Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-0659 State: PUBLISHED Published: 2014-01-12T15:00:00 Last Updated: 2024-08-06T09:20:19.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cisco WAP4410N access point with firmware through 2.0.6.1, WRVS4400N router with firmware 1.x through 1.1.13 and 2.x through 2.0.2.1, and RVS4000 router with firmware through 2.0.3.2 allow remote attackers to read credential and configuration data, and execute arbitrary commands, via requests to the test interface on TCP port 32764, aka Bug IDs CSCum37566, CSCum43693, CSCum43700, and CSCum43685. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/56292 - http://tools.cisco.com/sec
l Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/56292 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140110-sbd - https://exchange.xforce.ibmcloud.com/vulnerabilities/90233 - http://www.securityfocus.com/bid/64776 - http://www.securitytracker.com/id/1029580 - http://tools.cisco.com/security/center/viewAlert.x?alertId=32381 - http://www.securitytracker.com/id/1029579 - https://github.com/elvanderb/TCP-32764
CVE ID: CVE-2014-0660 State: PUBLISHED Published: 2014-01-22T21:00:00 Last Updated: 2024-08-06T09:20:19.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco TelePresence ISDN Gateway with software before 2.2(1.92) allows remote attackers to cause a denial of service (D-channel call outage) via a crafted Q.931 STATUS message, aka Bug ID CSCui50360. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/65072 - http://tools.cisco.com/security/center/viewAlert.x?alertId=32460 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140122-isdngw - http://www.securitytracker.com/id/1029657 - https://exchange.xfo
ontent/CiscoSecurityAdvisory/cisco-sa-20140122-isdngw - http://www.securitytracker.com/id/1029657 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90622 - http://secunia.com/advisories/56591 - http://osvdb.org/102361
CVE ID: CVE-2014-0661 State: PUBLISHED Published: 2014-01-22T21:00:00 Last Updated: 2024-08-06T09:20:19.722Z Vendors: n/a Products: n/a Problem Types: n/a Description: The System Status Collection Daemon (SSCD) in Cisco TelePresence System 500-37, 1000, 1300-65, and 3xxx before 1.10.2(42), and 500-32, 1300-47, TX1310 65, and TX9xxx before 6.0.4(11), allows remote attackers to execute arbitrary commands or cause a denial of service (stack memory corruption) via a crafted XML-RPC message, aka Bug ID CSCui32796. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/102362 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140122-cts - h
http://osvdb.org/102362 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140122-cts - https://exchange.xforce.ibmcloud.com/vulnerabilities/90624 - http://www.securityfocus.com/bid/65071 - http://secunia.com/advisories/56533 - http://www.securitytracker.com/id/1029656
CVE ID: CVE-2014-0662 State: PUBLISHED Published: 2014-01-22T21:00:00 Last Updated: 2024-08-06T09:20:19.882Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SIP module in Cisco TelePresence Video Communication Server (VCS) before 8.1 allows remote attackers to cause a denial of service (process failure) via a crafted SDP message, aka Bug ID CSCue97632. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=32409 - http://www.securityfocus.com/bid/65076 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140122-vcs - http://osvdb.org/102363 - http://www.securitytracker.com/id/1
nter/content/CiscoSecurityAdvisory/cisco-sa-20140122-vcs - http://osvdb.org/102363 - http://www.securitytracker.com/id/1029655 - http://secunia.com/advisories/56592 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90621
CVE ID: CVE-2014-0663 State: PUBLISHED Published: 2014-01-10T16:00:00 Last Updated: 2024-08-06T09:20:19.843Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the web framework in Cisco Secure Access Control System (ACS) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCum03625. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=32403 - http://www.securitytracker.com/id/1029595 - http://osvdb.org/101914 - http://www.securityfocus.com/bid/64773 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90232 - http:/
rg/101914 - http://www.securityfocus.com/bid/64773 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90232 - http://secunia.com/advisories/56382 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0663
CVE ID: CVE-2014-0664 State: PUBLISHED Published: 2014-01-10T16:00:00 Last Updated: 2024-08-06T09:20:19.747Z Vendors: n/a Products: n/a Problem Types: n/a Description: The server in Cisco Unity Connection allows remote authenticated users to cause a denial of service (CPU consumption) via unspecified IMAP commands, aka Bug ID CSCul49976. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/101915 - http://www.securitytracker.com/id/1029593 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0664 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90234 - http://secunia.com/advisories/56370 - http://www.securityfocus.com/bid/64772
