Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-1350 State: PUBLISHED Published: 2016-03-26T01:00:00 Last Updated: 2024-08-05T22:55:14.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 15.3 and 15.4, Cisco IOS XE 3.8 through 3.11, and Cisco Unified Communications Manager allow remote attackers to cause a denial of service (device reload) via malformed SIP messages, aka Bug ID CSCuj23293. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035421 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160323-sip - http://www.securityfocus.com/bid/85372 - http://www.securitytracker.com/id/1035420
CVE ID: CVE-2016-1351 State: PUBLISHED Published: 2016-03-26T01:00:00 Last Updated: 2024-08-05T22:55:14.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Locator/ID Separation Protocol (LISP) implementation in Cisco IOS 15.1 and 15.2 and NX-OS 4.1 through 6.2 allows remote attackers to cause a denial of service (device reload) via a crafted header in a packet, aka Bug ID CSCuu64279. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035384 - http://www.securitytracker.com/id/1035383 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160323-lisp
CVE ID: CVE-2016-1352 State: PUBLISHED Published: 2016-04-14T01:00:00 Last Updated: 2024-08-05T22:55:14.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Unified Computing System (UCS) Central Software 1.3(1b) and earlier allows remote attackers to execute arbitrary OS commands via a crafted HTTP request, aka Bug ID CSCuv33856. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035565 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160413-ucs
CVE ID: CVE-2016-1353 State: PUBLISHED Published: 2016-03-01T02:00:00 Last Updated: 2024-08-05T22:55:14.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TCP implementation in Cisco Videoscape Distribution Suite for Internet Streaming (VDS-IS) 3.3(0), 3.3(1), 4.0(0), and 4.1(0) does not properly initiate new TCP sessions when a previous session is in a FIN wait state, which allows remote attackers to cause a denial of service (TCP outage) via vectors involving FIN packets, aka Bug ID CSCuy45136. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035123 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cis
: - http://www.securitytracker.com/id/1035123 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160226-vds-is
CVE ID: CVE-2016-1354 State: PUBLISHED Published: 2016-03-03T15:00:00 Last Updated: 2024-08-05T22:55:14.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Cisco Unified Communications Domain Manager (UCDM) 8.x before 8.1.1 allows remote attackers to inject arbitrary web script or HTML via crafted markup data, aka Bug ID CSCud41176. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-cucdm
CVE ID: CVE-2016-1355 State: PUBLISHED Published: 2016-03-03T15:00:00 Last Updated: 2024-08-05T22:55:14.037Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Device Management UI in the management interface in Cisco FireSIGHT System Software 6.1.0 allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCuy41687. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035188 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-FireSIGHT
CVE ID: CVE-2016-1356 State: PUBLISHED Published: 2016-03-03T22:00:00 Last Updated: 2024-08-05T22:55:14.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco FireSIGHT System Software 6.1.0 does not use a constant-time algorithm for verifying credentials, which makes it easier for remote attackers to enumerate valid usernames by measuring timing differences, aka Bug ID CSCuy41615. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-FireSIGHT1 - http://www.securitytracker.com/id/1035189
CVE ID: CVE-2016-1357 State: PUBLISHED Published: 2016-03-03T22:00:00 Last Updated: 2024-08-05T22:55:14.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: The password-management administration component in Cisco Policy Suite (CPS) 7.0.1.3, 7.0.2, 7.0.2-att, 7.0.3-att, 7.0.4-att, and 7.5.0 allows remote attackers to bypass intended RBAC restrictions and read unspecified data via unknown vectors, aka Bug ID CSCut85211. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-psc
CVE ID: CVE-2016-1358 State: PUBLISHED Published: 2016-03-03T22:00:00 Last Updated: 2024-08-05T22:55:14.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Prime Infrastructure 2.2, 3.0, and 3.1(0.0) allows remote authenticated users to read arbitrary files or cause a denial of service via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka Bug ID CSCuw81497. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035181 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-cpi
CVE ID: CVE-2016-1359 State: PUBLISHED Published: 2016-03-03T22:00:00 Last Updated: 2024-08-05T22:55:14.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Prime Infrastructure 3.0 allows remote authenticated users to execute arbitrary code via a crafted HTTP request that is mishandled during viewing of a log file, aka Bug ID CSCuw81494. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-cpi1 - http://www.securitytracker.com/id/1035186
