Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-0189 State: PUBLISHED Published: 2018-03-28T22:00:00 Last Updated: 2024-12-02T20:52:02.625Z Vendors: n/a Products: Cisco IOS and IOS XE Problem Types: CWE-399 Description: A vulnerability in the Forwarding Information Base (FIB) code of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, network attacker to cause a denial of service (DoS) condition. The vulnerability is due to a limitation in the way the FIB is internally representing recursive routes. An attacker could exploit this vulnerability by injecting routes into the routing protocol that have a specific recursive pattern. The attacker must be in a position on the network that provides the ab
protocol that have a specific recursive pattern. The attacker must be in a position on the network that provides the ability to inject a number of recursive routes with a specific pattern. An exploit could allow the attacker to cause an affected device to reload, creating a DoS condition. Cisco Bug IDs: CSCva91655. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-FIB-dos - http://www.securityfocus.com/bid/103548
CVE ID: CVE-2018-0190 State: PUBLISHED Published: 2018-03-28T22:00:00 Last Updated: 2024-12-02T20:51:51.984Z Vendors: n/a Products: Cisco IOS XE Problem Types: CWE-79 Description: Multiple vulnerabilities in the web-based user interface (web UI) of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web UI of the affected software. The vulnerabilities are due to insufficient input validation of certain parameters that are passed to the affected software via the web UI. An attacker could exploit these vulnerabilities by persuading a user of the affected UI to access a malicious link or by intercepting a use
CVE ID: CVE-2018-0191 State: REJECTED Published: 2019-03-19T19:35:33 Last Updated: 2019-03-19T19:35:33 Description: No description available.
CVE ID: CVE-2018-0193 State: PUBLISHED Published: 2018-03-28T22:00:00 Last Updated: 2024-12-02T20:51:40.162Z Vendors: n/a Products: Cisco IOS XE Problem Types: CWE-78 Description: Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to inject arbitrary commands into the CLI of the affected software, which could allow the attacker to gain access to the underlying Linux shell of an affected device and execute commands with root privileges on the device. The vulnerabilities exist because the affected software does not sufficiently sanitize command arguments before passing commands to the Linux shell for execution. An attacker could exp
CVE ID: CVE-2018-0194 State: PUBLISHED Published: 2018-04-02T14:00:00 Last Updated: 2024-11-29T15:19:30.512Z Vendors: n/a Products: Cisco IOS XE Problem Types: CWE-78 Description: Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to inject arbitrary commands into the CLI of the affected software, which could allow the attacker to gain access to the underlying Linux shell of an affected device and execute commands with root privileges on the device. The vulnerabilities exist because the affected software does not sufficiently sanitize command arguments before passing commands to the Linux shell for execution. An attacker could exp
CVE ID: CVE-2018-0195 State: PUBLISHED Published: 2018-03-28T22:00:00 Last Updated: 2024-12-02T20:51:28.001Z Vendors: n/a Products: Cisco IOS XE Problem Types: CWE-287 Description: A vulnerability in the Cisco IOS XE Software REST API could allow an authenticated, remote attacker to bypass API authorization checks and use the API to perform privileged actions on an affected device. The vulnerability is due to insufficient authorization checks for requests that are sent to the REST API of the affected software. An attacker could exploit this vulnerability by sending a malicious request to an affected device via the REST API. A successful exploit could allow the attacker to selectively bypass
ous request to an affected device via the REST API. A successful exploit could allow the attacker to selectively bypass authorization checks for the REST API of the affected software and use the API to perform privileged actions on an affected device. Cisco Bug IDs: CSCuz56428. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/103557 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-rest
CVE ID: CVE-2018-0196 State: PUBLISHED Published: 2018-03-28T22:00:00 Last Updated: 2024-12-02T20:51:18.035Z Vendors: n/a Products: Cisco IOS XE Problem Types: CWE-20 Description: A vulnerability in the web-based user interface (web UI) of Cisco IOS XE Software could allow an authenticated, remote attacker to write arbitrary files to the operating system of an affected device. The vulnerability is due to insufficient input validation of HTTP requests that are sent to the web UI of the affected software. An attacker could exploit this vulnerability by sending a malicious HTTP request to the web UI of the affected software. A successful exploit could allow the attacker to write arbitrary files
P request to the web UI of the affected software. A successful exploit could allow the attacker to write arbitrary files to the operating system of an affected device. Cisco Bug IDs: CSCvb22645. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/103570 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-wfw
