Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-5517 State: PUBLISHED Published: 2013-10-02T22:00:00 Last Updated: 2024-08-06T17:15:20.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the web framework in Cisco Unified Communications Domain Manager allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCuh96567. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/62746 - http://secunia.com/advisories/54847 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5517 - http://tools.cisco.com/security/center/viewAlert.x?alertId=31073 - http://osvdb.org/98019
CVE ID: CVE-2013-5519 State: PUBLISHED Published: 2013-10-03T10:00:00 Last Updated: 2024-08-06T17:15:20.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the management interface on Cisco Wireless LAN Controller (WLC) devices allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuf77810. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=31112 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5519 - http://www.securityfocus.com/bid/62787 - http://osvdb.org/98083 - http://secunia.com/advisories/
yNotice/CVE-2013-5519 - http://www.securityfocus.com/bid/62787 - http://osvdb.org/98083 - http://secunia.com/advisories/55171
CVE ID: CVE-2013-5521 State: PUBLISHED Published: 2013-10-25T01:00:00Z Last Updated: 2024-09-16T23:50:40.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Identity Services Engine does not properly restrict the creation of guest accounts, which allows remote attackers to cause a denial of service (exhaustion of the account supply) via a series of requests within one session, aka Bug ID CSCue94287. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5521
CVE ID: CVE-2013-5522 State: PUBLISHED Published: 2013-10-25T01:00:00Z Last Updated: 2024-09-16T19:36:51.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS on Catalyst 3750X switches has default Service Module credentials, which makes it easier for local users to gain privileges via a Service Module login, aka Bug ID CSCue92286. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5522
CVE ID: CVE-2013-5523 State: PUBLISHED Published: 2013-10-10T10:00:00 Last Updated: 2024-08-06T17:15:20.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Sponsor Portal in Cisco Identity Services Engine (ISE) 1.2 and earlier does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web site, related to a "cross-frame scripting (XFS)" issue, aka Bug ID CSCui82666. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029157 - http://osvdb.org/98168 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE
tracker.com/id/1029157 - http://osvdb.org/98168 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5523 - https://exchange.xforce.ibmcloud.com/vulnerabilities/87724 - http://www.securityfocus.com/bid/62869 - http://tools.cisco.com/security/center/viewAlert.x?alertId=31161 - http://secunia.com/advisories/55207
CVE ID: CVE-2013-5524 State: PUBLISHED Published: 2013-10-10T10:00:00 Last Updated: 2024-08-06T17:15:20.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the troubleshooting page in Cisco Identity Services Engine (ISE) 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCug77655. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029155 - http://secunia.com/advisories/55067 - http://tools.cisco.com/security/center/viewAlert.x?alertId=31159 - https://exchange.xforce.ibmcloud.com/vulnerabilities/87722 - http://tools.cis
ecurity/center/viewAlert.x?alertId=31159 - https://exchange.xforce.ibmcloud.com/vulnerabilities/87722 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5524 - http://osvdb.org/98166 - http://www.securityfocus.com/bid/62870
CVE ID: CVE-2013-5525 State: PUBLISHED Published: 2013-10-10T10:00:00 Last Updated: 2024-08-06T17:15:20.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the web framework in Cisco Identity Services Engine (ISE) 1.2 and earlier allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCug90502. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/87723 - http://www.securitytracker.com/id/1029156 - http://secunia.com/advisories/55098 - http://tools.cisco.com/security/center/viewAlert.x?alertId=31160 - http://tools.cisco.com/security/cent
visories/55098 - http://tools.cisco.com/security/center/viewAlert.x?alertId=31160 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5525 - http://osvdb.org/98167
CVE ID: CVE-2013-5526 State: PUBLISHED Published: 2013-10-10T10:00:00 Last Updated: 2024-08-06T17:15:21.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco 9900 fourth-generation IP phones do not properly perform SDP negotiation, which allows remote attackers to cause a denial of service (device reboot) via crafted SDP packets, aka Bug ID CSCuf06698. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/98254 - http://secunia.com/advisories/55231 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5526 - http://www.securityfocus.com/bid/62905
