Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ity by convincing a user to access a malicious link or by intercepting a user request and injecting malicious code into the request. An exploit could allow the attacker to execute arbitrary script code in the context of the affected site or allow the attacker to access sensitive browser-based information. Cisco Bug IDs: CSCvd76324. Known Affected Releases: 2.2(9.76) and 2.3(1). Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-esc2 - http://www.securityfocus.com/bid/100370
CVE ID: CVE-2017-6777 State: PUBLISHED Published: 2017-08-17T20:00:00Z Last Updated: 2024-09-16T20:22:56.802Z Vendors: Cisco Systems, Inc. Products: Elastic Services Controller Problem Types: Information Disclosure Description: A vulnerability in the ConfD server of the Cisco Elastic Services Controller (ESC) could allow an authenticated, remote attacker to acquire sensitive system information. The vulnerability is due to insufficient protection of sensitive files on the system. An attacker could exploit this vulnerability by logging into the ConfD server and executing certain commands. An exploit could allow an unprivileged user to view configuration parameters that can be maliciously used.
ain commands. An exploit could allow an unprivileged user to view configuration parameters that can be maliciously used. Cisco Bug IDs: CSCvd76409. Known Affected Releases: 2.3, 2.3(2). Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-esc3 - http://www.securityfocus.com/bid/100390
CVE ID: CVE-2017-6778 State: PUBLISHED Published: 2017-08-17T20:00:00Z Last Updated: 2024-09-16T18:19:17.786Z Vendors: Cisco Systems, Inc. Products: Ultra Services Platform Problem Types: Information Disclosure Description: A vulnerability in the Elastic Services Controller (ESC) web interface of the Cisco Ultra Services Platform could allow an authenticated, remote attacker to acquire sensitive information. The vulnerability is due to the transmission of sensitive information as part of a GET request. An attacker could exploit this vulnerability by sending a GET request to a vulnerable device. An exploit could allow the attacker to view information regarding the Ultra Services Platform depl
a vulnerable device. An exploit could allow the attacker to view information regarding the Ultra Services Platform deployment. Cisco Bug IDs: CSCvd76406. Known Affected Releases: 21.0.v0.65839. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100380 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-usp
CVE ID: CVE-2017-6779 State: PUBLISHED Published: 2018-06-07T12:00:00 Last Updated: 2024-11-29T15:07:21.731Z Vendors: n/a Products: Multiple Cisco Products unknown Problem Types: CWE-399 Description: Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration products that could allow an unauthenticated, remote attacker to cause high disk utilization, resulting in a denial of service (DoS) condition. The vulnerability occurs because a certain system log file does not have a maximum size restriction. Therefore, the file is allowed to consume the majority of available disk space on the appliance. An attacker could exploit
erefore, the file is allowed to consume the majority of available disk space on the appliance. An attacker could exploit this vulnerability by sending crafted remote connection requests to the appliance. Successful exploitation could allow the attacker to increase the size of a system log file so that it consumes most of the disk space. The lack of available disk space could lead to a DoS condition in which the application functions could operate abnormally, making the appliance unstable. This vulnerability affects the following Cisco Voice Operating System (VOS)-based products: Emergency Responder, Finesse, Hosted Collaboration Mediation Fulfillment, MediaSense, Prime License Manager, Socia