CVE ID: CVE-2014-0665 State: PUBLISHED Published: 2014-01-15T15:00:00 Last Updated: 2024-08-06T09:20:19.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RBAC implementation in Cisco Identity Services Engine (ISE) Software does not properly verify privileges for support-bundle downloads, which allows remote authenticated users to obtain sensitive information via a download action, as demonstrated by obtaining read access to the user database, aka Bug ID CSCul83904. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/90463 - http://osvdb.org/102118 - http://tools.cisco.com/security/center/viewAlert.x?alertId=3
cloud.com/vulnerabilities/90463 - http://osvdb.org/102118 - http://tools.cisco.com/security/center/viewAlert.x?alertId=32448 - http://www.securitytracker.com/id/1029624 - http://secunia.com/advisories/56439 - http://www.securityfocus.com/bid/64939 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0665
CVE ID: CVE-2014-0666 State: PUBLISHED Published: 2014-01-16T19:00:00 Last Updated: 2024-08-06T09:20:19.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Send Screen Capture implementation in Cisco Jabber 9.2(.1) and earlier on Windows allows remote attackers to upload arbitrary types of files, and consequently execute arbitrary code, via modified packets, aka Bug ID CSCug48056. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029635 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0666 - http://tools.cisco.com/security/center/viewAlert.x?alertId=32451 - http
nter/content/CiscoSecurityNotice/CVE-2014-0666 - http://tools.cisco.com/security/center/viewAlert.x?alertId=32451 - http://secunia.com/advisories/56331 - http://www.securityfocus.com/bid/64965 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90435 - http://osvdb.org/102122
CVE ID: CVE-2014-0667 State: PUBLISHED Published: 2014-01-16T19:00:00 Last Updated: 2024-08-06T09:20:19.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RMI interface in Cisco Secure Access Control System (ACS) does not properly enforce authorization requirements, which allows remote authenticated users to read arbitrary files via a request to this interface, aka Bug ID CSCud75169. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029641 - http://www.securityfocus.com/bid/64983 - http://osvdb.org/102168 - http://tools.cisco.com/security/center/viewAlert.x?alertId=32468 - http://tools.cisco.com/security/center/content/CiscoS
http://tools.cisco.com/security/center/viewAlert.x?alertId=32468 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0667 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90497
CVE ID: CVE-2014-0668 State: PUBLISHED Published: 2014-01-20T02:00:00 Last Updated: 2024-08-06T09:20:19.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the portal in Cisco Secure Access Control System (ACS) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCue65949. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/90561 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0668 - http://secunia.com/advisories/56543 - http://osvdb.org/102256 - http://tools.cisco.com/security/center/viewA
2014-0668 - http://secunia.com/advisories/56543 - http://osvdb.org/102256 - http://tools.cisco.com/security/center/viewAlert.x?alertId=32489 - http://www.securityfocus.com/bid/65016 - http://www.securitytracker.com/id/1029654
CVE ID: CVE-2014-0669 State: PUBLISHED Published: 2014-01-22T02:00:00 Last Updated: 2024-08-06T09:20:20.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Wireless Session Protocol (WSP) feature in the Gateway GPRS Support Node (GGSN) component on Cisco ASR 5000 series devices allows remote attackers to bypass intended Top-Up payment restrictions via unspecified WSP packets, aka Bug ID CSCuh28371. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=32513 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90614 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0669 - http:/
ud.com/vulnerabilities/90614 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0669 - http://osvdb.org/102318 - http://www.securityfocus.com/bid/65052 - http://secunia.com/advisories/56546 - http://www.securitytracker.com/id/1029666
CVE ID: CVE-2014-0670 State: PUBLISHED Published: 2014-01-22T02:00:00 Last Updated: 2024-08-06T09:20:20.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Search and Play interface in Cisco MediaSense allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCum16686. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029667 - http://secunia.com/advisories/56563 - http://tools.cisco.com/security/center/viewAlert.x?alertId=32514 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0670 - http://osvdb.org/102319 -
tId=32514 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0670 - http://osvdb.org/102319 - http://www.securityfocus.com/bid/65053 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90615
CVE ID: CVE-2014-0671 State: PUBLISHED Published: 2014-01-22T02:00:00 Last Updated: 2024-08-06T09:20:19.743Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in Cisco MediaSense allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via an unspecified parameter, aka Bug ID CSCum16749. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/65055 - http://secunia.com/advisories/56544 - http://www.securitytracker.com/id/1029669 - http://osvdb.org/102341 - http://tools.cisco.com/security/center/viewAlert.x?alertId=32517 - http://tools.cisco.com/security/center/content/CiscoSecu