CVE ID: CVE-2013-5527 State: PUBLISHED Published: 2013-10-10T10:00:00 Last Updated: 2024-08-06T17:15:20.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OSPF functionality in Cisco IOS and IOS XE allows remote attackers to cause a denial of service (device reload) via crafted options in an LSA type 11 packet, aka Bug ID CSCui21030. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/87762 - http://osvdb.org/98253 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5527 - http://www.securityfocus.com/bid/62904
CVE ID: CVE-2013-5528 State: PUBLISHED Published: 2013-10-11T01:00:00 Last Updated: 2024-08-06T17:15:20.743Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Tomcat administrative web interface in Cisco Unified Communications Manager allows remote authenticated users to read arbitrary files via directory traversal sequences in an unspecified input string, aka Bug ID CSCui78815. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/40887/ - http://packetstormsecurity.com/files/140071/Cisco-Unified-Communications-Manager-7-8-9-Directory-Traversal.html - http://osvdb.org/98336 - http://www.security
40071/Cisco-Unified-Communications-Manager-7-8-9-Directory-Traversal.html - http://osvdb.org/98336 - http://www.securityfocus.com/bid/62960 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5528
CVE ID: CVE-2013-5529 State: PUBLISHED Published: 2013-10-16T10:00:00Z Last Updated: 2024-09-16T23:21:00.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: The deployment module in the server in Cisco WebEx Meeting Center does not properly validate the passphrase, which allows remote attackers to launch a deployment or cause a denial of service (deployment interruption) via a direct request, aka Bug ID CSCuf52200. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5529
CVE ID: CVE-2013-5530 State: PUBLISHED Published: 2013-10-25T01:00:00 Last Updated: 2024-08-06T17:15:20.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web framework in Cisco Identity Services Engine (ISE) 1.0 and 1.1.0 before 1.1.0.665-5, 1.1.1 before 1.1.1.268-7, 1.1.2 before 1.1.2.145-10, 1.1.3 before 1.1.3.124-7, 1.1.4 before 1.1.4.218-7, and 1.2 before 1.2.0.899-2 allows remote authenticated users to execute arbitrary commands via a crafted session on TCP port 443, aka Bug ID CSCuh81511. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/952422 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa
- http://www.kb.cert.org/vuls/id/952422 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131023-ise
CVE ID: CVE-2013-5531 State: PUBLISHED Published: 2013-10-25T01:00:00Z Last Updated: 2024-09-16T17:58:57.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Identity Services Engine (ISE) 1.x before 1.1.1 allows remote attackers to bypass authentication, and read support-bundle configuration and credentials data, via a crafted session on TCP port 443, aka Bug ID CSCty20405. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131023-ise
CVE ID: CVE-2013-5532 State: PUBLISHED Published: 2013-10-11T01:00:00Z Last Updated: 2024-09-16T19:40:51.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the web-application interface on Cisco 9900 IP phones allows remote attackers to cause a denial of service (webapp interface outage) via long values in unspecified fields, aka Bug ID CSCuh10343. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/62944 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5532 - http://osvdb.org/98338 - http://secunia.com/advisories/55275
CVE ID: CVE-2013-5533 State: PUBLISHED Published: 2013-10-11T01:00:00Z Last Updated: 2024-09-16T18:48:37.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: The image-upgrade functionality on Cisco 9900 Unified IP phones allows local users to gain privileges by placing shell commands in an unspecified parameter, aka Bug ID CSCuh10334. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5533 - http://www.securityfocus.com/bid/62943 - http://osvdb.org/98337
CVE ID: CVE-2013-5534 State: PUBLISHED Published: 2013-10-19T10:00:00Z Last Updated: 2024-09-17T00:36:13.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the attachment service in the Voice Message Web Service (aka VMWS or Cisco Unity Web Service) in Cisco Unity Connection allows remote authenticated users to create files, and consequently execute arbitrary JSP code, via a crafted pathname for a file that is not a valid audio file, aka Bug ID CSCuj22948. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5534
CVE ID: CVE-2013-5535 State: PUBLISHED Published: 2013-10-16T10:00:00Z Last Updated: 2024-09-16T19:20:37.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: The analytics page on Cisco Video Surveillance 4000 IP cameras has hardcoded credentials, which allows remote attackers to watch the video feed by leveraging knowledge of the password, aka Bug IDs CSCuj70402 and CSCuj70419. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5535