ucts: Emergency Responder, Finesse, Hosted Collaboration Mediation Fulfillment, MediaSense, Prime License Manager, SocialMiner, Unified Communications Manager (UCM), Unified Communications Manager IM and Presence Service (IM&P - earlier releases were known as Cisco Unified Presence), Unified Communication Manager Session Management Edition (SME), Unified Contact Center Express (UCCx), Unified Intelligence Center (UIC), Unity Connection, Virtualized Voice Browser. This vulnerability also affects Prime Collaboration Assurance and Prime Collaboration Provisioning. Cisco Bug IDs: CSCvd10872, CSCvf64322, CSCvf64332, CSCvi29538, CSCvi29543, CSCvi29544, CSCvi29546, CSCvi29556, CSCvi29571, CSCvi3173
s: CSCvd10872, CSCvf64322, CSCvf64332, CSCvi29538, CSCvi29543, CSCvi29544, CSCvi29546, CSCvi29556, CSCvi29571, CSCvi31738, CSCvi31741, CSCvi31762, CSCvi31807, CSCvi31818, CSCvi31823. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-diskdos
CVE ID: CVE-2017-6780 State: PUBLISHED Published: 2017-09-07T21:00:00 Last Updated: 2024-08-05T15:41:17.290Z Vendors: n/a Products: Cisco IoT Field Network Director Problem Types: CWE-399 Description: A vulnerability in the TCP throttling process for Cisco IoT Field Network Director (IoT-FND) could allow an unauthenticated, remote attacker to cause the system to consume additional memory, eventually forcing the device to restart, aka Memory Exhaustion. The vulnerability is due to insufficient rate-limiting protection. An attacker could exploit this vulnerability by sending a high rate of TCP packets to a specific group of open listening ports on a targeted device. An exploit could allow the
a high rate of TCP packets to a specific group of open listening ports on a targeted device. An exploit could allow the attacker to cause the system to consume additional memory. If enough available memory is consumed, the system will restart, creating a temporary denial of service (DoS) condition. The DoS condition will end after the device has finished the restart process. This vulnerability affects the following Cisco products: Connected Grid Network Management System, if running a software release prior to IoT-FND Release 4.0; IoT Field Network Director, if running a software release prior to IoT-FND Release 4.0. Cisco Bug IDs: CSCvc77164. Additional Analyst Notes: - CVE Program Containe
ftware release prior to IoT-FND Release 4.0. Cisco Bug IDs: CSCvc77164. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-fnd - http://www.securityfocus.com/bid/100641
CVE ID: CVE-2017-6781 State: PUBLISHED Published: 2017-08-17T20:00:00Z Last Updated: 2024-09-17T02:15:39.209Z Vendors: Cisco Systems, Inc. Products: Policy Suite Problem Types: Privilege Escalation Description: A vulnerability in the management of shell user accounts for Cisco Policy Suite (CPS) Software for CPS appliances could allow an authenticated, local attacker to gain elevated privileges on an affected system. The affected privilege level is not at the root level. The vulnerability is due to incorrect role-based access control (RBAC) for shell user accounts. An attacker could exploit this vulnerability by authenticating to an affected appliance and providing crafted user input via the
ker could exploit this vulnerability by authenticating to an affected appliance and providing crafted user input via the CLI. A successful exploit could allow the attacker to acquire a higher privilege level than should have been granted. To exploit this vulnerability, the attacker must log in to the appliance with valid credentials. Cisco Bug IDs: CSCve37724. Known Affected Releases: 9.0.0, 9.1.0, 10.0.0, 11.0.0, 12.0.0. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100365 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-cps
CVE ID: CVE-2017-6782 State: PUBLISHED Published: 2017-08-17T20:00:00Z Last Updated: 2024-09-16T16:28:15.231Z Vendors: Cisco Systems, Inc. Products: Prime Infrastructure Problem Types: HTML injection Description: A vulnerability in the administrative web interface of Cisco Prime Infrastructure could allow an authenticated, remote attacker to modify a page in the web interface of the affected application. The vulnerability is due to improper sanitization of parameter values by the affected application. An attacker could exploit this vulnerability by injecting malicious code into an affected parameter and persuading a user to access a web page that triggers the rendering of the injected code.