CVE ID: CVE-2016-1360 State: PUBLISHED Published: 2016-03-12T02:00:00 Last Updated: 2024-08-05T22:55:14.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Prime LAN Management Solution (LMS) through 4.2.5 uses the same database decryption key across different customers' installations, which allows local users to obtain cleartext data by leveraging console connectivity, aka Bug ID CSCuw85390. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160310-prime-lms - http://www.securitytracker.com/id/1035313
CVE ID: CVE-2016-1361 State: PUBLISHED Published: 2016-03-12T02:00:00 Last Updated: 2024-08-05T22:55:14.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS XR through 4.3.2 on Gigabit Switch Router (GSR) 12000 devices does not properly check for a Bidirectional Forwarding Detection (BFD) header in a UDP packet, which allows remote attackers to cause a denial of service (line-card restart) via a crafted packet, aka Bug ID CSCuw56900. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035314 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160311-gsr
CVE ID: CVE-2016-1362 State: PUBLISHED Published: 2016-04-21T10:00:00 Last Updated: 2024-08-05T22:55:14.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco AireOS 4.1 through 7.4.120.0, 7.5.x, and 7.6.100.0 on Wireless LAN Controller (WLC) devices allows remote attackers to cause a denial of service (device reload) via a crafted HTTP request, aka Bug ID CSCun86747. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160420-wlc - http://www.securitytracker.com/id/1035634
CVE ID: CVE-2016-1363 State: PUBLISHED Published: 2016-04-21T10:00:00 Last Updated: 2024-08-05T22:55:14.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the redirection functionality in Cisco Wireless LAN Controller (WLC) Software 7.2 through 7.4 before 7.4.140.0(MD) and 7.5 through 8.0 before 8.0.115.0(ED) allows remote attackers to execute arbitrary code via a crafted HTTP request, aka Bug ID CSCus25617. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035633 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160420-htrd
CVE ID: CVE-2016-1364 State: PUBLISHED Published: 2016-04-21T10:00:00 Last Updated: 2024-08-05T22:55:14.097Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Wireless LAN Controller (WLC) Software 7.4 before 7.4.130.0(MD) and 7.5, 7.6, and 8.0 before 8.0.110.0(ED) allows remote attackers to cause a denial of service (device reload) via crafted Bonjour traffic, aka Bug ID CSCur66908. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160420-bdos - http://www.securitytracker.com/id/1035632
CVE ID: CVE-2016-1365 State: PUBLISHED Published: 2016-08-18T19:00:00 Last Updated: 2024-08-05T22:55:14.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Grapevine update process in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.0 allows remote authenticated users to execute arbitrary commands as root via a crafted upgrade parameter, aka Bug ID CSCux15507. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92507 - http://www.securitytracker.com/id/1036634 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160817-apic
CVE ID: CVE-2016-1366 State: PUBLISHED Published: 2016-03-24T22:00:00 Last Updated: 2024-08-05T22:55:14.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SCP and SFTP modules in Cisco IOS XR 5.0.0 through 5.2.5 on Network Convergence System 6000 devices use weak permissions for system files, which allows remote authenticated users to cause a denial of service (overwrite) via unspecified vectors, aka Bug ID CSCuw75848. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160323-ncs - http://www.securitytracker.com/id/1035407
CVE ID: CVE-2016-1367 State: PUBLISHED Published: 2016-04-21T10:00:00 Last Updated: 2024-08-05T22:55:14.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DHCPv6 relay implementation in Cisco Adaptive Security Appliance (ASA) Software 9.4.1 allows remote attackers to cause a denial of service (device reload) via crafted DHCPv6 packets, aka Bug ID CSCus23248. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035635 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160420-asa-dhcpv6
CVE ID: CVE-2016-1368 State: PUBLISHED Published: 2016-05-05T21:00:00 Last Updated: 2024-08-05T22:55:14.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco FirePOWER System Software 5.3.x through 5.3.0.6 and 5.4.x through 5.4.0.3 on FirePOWER 7000 and 8000 appliances, and on the Advanced Malware Protection (AMP) for Networks component on these appliances, allows remote attackers to cause a denial of service (packet-processing outage) via crafted packets, aka Bug ID CSCuu86214. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160504-firepower