CVE ID: CVE-2013-5536 State: PUBLISHED Published: 2013-10-24T10:00:00Z Last Updated: 2024-09-16T22:02:15.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Secure Access Control System (ACS) does not properly implement an incoming-packet firewall rule, which allows remote attackers to cause a denial of service (process crash) via a flood of crafted packets, aka Bug ID CSCui51521. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5536
CVE ID: CVE-2013-5537 State: PUBLISHED Published: 2013-10-24T10:00:00Z Last Updated: 2024-09-16T22:41:10.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web framework on Cisco Web Security Appliance (WSA), Email Security Appliance (ESA), and Content Security Management Appliance (SMA) devices does not properly manage the state of HTTP and HTTPS sessions, which allows remote attackers to cause a denial of service (management GUI outage) via multiple TCP connections, aka Bug IDs CSCuj59411, CSCuf89818, and CSCuh05635. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5537
CVE ID: CVE-2013-5538 State: PUBLISHED Published: 2013-10-16T10:00:00Z Last Updated: 2024-09-17T02:42:28.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Sponsor Portal in Cisco Identity Services Engine (ISE) uses weak permissions for uploaded files, which allows remote attackers to read arbitrary files via a direct request, aka Bug ID CSCui67506. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5538
CVE ID: CVE-2013-5539 State: PUBLISHED Published: 2013-10-16T10:00:00Z Last Updated: 2024-09-16T18:54:33.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: The upload-dialog implementation in Cisco Identity Services Engine (ISE) allows remote authenticated users to upload files with an arbitrary file type, and consequently conduct attacks against unspecified other systems, via a crafted file, aka Bug ID CSCui67511. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5539
CVE ID: CVE-2013-5540 State: PUBLISHED Published: 2013-10-16T10:00:00Z Last Updated: 2024-09-17T01:20:35.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: The file-upload feature in Cisco Identity Services Engine (ISE) allows remote authenticated users to cause a denial of service (disk consumption and administration-interface outage) by uploading many files, aka Bug ID CSCui67519. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5540
CVE ID: CVE-2013-5541 State: PUBLISHED Published: 2013-10-16T10:00:00Z Last Updated: 2024-09-16T22:09:16.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the file-upload interface in Cisco Identity Services Engine (ISE) allows remote authenticated users to inject arbitrary web script or HTML via a crafted filename, aka Bug ID CSCui67495. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5541
CVE ID: CVE-2013-5542 State: PUBLISHED Published: 2013-10-21T10:00:00Z Last Updated: 2024-09-17T01:21:13.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Adaptive Security Appliance (ASA) Software 8.4 before 8.4(7.2), 8.7 before 8.7(1.8), 9.0 before 9.0(3.6), and 9.1 before 9.1(2.8) allows remote attackers to cause a denial of service (firewall-session disruption or device reload) via crafted ICMP packets, aka Bug ID CSCui77398. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131009-asa
CVE ID: CVE-2013-5543 State: PUBLISHED Published: 2013-10-31T21:00:00Z Last Updated: 2024-09-16T22:30:30.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS XE 3.4 before 3.4.2S and 3.5 before 3.5.1S on 1000 ASR devices allows remote attackers to cause a denial of service (device reload) via malformed ICMP error packets associated with a (1) TCP or (2) UDP session that is under inspection by the Zone-Based Firewall (ZBFW) component, aka Bug ID CSCtt26470. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131030-asr1000
CVE ID: CVE-2013-5544 State: PUBLISHED Published: 2013-10-22T10:00:00Z Last Updated: 2024-09-17T02:21:58.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: The VPN authentication functionality in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to cause a denial of service (device reload) by sending many username-from-cert IKE requests, aka Bug ID CSCua91108. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5544
CVE ID: CVE-2013-5545 State: PUBLISHED Published: 2013-10-31T21:00:00Z Last Updated: 2024-09-17T04:25:33.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PPTP ALG implementation in Cisco IOS XE 3.9 before 3.9.2S on 1000 ASR devices allows remote attackers to cause a denial of service (device reload) by sending many PPTP packets over NAT, aka Bug ID CSCuh19936. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131030-asr1000
CVE ID: CVE-2013-5546 State: PUBLISHED Published: 2013-10-31T21:00:00Z Last Updated: 2024-09-17T03:27:22.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TCP reassembly feature in Cisco IOS XE 3.7 before 3.7.3S and 3.8 before 3.8.1S on 1000 ASR devices allows remote attackers to cause a denial of service (device reload) via large TCP packets that are processed by the (1) NAT or (2) ALG component, aka Bug ID CSCud72509. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131030-asr1000