p://tools.cisco.com/security/center/viewAlert.x?alertId=32517 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0671 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90617
CVE ID: CVE-2014-0672 State: PUBLISHED Published: 2014-01-22T02:00:00 Last Updated: 2024-08-06T09:20:19.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Search and Play interface in Cisco MediaSense does not properly enforce authorization requirements, which allows remote authenticated users to download arbitrary recordings via a request to this interface. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029668 - http://osvdb.org/102342 - http://tools.cisco.com/security/center/viewAlert.x?alertId=32516 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90616 - http://secunia.com/advisories/56600 - http://www.securityfo
https://exchange.xforce.ibmcloud.com/vulnerabilities/90616 - http://secunia.com/advisories/56600 - http://www.securityfocus.com/bid/65054 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0672
CVE ID: CVE-2014-0673 State: PUBLISHED Published: 2014-01-25T22:00:00 Last Updated: 2024-08-06T09:20:20.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the web interface on Cisco Video Surveillance 5000 HD IP Dome cameras allow remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug IDs CSCud10943 and CSCud10950. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/65145 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90733 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0673 - http://www.securitytracker.com/id/102
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0673 - http://www.securitytracker.com/id/1029689 - http://osvdb.org/102557 - http://secunia.com/advisories/56552 - http://tools.cisco.com/security/center/viewAlert.x?alertId=32568
CVE ID: CVE-2014-0674 State: PUBLISHED Published: 2014-01-24T02:00:00 Last Updated: 2024-08-06T09:20:20.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Video Surveillance Operations Manager (VSOM) does not require authentication for MySQL database connections, which allows remote attackers to obtain sensitive information, modify data, or cause a denial of service by leveraging network connectivity from a client system with a crafted host name, aka Bug ID CSCud10992. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/90651 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0674
e.ibmcloud.com/vulnerabilities/90651 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0674 - http://osvdb.org/102409 - http://www.securityfocus.com/bid/65111 - http://www.ubuntu.com/usn/USN-2739-1 - http://www.securitytracker.com/id/1029692 - http://secunia.com/advisories/56619
CVE ID: CVE-2014-0675 State: PUBLISHED Published: 2014-01-23T02:00:00 Last Updated: 2024-08-06T09:27:19.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Expressway component in Cisco TelePresence Video Communication Server (VCS) uses the same default X.509 certificate across different customers' installations, which makes it easier for remote attackers to conduct man-in-the-middle attacks against SSL sessions by leveraging the certificate's trust relationship, aka Bug ID CSCue07471. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=32540 - http://www.securityfocus.com/bid/65101 - https://exchange.xfo
ools.cisco.com/security/center/viewAlert.x?alertId=32540 - http://www.securityfocus.com/bid/65101 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90650 - http://secunia.com/advisories/56621 - http://osvdb.org/102377 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0675 - http://www.securitytracker.com/id/1029682
CVE ID: CVE-2014-0676 State: PUBLISHED Published: 2014-01-22T21:00:00 Last Updated: 2024-08-06T09:27:19.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco NX-OS allows local users to bypass intended TACACS+ command restrictions via a series of multiple commands, aka Bug ID CSCum47367. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/65083 - http://www.securitytracker.com/id/1029690 - http://tools.cisco.com/security/center/viewAlert.x?alertId=32531 - http://secunia.com/advisories/56597 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0676 - https://exchange.xforce.ibmcloud.com/vulnerabilities/9062
om/security/center/content/CiscoSecurityNotice/CVE-2014-0676 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90627 - http://osvdb.org/102366
CVE ID: CVE-2014-0677 State: PUBLISHED Published: 2014-01-22T21:00:00 Last Updated: 2024-08-06T09:27:18.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Label Distribution Protocol (LDP) functionality in Cisco NX-OS allows remote attackers to cause a denial of service (temporary LDP session outage) via LDP discovery traffic containing malformed Hello messages, aka Bug ID CSCul88851. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/65074 - http://secunia.com/advisories/56611 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90623 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0677 - http://
d.com/vulnerabilities/90623 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0677 - http://tools.cisco.com/security/center/viewAlert.x?alertId=32532 - http://osvdb.org/102368 - http://www.securitytracker.com/id/1029691