CVE ID: CVE-2016-1369 State: PUBLISHED Published: 2016-05-05T21:00:00 Last Updated: 2024-08-05T22:55:14.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Adaptive Security Appliance (ASA) 5585-X FirePOWER Security Services Processor (SSP) module for Cisco ASA with FirePOWER Services 5.3.1 through 6.0.0 misconfigures kernel logging, which allows remote attackers to cause a denial of service (resource consumption, and inspection outage or module outage) via a flood of crafted IP traffic, aka Bug ID CSCux19922. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160504-fpkern - http://
r: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160504-fpkern - http://www.securitytracker.com/id/1035743
CVE ID: CVE-2016-1370 State: PUBLISHED Published: 2016-06-03T01:00:00 Last Updated: 2024-08-05T22:55:14.225Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Prime Network Analysis Module (NAM) before 6.2(1-b) miscalculates IPv6 payload lengths, which allows remote attackers to cause a denial of service (mond process crash and monitoring outage) via crafted IPv6 packets, aka Bug ID CSCuy37324. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036016 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160601-prime3
CVE ID: CVE-2016-1371 State: PUBLISHED Published: 2016-10-03T18:00:00 Last Updated: 2024-08-05T22:55:14.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: ClamAV (aka Clam AntiVirus) before 0.99.2 allows remote attackers to cause a denial of service (application crash) via a crafted mew packer executable. Additional Analyst Notes: - CVE Program Container: References: - http://blog.clamav.net/2016/05/clamav-0992-has-been-released.html - https://foxglovesecurity.com/2016/06/13/finding-pearls-fuzzing-clamav/ - https://bugzilla.clamav.net/show_bug.cgi?id=11514 - http://www.ubuntu.com/usn/USN-3093-1 - http://www.securityfocus.com/bid/93222
CVE ID: CVE-2016-1372 State: PUBLISHED Published: 2016-10-03T18:00:00 Last Updated: 2024-08-05T22:55:14.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: ClamAV (aka Clam AntiVirus) before 0.99.2 allows remote attackers to cause a denial of service (application crash) via a crafted 7z file. Additional Analyst Notes: - CVE Program Container: References: - http://blog.clamav.net/2016/05/clamav-0992-has-been-released.html - https://foxglovesecurity.com/2016/06/13/finding-pearls-fuzzing-clamav/ - http://www.securityfocus.com/bid/93221 - https://bugzilla.clamav.net/show_bug.cgi?id=11514 - http://www.ubuntu.com/usn/USN-3093-1
CVE ID: CVE-2016-1373 State: PUBLISHED Published: 2016-05-05T21:00:00 Last Updated: 2024-08-05T22:55:14.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gadgets-integration API in Cisco Finesse 8.5(1) through 8.5(5), 8.6(1), 9.0(1), 9.0(2), 9.1(1), 9.1(1)SU1, 9.1(1)SU1.1, 9.1(1)ES1 through 9.1(1)ES5, 10.0(1), 10.0(1)SU1, 10.0(1)SU1.1, 10.5(1), 10.5(1)ES1 through 10.5(1)ES4, 10.5(1)SU1, 10.5(1)SU1.1, 10.5(1)SU1.7, 10.6(1), 10.6(1)SU1, 10.6(1)SU2, and 11.0(1) allows remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted request, aka Bug ID CSCuw86623. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com
, aka Bug ID CSCuw86623. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035756 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160504-finesse
CVE ID: CVE-2016-1374 State: PUBLISHED Published: 2016-07-28T01:00:00 Last Updated: 2024-08-05T22:55:14.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web framework in Cisco Unified Computing System (UCS) Performance Manager 2.0.0 and earlier allows remote authenticated users to execute arbitrary commands via crafted parameters in a GET request, aka Bug ID CSCuy07827. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160720-ucsperf - http://www.securityfocus.com/bid/92044 - http://www.securitytracker.com/id/1036410
CVE ID: CVE-2016-1375 State: PUBLISHED Published: 2016-04-08T15:00:00 Last Updated: 2024-08-05T22:55:14.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Cisco IP Interoperability and Collaboration System 4.10(1) allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuy12339. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160407-cic
CVE ID: CVE-2016-1376 State: PUBLISHED Published: 2016-04-12T23:00:00 Last Updated: 2024-08-05T22:55:14.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS XR 4.2.3, 4.3.0, 4.3.4, and 5.3.1 on ASR 9000 devices allows remote attackers to cause a denial of service (CRC and symbol errors, and interface flap) via crafted bit patterns in packets, aka Bug ID CSCuv78548. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035560 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160412-asr
CVE ID: CVE-2016-1377 State: PUBLISHED Published: 2016-04-12T23:00:00 Last Updated: 2024-08-05T22:55:14.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Cisco Unity Connection through 11.0 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCus21776. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035562 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160412-unity
CVE ID: CVE-2016-1378 State: PUBLISHED Published: 2016-04-14T01:00:00 Last Updated: 2024-08-05T22:55:14.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS before 15.2(2)E1 on Catalyst switches allows remote attackers to obtain potentially sensitive software-version information via a request to the Network Mobility Services Protocol (NMSP) port, aka Bug ID CSCum62591. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160413-nms - http://www.securitytracker.com/id/1035566