CVE ID: CVE-2018-0197 State: PUBLISHED Published: 2018-10-05T14:00:00Z Last Updated: 2024-11-26T14:46:22.295Z Vendors: Cisco Products: Cisco IOS and IOS XE Software Problem Types: CWE-20 Description: A vulnerability in the VLAN Trunking Protocol (VTP) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to corrupt the internal VTP database on an affected device and cause a denial of service (DoS) condition. The vulnerability is due to a logic error in how the affected software handles a subset of VTP packets. An attacker could exploit this vulnerability by sending VTP packets in a sequence that triggers a timeout in the VTP message proce
r could exploit this vulnerability by sending VTP packets in a sequence that triggers a timeout in the VTP message processing code of the affected software. A successful exploit could allow the attacker to impact the ability to create, modify, or delete VLANs and cause a DoS condition. There are workarounds that address this vulnerability. This vulnerability affects Cisco devices that are running a vulnerable release of Cisco IOS Software or Cisco IOS XE Software, are operating in VTP client mode or VTP server mode, and do not have a VTP domain name configured. The default configuration for Cisco devices that are running Cisco IOS Software or Cisco IOS XE Software and support VTP is to opera
configuration for Cisco devices that are running Cisco IOS Software or Cisco IOS XE Software and support VTP is to operate in VTP server mode with no domain name configured. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180926-vtp - http://www.securityfocus.com/bid/105424
CVE ID: CVE-2018-0198 State: PUBLISHED Published: 2018-03-27T09:00:00 Last Updated: 2024-12-02T20:56:03.985Z Vendors: n/a Products: Cisco Unified Communications Manager Problem Types: CWE-693 Description: A vulnerability in the web framework of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to view sensitive data. The vulnerability is due to insufficient protection of database tables. An attacker could exploit this vulnerability by browsing to a specific URL. A successful exploit could allow the attacker to view data library information. Cisco Bug IDs: CSCvh66592. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - h
. Cisco Bug IDs: CSCvh66592. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180207-ucm1 - http://www.securitytracker.com/id/1040342 - http://www.securityfocus.com/bid/102965
CVE ID: CVE-2018-0199 State: PUBLISHED Published: 2018-02-22T00:00:00 Last Updated: 2024-12-02T21:04:50.990Z Vendors: n/a Products: Cisco Jabber Client Framework Problem Types: CWE-79 Description: A vulnerability in Cisco Jabber Client Framework (JCF) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of an affected device. The vulnerability is due to improper neutralization of script in attributes in a web page. An attacker could exploit this vulnerability by executing arbitrary JavaScript in the Jabber client of the recipient. An exploit could allow the attacker to perform remote code execution. Cisco Bug IDs: CSCve53989. Additiona
he recipient. An exploit could allow the attacker to perform remote code execution. Cisco Bug IDs: CSCve53989. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180221-jcf - http://www.securitytracker.com/id/1040407 - http://www.securityfocus.com/bid/103143
CVE ID: CVE-2018-0200 State: PUBLISHED Published: 2018-02-22T00:00:00 Last Updated: 2024-12-02T21:04:38.515Z Vendors: n/a Products: Cisco Prime Service Catalog Problem Types: CWE-79 Description: A vulnerability in the web-based interface of Cisco Prime Service Catalog could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web-based interface of an affected product. The vulnerability is due to insufficient validation of user-supplied input by the web-based interface. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to
ability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or allow the attacker to access sensitive browser-based information. Cisco Bug IDs: CSCvh65713. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/103128 - http://www.securitytracker.com/id/1040408 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180221-psc
CVE ID: CVE-2018-0201 State: PUBLISHED Published: 2018-02-22T00:00:00 Last Updated: 2024-12-02T21:04:29.721Z Vendors: n/a Products: Cisco Jabber Client Framework Problem Types: CWE-79 Description: A vulnerability in Cisco Jabber Client Framework (JCF) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of an affected device. The vulnerability is due to improper neutralization of input during web page generation. An attacker could exploit this vulnerability by embedding media in instant messages. An exploit could allow the attacker to cause the recipient chat client to make outbound requests. Cisco Bug IDs: CSCve54001. Additional Analyst
the attacker to cause the recipient chat client to make outbound requests. Cisco Bug IDs: CSCve54001. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securitytracker.com/id/1040406 - http://www.securityfocus.com/bid/103133 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180221-jcf1