into an affected parameter and persuading a user to access a web page that triggers the rendering of the injected code. Cisco Bug IDs: CSCve47074. Known Affected Releases: 3.2(0.0). Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039189 - http://www.securityfocus.com/bid/100366 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-cpi
CVE ID: CVE-2017-6783 State: PUBLISHED Published: 2017-08-17T20:00:00Z Last Updated: 2024-09-16T19:14:34.884Z Vendors: Cisco Systems, Inc. Products: Web Security Appliance (WSA), Email Security Appliance (ESA), Content Security Management Appliance (SMA) Problem Types: Information Disclosure Description: A vulnerability in SNMP polling for the Cisco Web Security Appliance (WSA), Email Security Appliance (ESA), and Content Security Management Appliance (SMA) could allow an authenticated, remote attacker to discover confidential information about the appliances that should be available only to an administrative user. The vulnerability occurs because the appliances do not protect confidential i
available only to an administrative user. The vulnerability occurs because the appliances do not protect confidential information at rest in response to Simple Network Management Protocol (SNMP) poll requests. An attacker could exploit this vulnerability by doing a crafted SNMP poll request to the targeted security appliance. An exploit could allow the attacker to discover confidential information that should be restricted, and the attacker could use this information to conduct additional reconnaissance. The attacker must know the configured SNMP community string to exploit this vulnerability. Cisco Bug IDs: CSCve26106, CSCve26202, CSCve26224. Known Affected Releases: 10.0.0-230 (Web Securi
t this vulnerability. Cisco Bug IDs: CSCve26106, CSCve26202, CSCve26224. Known Affected Releases: 10.0.0-230 (Web Security Appliance), 9.7.2-065 (Email Security Appliance), and 10.1.0-037 (Content Security Management Appliance). Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039187 - http://www.securityfocus.com/bid/100387 - http://www.securitytracker.com/id/1039186 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-csa - http://www.securitytracker.com/id/1039188
CVE ID: CVE-2017-6784 State: PUBLISHED Published: 2017-08-17T20:00:00Z Last Updated: 2024-09-16T18:23:26.133Z Vendors: Cisco Systems, Inc. Products: RV340, RV345, and RV345P Dual WAN Gigabit VPN Routers Problem Types: Information Disclosure Description: A vulnerability in the web interface of the Cisco RV340, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an unauthenticated, remote attacker to access sensitive data. The attacker could use this information to conduct additional reconnaissance attacks. The vulnerability is due to Cisco WebEx Meetings not sufficiently protecting sensitive data when responding to an HTTP request to the web interface. An attacker could exploit the vul
tly protecting sensitive data when responding to an HTTP request to the web interface. An attacker could exploit the vulnerability by attempting to use the HTTP protocol and looking at the data in the HTTP responses from the Cisco WebEx Meetings Server. An exploit could allow the attacker to find sensitive information about the application. Cisco Bug IDs: CSCve37988. Known Affected Releases: firmware 1.0.0.30, 1.0.0.33, 1.0.1.9, 1.0.1.16. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-crr - http://www.securitytracker.com/id/1039191 - http://www.securityfocus.com/bid/100402
CVE ID: CVE-2017-6785 State: PUBLISHED Published: 2017-08-17T20:00:00Z Last Updated: 2024-09-17T03:18:55.237Z Vendors: Cisco Systems, Inc. Products: Unified Communications Manager Problem Types: Privilege Escalation Description: A vulnerability in configuration modification permissions validation for Cisco Unified Communications Manager could allow an authenticated, remote attacker to perform a horizontal privilege escalation where one user can modify another user's configuration. The vulnerability is due to lack of proper Role Based Access Control (RBAC) when certain user configuration changes are requested. An attacker could exploit this vulnerability by sending an authenticated, crafted H
configuration changes are requested. An attacker could exploit this vulnerability by sending an authenticated, crafted HTTP request to the targeted application. An exploit could allow the attacker to impact the integrity of the application where one user can modify the configuration of another user's information. Cisco Bug IDs: CSCve27331. Known Affected Releases: 10.5(2.10000.5), 11.0(1.10000.10), 11.5(1.10000.6). Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039184 - http://www.securityfocus.com/bid/100375 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-ucm
