024-08-06T09:20:19.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RMI interface in Cisco Secure Access Control System (ACS) 5.x before 5.5 does not properly enforce authentication and authorization requirements, which allows remote attackers to obtain administrative access via a request to this interface, aka Bug ID CSCud75187. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/64962 - http://secunia.com/advisories/56213 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90431 - http://osvdb.org/102117 - http://www.securitytracker.com/id
https://exchange.xforce.ibmcloud.com/vulnerabilities/90431 - http://osvdb.org/102117 - http://www.securitytracker.com/id/1029634 - http://tools.cisco.com/security/center/viewAlert.x?alertId=32379 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140115-csacs
CVE ID: CVE-2014-0649 State: PUBLISHED Published: 2014-01-16T19:00:00 Last Updated: 2024-08-06T09:20:19.858Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RMI interface in Cisco Secure Access Control System (ACS) 5.x before 5.5 does not properly enforce authorization requirements, which allows remote authenticated users to obtain superadmin access via a request to this interface, aka Bug ID CSCud75180. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/56213 - http://tools.cisco.com/security/center/viewAlert.x?alertId=32378 - http://www.securitytracker.com/id/1029634 - http://osvdb.org/102116 - http://www.securityfocus.com/bid/6495
rtId=32378 - http://www.securitytracker.com/id/1029634 - http://osvdb.org/102116 - http://www.securityfocus.com/bid/64958 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90430 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140115-csacs
CVE ID: CVE-2014-0650 State: PUBLISHED Published: 2014-01-16T19:00:00 Last Updated: 2024-08-06T09:20:19.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface in Cisco Secure Access Control System (ACS) 5.x before 5.4 Patch 3 allows remote attackers to execute arbitrary operating-system commands via a request to this interface, aka Bug ID CSCue65962. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/102115 - http://secunia.com/advisories/56213 - http://tools.cisco.com/security/center/viewAlert.x?alertId=32380 - http://www.securityfocus.com/bid/64964 - http://www.securitytracker.com/id/1029634 - https://exchange.xforce.ibmcloud.com/vu
://www.securityfocus.com/bid/64964 - http://www.securitytracker.com/id/1029634 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90432 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140115-csacs
CVE ID: CVE-2014-0651 State: PUBLISHED Published: 2014-01-08T21:00:00 Last Updated: 2024-08-06T09:20:19.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: The administrative interface in Cisco Context Directory Agent (CDA) does not properly enforce authorization requirements, which allows remote authenticated users to obtain administrative access by hijacking a session, aka Bug ID CSCuj45347. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/101809 - http://tools.cisco.com/security/center/viewAlert.x?alertId=32364 - http://secunia.com/advisories/56365 - http://www.securitytracker.com/id/1029573 - http://tools.cisco.com/security/center/content/Cisc
a.com/advisories/56365 - http://www.securitytracker.com/id/1029573 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0651 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90166 - http://www.securityfocus.com/bid/64706
CVE ID: CVE-2014-0652 State: PUBLISHED Published: 2014-01-08T21:00:00 Last Updated: 2024-08-06T09:20:19.801Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Mappings page in Cisco Context Directory Agent (CDA) allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuj45358. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/64703 - http://osvdb.org/101803 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0652 - http://secunia.com/advisories/56365 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90167 - http://tools
4-0652 - http://secunia.com/advisories/56365 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90167 - http://tools.cisco.com/security/center/viewAlert.x?alertId=32365 - http://www.securitytracker.com/id/1029572
CVE ID: CVE-2014-0653 State: PUBLISHED Published: 2014-01-08T21:00:00 Last Updated: 2024-08-06T09:20:19.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Identity Firewall (IDFW) functionality in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to trigger authentication-state modifications via a crafted NetBIOS logout probe response, aka Bug ID CSCuj45340. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0653 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90165 - http://www.securityfocus.com/bid/64708 - http://secunia.com/advisories/56366 - http://www.
d.com/vulnerabilities/90165 - http://www.securityfocus.com/bid/64708 - http://secunia.com/advisories/56366 - http://www.securitytracker.com/id/1029570 - http://osvdb.org/101834 - http://tools.cisco.com/security/center/viewAlert.x?alertId=32363
CVE ID: CVE-2014-0654 State: PUBLISHED Published: 2014-01-08T21:00:00 Last Updated: 2024-08-06T09:20:19.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Context Directory Agent (CDA) allows remote attackers to modify the cache via a replay attack involving crafted RADIUS accounting messages, aka Bug ID CSCuj45383. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029574 - http://tools.cisco.com/security/center/viewAlert.x?alertId=32366 - http://www.securityfocus.com/bid/64709 - http://secunia.com/advisories/56365 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0654 - http://osvdb.org/101802 -
ies/56365 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0654 - http://osvdb.org/101802 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90168
CVE ID: CVE-2014-0655 State: PUBLISHED Published: 2014-01-08T21:00:00 Last Updated: 2024-08-06T09:20:19.716Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Identity Firewall (IDFW) functionality in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to change the user-cache contents via a replay attack involving crafted RADIUS Change of Authorization (CoA) messages, aka Bug ID CSCuj45332. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029575 - http://secunia.com/advisories/56366 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0655 - http://tools.cisco.com/security/center/vi
://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0655 - http://tools.cisco.com/security/center/viewAlert.x?alertId=32362 - http://www.securityfocus.com/bid/64700 - http://osvdb.org/101838 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90164
CVE ID: CVE-2014-0656 State: PUBLISHED Published: 2014-01-08T21:00:00 Last Updated: 2024-08-06T09:20:20.045Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Context Directory Agent (CDA) allows remote authenticated users to trigger the omission of certain user-interface data via crafted field values, aka Bug ID CSCuj45353. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/90169 - http://osvdb.org/101801 - http://www.securitytracker.com/id/1029569 - http://www.securityfocus.com/bid/64701 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0656
CVE ID: CVE-2014-0657 State: PUBLISHED Published: 2014-01-08T21:00:00 Last Updated: 2024-08-06T09:20:19.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: The administration portal in Cisco Unified Communications Manager (Unified CM) 9.1(1) and earlier does not properly handle role restrictions, which allows remote authenticated users to bypass role-based access control via multiple visits to a forbidden portal URL, aka Bug ID CSCuj83540. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/101800 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90120 - http://secunia.com/advisories/56368 - http://tools.cisco.com/security/center/content/CiscoSe
com/vulnerabilities/90120 - http://secunia.com/advisories/56368 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0657 - http://tools.cisco.com/security/center/viewAlert.x?alertId=32341 - http://www.securityfocus.com/bid/64690 - http://www.securitytracker.com/id/1029571
CVE ID: CVE-2014-0658 State: PUBLISHED Published: 2014-01-10T16:00:00 Last Updated: 2024-08-06T09:20:19.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco 9900 Unified IP phones allow remote attackers to cause a denial of service (unregistration) via a crafted SIP header, aka Bug ID CSCul24898. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0658 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90236 - http://osvdb.org/101913 - http://www.securitytracker.com/id/1029596 - http://tools.cisco.com/security/center/viewAlert.x?alertId=32402 - http://secunia.com/advisories/56384 - h
/id/1029596 - http://tools.cisco.com/security/center/viewAlert.x?alertId=32402 - http://secunia.com/advisories/56384 - http://www.securityfocus.com/bid/64770