CVE ID: CVE-2018-0202 State: PUBLISHED Published: 2018-03-27T09:00:00 Last Updated: 2024-12-02T20:55:52.456Z Vendors: n/a Products: ClamAV Problem Types: out-of-bounds read Description: clamscan in ClamAV before 0.99.4 contains a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper input validation checking mechanisms when handling Portable Document Format (.pdf) files sent to an affected device. An unauthenticated, remote attacker could exploit this vulnerability by sending a crafted .pdf file to an affected device. This action could cause an out-of-bounds read when ClamAV
ability by sending a crafted .pdf file to an affected device. This action could cause an out-of-bounds read when ClamAV scans the malicious file, allowing the attacker to cause a DoS condition. This concerns pdf_parse_array and pdf_parse_string in libclamav/pdfng.c. Cisco Bug IDs: CSCvh91380, CSCvh91400. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://usn.ubuntu.com/3592-2/ - https://bugzilla.clamav.net/show_bug.cgi?id=11973 - https://bugzilla.clamav.net/show_bug.cgi?id=11980 - https://lists.debian.org/debian-lts-announce/2018/03/msg00011.html - https://usn.ubuntu.com/3592-1/ - https://security.gentoo.org/glsa/201804-16
CVE ID: CVE-2018-0203 State: PUBLISHED Published: 2018-02-22T00:00:00 Last Updated: 2024-12-02T21:01:00.956Z Vendors: n/a Products: Cisco Unity Connection Problem Types: CWE-19 Description: A vulnerability in the SMTP relay of Cisco Unity Connection could allow an unauthenticated, remote attacker to send unsolicited email messages, aka a Mail Relay Vulnerability. The vulnerability is due to improper handling of domain information in the affected software. An unauthenticated, remote attacker could exploit this vulnerability by sending crafted requests to the targeted application. A successful exploit could allow the attacker to send email messages to arbitrary addresses. Cisco Bug IDs: CSCvg6
tion. A successful exploit could allow the attacker to send email messages to arbitrary addresses. Cisco Bug IDs: CSCvg62215. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/103142 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180221-cuc - http://www.securitytracker.com/id/1040413
CVE ID: CVE-2018-0204 State: PUBLISHED Published: 2018-02-22T00:00:00 Last Updated: 2024-12-02T21:00:47.549Z Vendors: n/a Products: Cisco Prime Collaboration Provisioning Tool Problem Types: CWE-119 Description: A vulnerability in the web portal of the Cisco Prime Collaboration Provisioning Tool could allow an unauthenticated, remote attacker to create a denial of service (DoS) condition for individual users. The vulnerability is due to weak login controls. An attacker could exploit this vulnerability by using a brute-force attack (Repeated Bad Login Attempts). A successful exploit could allow the attacker to restrict user access. Manual administrative intervention is required to restore acc
exploit could allow the attacker to restrict user access. Manual administrative intervention is required to restore access. Cisco Bug IDs: CSCvd07264. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securitytracker.com/id/1040410 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180221-pcpt - http://www.securityfocus.com/bid/103150
CVE ID: CVE-2018-0205 State: PUBLISHED Published: 2018-02-22T00:00:00 Last Updated: 2024-12-02T21:00:34.515Z Vendors: n/a Products: Cisco Prime Collaboration Provisioning Tool Problem Types: CWE-79 Description: A vulnerability in the User Provisioning tab in the Cisco Prime Collaboration Provisioning Tool could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. The vulnerability is due to improper input validation. An attacker could exploit this vulnerability by placing a malicious string in the Prime Collaboration Provisioning database. A successful exploit could allow the attacker to access Cisco Prime Collaboration Provisioning by injecting crafted d
e. A successful exploit could allow the attacker to access Cisco Prime Collaboration Provisioning by injecting crafted data into the database. Cisco Bug IDs: CSCvd86609. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/103145 - http://www.securitytracker.com/id/1040409 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180221-pcpt1
CVE ID: CVE-2018-0206 State: PUBLISHED Published: 2018-02-22T00:00:00 Last Updated: 2024-12-02T21:00:19.384Z Vendors: n/a Products: Cisco Unified Communications Manager Problem Types: CWE-79 Description: A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading a user of the web-based ma
t interface of an affected device. An attacker could exploit this vulnerability by persuading a user of the web-based management interface to click a link that submits malicious input to the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or allow the attacker to access sensitive browser-based information. Cisco Bug IDs: CSCvg74815. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180221-ucm - http://www.securityfocus.com/bid/103146 - http://www.securitytracker.com/id/1040411