CVE ID: CVE-2017-6786 State: PUBLISHED Published: 2017-08-17T20:00:00Z Last Updated: 2024-09-17T02:42:15.704Z Vendors: Cisco Systems, Inc. Products: Elastic Services Controller Problem Types: Information Disclosure Description: A vulnerability in Cisco Elastic Services Controller could allow an authenticated, local, unprivileged attacker to access sensitive information, including credentials for system accounts, on an affected system. The vulnerability is due to improper protection of sensitive log files. An attacker could exploit this vulnerability by logging in to an affected system and accessing unprotected log files. A successful exploit could allow the attacker to access sensitive log f
cted system and accessing unprotected log files. A successful exploit could allow the attacker to access sensitive log files, which may include system credentials, on the affected system. Cisco Bug IDs: CSCvc76616. Known Affected Releases: 2.2(9.76). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100391 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-esc4
CVE ID: CVE-2017-6788 State: PUBLISHED Published: 2017-08-17T20:00:00Z Last Updated: 2024-09-16T16:28:14.664Z Vendors: Cisco Systems, Inc. Products: AnyConnect WebLaunch Problem Types: Cross-Site Scripting Description: The WebLaunch functionality of Cisco AnyConnect Secure Mobility Client Software contains a vulnerability that could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the affected software. The vulnerability is due to insufficient input validation of some parameters that are passed to the WebLaunch function of the affected software. An attacker could exploit this vulnerability by convincing a user to access a malicious li
ion of the affected software. An attacker could exploit this vulnerability by convincing a user to access a malicious link or by intercepting a user request and injecting malicious code into the request. Cisco Bug IDs: CSCvf12055. Known Affected Releases: 98.89(40). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100364 - http://www.securitytracker.com/id/1039190 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-caw
CVE ID: CVE-2017-6789 State: PUBLISHED Published: 2017-09-07T21:00:00 Last Updated: 2024-08-05T15:41:17.510Z Vendors: n/a Products: Cisco Unified Intelligence Center Problem Types: CWE-79 Description: A vulnerability in the Cisco Unified Intelligence Center web interface could allow an unauthenticated, remote attacker to impact the integrity of the system by executing a Document Object Model (DOM)-based, environment or client-side cross-site scripting (XSS) attack. The vulnerability occurs because user-supplied data in the DOM input is not validated. An attacker could exploit this vulnerability by sending crafted URLs that contain malicious DOM statements to the affected system. A successful
it this vulnerability by sending crafted URLs that contain malicious DOM statements to the affected system. A successful exploit could allow the attacker to affect the integrity of the system by manipulating the database. Known Affected Releases 11.0(1)ES10. Cisco Bug IDs: CSCvf18325. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039278 - http://www.securityfocus.com/bid/100646 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-cuic - https://quickview.cloudapps.cisco.com/quickview/bug/CSCvf18325
CVE ID: CVE-2017-6790 State: PUBLISHED Published: 2017-08-17T20:00:00Z Last Updated: 2024-09-16T23:56:09.789Z Vendors: Cisco Systems, Inc. Products: TelePresence Video Communication Server (VCS) Problem Types: Denial of Service Description: A vulnerability in the Session Initiation Protocol (SIP) on the Cisco TelePresence Video Communication Server (VCS) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on the targeted appliance. The vulnerability is due to excessive SIP traffic sent to the device. An attacker could exploit this vulnerability by transmitting large volumes of SIP traffic to the VCS. An exploit could allow the attacker to cause a comp
lnerability by transmitting large volumes of SIP traffic to the VCS. An exploit could allow the attacker to cause a complete DoS condition on the targeted system. Cisco Bug IDs: CSCve32897. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100369 - http://www.securitytracker.com/id/1039185 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-vcs