CVE ID: CVE-2013-5547 State: PUBLISHED Published: 2013-10-31T21:00:00Z Last Updated: 2024-09-16T19:50:44.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS XE 3.9 before 3.9.2S on 1000 ASR devices allows remote attackers to cause a denial of service (device reload) by sending malformed EoGRE packets over (1) IPv4 or (2) IPv6, aka Bug ID CSCuf08269. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131030-asr1000
CVE ID: CVE-2013-5548 State: PUBLISHED Published: 2013-11-01T01:00:00Z Last Updated: 2024-09-17T04:14:52.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IKEv2 implementation in Cisco IOS, when AES-GCM or AES-GMAC is used, allows remote attackers to bypass certain IPsec anti-replay features via IPsec tunnel traffic, aka Bug ID CSCuj47795. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5548
CVE ID: CVE-2013-5549 State: PUBLISHED Published: 2013-10-25T01:00:00Z Last Updated: 2024-09-16T19:40:30.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS XR 3.8.1 through 4.2.0 does not properly process fragmented packets within the RP-A, RP-B, PRP, and DRP-B route-processor components, which allows remote attackers to cause a denial of service (transmission outage) via (1) IPv4 or (2) IPv6 traffic, aka Bug ID CSCuh30380. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131023-iosxr
CVE ID: CVE-2013-5550 State: PUBLISHED Published: 2013-10-22T10:00:00Z Last Updated: 2024-09-17T01:06:51.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: The fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to cause a denial of service via crafted command parameters that trigger hardware-component write operations, aka Bug ID CSCtq86549. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5550
CVE ID: CVE-2013-5551 State: PUBLISHED Published: 2013-11-01T01:00:00Z Last Updated: 2024-09-16T16:48:52.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Adaptive Security Appliance (ASA) Software, when certain same-security-traffic and management-access options are enabled, allows remote authenticated users to cause a denial of service (stack overflow and device reload) by using the clientless SSL VPN portal for internal-resource browsing, aka Bug ID CSCui51199. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5551
CVE ID: CVE-2013-5552 State: PUBLISHED Published: 2013-11-13T15:00:00Z Last Updated: 2024-09-17T03:13:24.773Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 12.4(24)MDB9 and earlier on Content Services Gateway (CSG) devices does not properly implement the "parse error drop" feature, which allows remote attackers to bypass intended access restrictions via a crafted series of packets, aka Bug ID CSCug90143. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=31715 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5552
CVE ID: CVE-2013-5553 State: PUBLISHED Published: 2013-11-08T02:00:00Z Last Updated: 2024-09-16T17:52:48.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple memory leaks in Cisco IOS 15.1 before 15.1(4)M7 allow remote attackers to cause a denial of service (memory consumption or device reload) by sending a crafted SIP message over (1) IPv4 or (2) IPv6, aka Bug IDs CSCuc42558 and CSCug25383. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131106-sip
CVE ID: CVE-2013-5554 State: PUBLISHED Published: 2013-11-08T02:00:00Z Last Updated: 2024-09-16T16:57:51.654Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the web-management interface in the server in Cisco Wide Area Application Services (WAAS) Mobile before 3.5.5 allows remote attackers to upload and execute arbitrary files via a crafted POST request, aka Bug ID CSCuh69773. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131106-waasm
CVE ID: CVE-2013-5555 State: PUBLISHED Published: 2013-11-01T01:00:00Z Last Updated: 2024-09-16T16:28:12.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Unified Communications Manager (aka CUCM or Unified CM) allows remote attackers to cause a denial of service (service restart) via a crafted SIP message, aka Bug ID CSCub54349. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5555
CVE ID: CVE-2013-5556 State: PUBLISHED Published: 2013-11-16T02:00:00Z Last Updated: 2024-09-17T01:36:02.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: The license-installation module on the Cisco Nexus 1000V switch 4.2(1)SV1(5.2b) and earlier for VMware vSphere, Cisco Nexus 1000V switch 5.2(1)SM1(5.1) for Microsoft Hyper-V, and Cisco Virtual Security Gateway 4.2(1)VSG1(1) for Nexus 1000V switches allows local users to gain privileges and execute arbitrary commands via crafted "install all iso" arguments, aka Bug ID CSCui21340. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5556 - h
VE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5556 - http://tools.cisco.com/security/center/viewAlert.x?alertId=31774