CVE ID: CVE-2018-0207 State: PUBLISHED Published: 2018-03-08T07:00:00 Last Updated: 2024-12-02T20:59:25.390Z Vendors: n/a Products: Cisco Secure Access Control Server Problem Types: CWE-200 Description: A vulnerability in the web-based user interface of the Cisco Secure Access Control Server prior to 5.8 patch 9 could allow an unauthenticated, remote attacker to gain read access to certain information in the affected system. The vulnerability is due to improper handling of XML External Entities (XXEs) when parsing an XML file. An attacker could exploit this vulnerability by convincing the administrator of an affected system to import a crafted XML file. Cisco Bug IDs: CSCve70595. Additional
convincing the administrator of an affected system to import a crafted XML file. Cisco Bug IDs: CSCve70595. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180307-acs - http://www.securitytracker.com/id/1040470 - http://www.securityfocus.com/bid/103343
CVE ID: CVE-2018-0208 State: PUBLISHED Published: 2018-03-08T07:00:00 Last Updated: 2024-12-02T20:59:09.051Z Vendors: n/a Products: Cisco Registered Envelope Service Problem Types: CWE-79 Description: A vulnerability in the web-based management interface of the (cloud based) Cisco Registered Envelope Service could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of the affected service. The vulnerability is due to insufficient validation of user-supplied input that is processed by the web-based management interface of the affected service. An attacker could exploit this vulnerability by persuading a us
web-based management interface of the affected service. An attacker could exploit this vulnerability by persuading a user of the interface to click a malicious link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or access sensitive browser-based information. Cisco Bug IDs: CSCvg74126. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/103337 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180307-res
CVE ID: CVE-2018-0209 State: PUBLISHED Published: 2018-03-08T07:00:00 Last Updated: 2024-12-02T20:58:58.611Z Vendors: n/a Products: Cisco 550X Series Stackable Managed Switches Problem Types: CWE-119 Description: A vulnerability in the Simple Network Management Protocol (SNMP) subsystem communication channel through the Cisco 550X Series Stackable Managed Switches could allow an authenticated, remote attacker to cause the device to reload unexpectedly, causing a denial of service (DoS) condition. The device nay need to be manually reloaded to recover. The vulnerability is due to lack of proper input throttling of ingress SNMP traffic over an internal interface. An attacker could exploit this
ue to lack of proper input throttling of ingress SNMP traffic over an internal interface. An attacker could exploit this vulnerability by sending a crafted, heavy stream of SNMP traffic to the targeted device. An exploit could allow the attacker to cause the device to reload unexpectedly, causing a DoS condition. Cisco Bug IDs: CSCvg22135. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/103406 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180307-550x
CVE ID: CVE-2018-0210 State: PUBLISHED Published: 2018-03-08T07:00:00 Last Updated: 2024-12-02T20:58:49.175Z Vendors: n/a Products: Cisco Data Center Network Manager Problem Types: CWE-352 Description: A vulnerability in the web-based management interface of Cisco Data Center Network Manager could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF protections on the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading a user of the interface to follow a crafted link. A successful exploit cou
ould exploit this vulnerability by persuading a user of the interface to follow a crafted link. A successful exploit could allow the attacker to perform arbitrary actions on a targeted device via a web browser and with the privileges of the user. Cisco Bug IDs: CSCvg88291. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securitytracker.com/id/1040465 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180307-dcnm - http://www.securityfocus.com/bid/103335
CVE ID: CVE-2018-0211 State: PUBLISHED Published: 2018-03-08T07:00:00 Last Updated: 2024-12-02T20:58:38.379Z Vendors: n/a Products: Cisco Identity Services Engine Problem Types: CWE-20 Description: A vulnerability in specific CLI commands for the Cisco Identity Services Engine could allow an authenticated, local attacker to cause a denial of service (DoS) condition. The device may need to be manually rebooted to recover. The vulnerability is due to lack of proper input validation of the CLI user input for certain CLI commands. An attacker could exploit this vulnerability by authenticating to the device and issuing a crafted, malicious CLI command on the targeted device. A successful exploit
authenticating to the device and issuing a crafted, malicious CLI command on the targeted device. A successful exploit could allow the attacker to cause a DoS condition. The attacker must have valid administrative privileges on the device to exploit this vulnerability. Cisco Bug IDs: CSCvf63414, CSCvh51992. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180307-ise - http://www.securitytracker.com/id/1040471 - http://www.securityfocus.com/bid/103334