CVE ID: CVE-2017-6791 State: PUBLISHED Published: 2017-09-07T21:00:00 Last Updated: 2024-08-05T15:41:17.525Z Vendors: n/a Products: Cisco Unified Communications Manager Problem Types: CWE-119 Description: A vulnerability in the Trust Verification Service (TVS) of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper handling of Transport Layer Security (TLS) traffic by the affected software. An attacker could exploit this vulnerability by generating incomplete traffic streams. A successful exploit could allow the attacker to deny access to the TVS for an aff
enerating incomplete traffic streams. A successful exploit could allow the attacker to deny access to the TVS for an affected device, resulting in a DoS condition, until an administrator restarts the service. Known Affected Releases 10.0(1.10000.24) 10.5(2.10000.5) 11.0(1.10000.10) 9.1(2.10000.28). Cisco Bug IDs: CSCux21905. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-ucm - http://www.securitytracker.com/id/1039286 - https://quickview.cloudapps.cisco.com/quickview/bug/CSCux21905 - http://www.securityfocus.com/bid/100662
CVE ID: CVE-2017-6792 State: PUBLISHED Published: 2017-09-07T21:00:00 Last Updated: 2024-08-05T15:41:17.522Z Vendors: n/a Products: Cisco Prime Collaboration Provisioning Tool Problem Types: CWE-20 Description: A vulnerability in the batch provisioning feature in Cisco Prime Collaboration Provisioning Tool could allow an authenticated, remote attacker to overwrite system files as root. The vulnerability is due to lack of input validation of the parameters in BatchFileName and Directory. An attacker could exploit this vulnerability by manipulating the parameters of the batch action file function. Cisco Bug IDs: CSCvd61766. Additional Analyst Notes: - CVE Program Container: References: - http:
action file function. Cisco Bug IDs: CSCvd61766. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039279 - http://www.securityfocus.com/bid/100666 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-pcpt
CVE ID: CVE-2017-6793 State: PUBLISHED Published: 2017-09-07T21:00:00 Last Updated: 2024-08-05T15:41:17.508Z Vendors: n/a Products: Cisco Prime Collaboration Provisioning Tool Problem Types: CWE-200 Description: A vulnerability in the Inventory Management feature of Cisco Prime Collaboration Provisioning Tool could allow an authenticated, remote attacker to view sensitive information on the system. The vulnerability is due to insufficient protection of restricted information. An attacker could exploit this vulnerability by accessing unauthorized information via the user interface. Cisco Bug IDs: CSCvd61932. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.
erface. Cisco Bug IDs: CSCvd61932. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-pcpt1 - http://www.securitytracker.com/id/1039280
CVE ID: CVE-2017-6794 State: PUBLISHED Published: 2017-09-07T21:00:00 Last Updated: 2024-08-05T15:41:17.514Z Vendors: n/a Products: Cisco Meeting Server Problem Types: CWE-20 Description: A vulnerability in the CLI command-parsing code of Cisco Meeting Server could allow an authenticated, local attacker to perform command injection and escalate their privileges to root. The attacker must first authenticate to the application with valid administrator credentials. The vulnerability is due to insufficient validation of user-supplied input at the CLI for certain commands. An attacker could exploit this vulnerability by authenticating to the affected application and submitting a crafted CLI comma
tacker could exploit this vulnerability by authenticating to the affected application and submitting a crafted CLI command for execution at the Cisco Meeting Server CLI. An exploit could allow the attacker to perform command injection and escalate their privilege level to root. Vulnerable Products: This vulnerability exists in Cisco Meeting Server software versions prior to and including 2.0, 2.1, and 2.2. Cisco Bug IDs: CSCvf53830. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170823-cms - http://www.securitytracker.com/id/1039245 - http://www.securityfocus.com/bid/100464
CVE ID: CVE-2017-6795 State: PUBLISHED Published: 2017-09-07T21:00:00 Last Updated: 2024-08-05T15:41:17.539Z Vendors: n/a Products: Cisco IOS XE Problem Types: CWE-20 Description: A vulnerability in the USB-modem code of Cisco IOS XE Software running on Cisco ASR 920 Series Aggregation Services Routers could allow an authenticated, local attacker to overwrite arbitrary files on the underlying operating system of an affected device. The vulnerability is due to improper input validation of the platform usb modem command in the CLI of the affected software. An attacker could exploit this vulnerability by modifying the platform usb modem command in the CLI of an affected device. A successful exp