CVE ID: CVE-2014-0678 State: PUBLISHED Published: 2014-01-25T22:00:00 Last Updated: 2024-08-06T09:27:18.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: The portal interface in Cisco Secure Access Control System (ACS) does not properly manage sessions, which allows remote authenticated users to hijack sessions and gain privileges via unspecified vectors, aka Bug ID CSCue65951. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/56540 - http://www.securityfocus.com/bid/65144 - http://tools.cisco.com/security/center/viewAlert.x?alertId=32567 - http://www.securitytracker.com/id/1029688 - https://exchange.xforce.ibmcloud.com/vulnerabiliti
ewAlert.x?alertId=32567 - http://www.securitytracker.com/id/1029688 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90732 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0678 - http://osvdb.org/102558
CVE ID: CVE-2014-0679 State: PUBLISHED Published: 2014-02-27T20:00:00 Last Updated: 2024-08-06T09:27:19.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Prime Infrastructure 1.2 and 1.3 before 1.3.0.20-2, 1.4 before 1.4.0.45-2, and 2.0 before 2.0.0.0.294-2 allows remote authenticated users to execute arbitrary commands with root privileges via an unspecified URL, aka Bug ID CSCum71308. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140226-pi
CVE ID: CVE-2014-0680 State: PUBLISHED Published: 2014-01-29T16:00:00 Last Updated: 2024-08-06T09:27:18.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the HTTP control interface in the NAC Web Agent component in Cisco Identity Services Engine (ISE) allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCui15038. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=32617 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0680 - http://www.securityfocus.com/bid/65227 - http://osvdb.org/102588 - htt
enter/content/CiscoSecurityNotice/CVE-2014-0680 - http://www.securityfocus.com/bid/65227 - http://osvdb.org/102588 - http://secunia.com/advisories/56672 - http://www.securitytracker.com/id/1029701
CVE ID: CVE-2014-0681 State: PUBLISHED Published: 2014-01-29T16:00:00 Last Updated: 2024-08-06T09:27:19.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Cisco Identity Services Engine (ISE) 1.2 patch 2 and earlier allows remote attackers to inject arbitrary web script or HTML via a report containing a crafted URL that is not properly handled during generation of report-output pages, aka Bug ID CSCui15064. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0681 - http://osvdb.org/102589 - http://www.securitytracker.com/id/1029699 - http://secunia
CiscoSecurityNotice/CVE-2014-0681 - http://osvdb.org/102589 - http://www.securitytracker.com/id/1029699 - http://secunia.com/advisories/56714 - http://tools.cisco.com/security/center/viewAlert.x?alertId=32609 - http://www.securityfocus.com/bid/65183
CVE ID: CVE-2014-0682 State: PUBLISHED Published: 2014-01-29T16:00:00 Last Updated: 2024-08-06T09:27:19.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco WebEx Meetings Server allows remote authenticated users to bypass authorization checks and (1) join arbitrary meetings, or (2) terminate a meeting without having a host role, via a crafted URL, aka Bug ID CSCuj42346. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/65198 - http://www.securitytracker.com/id/1029700 - http://osvdb.org/102590 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0682 - http://secunia.com/advisories/56668 - http://tools
cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0682 - http://secunia.com/advisories/56668 - http://tools.cisco.com/security/center/viewAlert.x?alertId=32618
CVE ID: CVE-2014-0683 State: PUBLISHED Published: 2014-03-06T11:00:00 Last Updated: 2024-08-06T09:27:19.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web management interface on the Cisco RV110W firewall with firmware 1.2.0.9 and earlier, RV215W router with firmware 1.1.0.5 and earlier, and CVR100W router with firmware 1.0.1.19 and earlier does not prevent replaying of modified authentication requests, which allows remote attackers to obtain administrative access by leveraging the ability to intercept requests, aka Bug IDs CSCul94527, CSCum86264, and CSCum86275. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/conte
SCum86275. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140305-rpd - https://www.exploit-db.com/exploits/45986/
CVE ID: CVE-2014-0684 State: PUBLISHED Published: 2014-05-07T10:00:00 Last Updated: 2024-08-06T09:27:19.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco NX-OS 6.2(2) on Nexus 7000 switches allows local users to cause a denial of service via crafted sed input, aka Bug ID CSCui56136. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=34131 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0684
CVE ID: CVE-2014-0685 State: PUBLISHED Published: 2014-05-07T10:00:00 Last Updated: 2024-08-06T09:27:19.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Nexus 1000V InterCloud 5.2(1)IC1(1.2) and earlier for VMware allows remote attackers to bypass ACL deny statements via crafted (1) IGMPv2 or (2) IGMPv3 packets, aka Bug ID CSCug61691. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0685 - http://tools.cisco.com/security/center/viewAlert.x?alertId=34130