CVE ID: CVE-2016-1379 State: PUBLISHED Published: 2016-05-28T01:00:00 Last Updated: 2024-08-05T22:55:14.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Adaptive Security Appliance (ASA) Software 9.0 through 9.5.1 mishandles IPsec error processing, which allows remote authenticated users to cause a denial of service (memory consumption) via crafted (1) LAN-to-LAN or (2) Remote Access VPN tunnel packets, aka Bug ID CSCuv70576. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160517-asa-vpn
CVE ID: CVE-2016-1380 State: PUBLISHED Published: 2016-05-25T01:00:00 Last Updated: 2024-08-05T22:55:14.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco AsyncOS 8.0 before 8.0.6-119 on Web Security Appliance (WSA) devices allows remote attackers to cause a denial of service (proxy-process hang) via a crafted HTTP POST request, aka Bug ID CSCuo12171. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035908 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160518-wsa1
CVE ID: CVE-2016-1381 State: PUBLISHED Published: 2016-05-25T01:00:00 Last Updated: 2024-08-05T22:55:14.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in Cisco AsyncOS 8.5 through 9.0 before 9.0.1-162 on Web Security Appliance (WSA) devices allows remote attackers to cause a denial of service (memory consumption) via an HTTP file-range request for cached content, aka Bug ID CSCuw97270. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160518-wsa2 - http://www.securitytracker.com/id/1035909
CVE ID: CVE-2016-1382 State: PUBLISHED Published: 2016-05-25T01:00:00 Last Updated: 2024-08-05T22:55:14.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco AsyncOS before 8.5.3-069 and 8.6 through 8.8 on Web Security Appliance (WSA) devices mishandles memory allocation for HTTP requests, which allows remote attackers to cause a denial of service (proxy-process reload) via a crafted request, aka Bug ID CSCuu02529. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035910 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160518-wsa3
CVE ID: CVE-2016-1383 State: PUBLISHED Published: 2016-05-25T01:00:00 Last Updated: 2024-08-05T22:55:14.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in Cisco AsyncOS through 8.8 on Web Security Appliance (WSA) devices allows remote attackers to cause a denial of service (memory consumption) via an unspecified HTTP status code, aka Bug ID CSCur28305. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160518-wsa4 - http://www.securitytracker.com/id/1035911
CVE ID: CVE-2016-1384 State: PUBLISHED Published: 2016-04-20T17:00:00 Last Updated: 2024-08-05T22:55:14.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NTP implementation in Cisco IOS 15.1 and 15.5 and IOS XE 3.2 through 3.17 allows remote attackers to modify the system time via crafted packets, aka Bug ID CSCux46898. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/86685 - http://www.securitytracker.com/id/1035622 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160419-ios
CVE ID: CVE-2016-1385 State: PUBLISHED Published: 2016-05-26T15:00:00 Last Updated: 2024-08-05T22:55:14.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XML parser in Cisco Adaptive Security Appliance (ASA) Software through 9.5.2 allows remote authenticated users to cause a denial of service (instability, memory consumption, or device reload) by leveraging (1) administrative access or (2) Clientless SSL VPN access to provide a crafted XML document, aka Bug ID CSCut14209. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035976 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160517-asa-xml
CVE ID: CVE-2016-1386 State: PUBLISHED Published: 2016-04-28T22:00:00 Last Updated: 2024-08-05T22:55:14.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: The API in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.0(1) allows remote attackers to spoof administrative notifications via crafted attribute-value pairs, aka Bug ID CSCux15521. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035702 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160428-apic
CVE ID: CVE-2016-1387 State: PUBLISHED Published: 2016-05-05T21:00:00 Last Updated: 2024-08-05T22:55:14.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XML API in TelePresence Codec (TC) 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.3.2, 7.3.3, 7.3.4, and 7.3.5 and Collaboration Endpoint (CE) 8.0.0, 8.0.1, and 8.1.0 in Cisco TelePresence Software mishandles authentication, which allows remote attackers to execute control commands or make configuration changes via an API request, aka Bug ID CSCuz26935. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160504-tpxml - http://www.securitytracker.co
://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160504-tpxml - http://www.securitytracker.com/id/1035744