Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-0169 State: PUBLISHED Published: 2018-03-28T22:00:00 Last Updated: 2024-12-02T20:54:07.029Z Vendors: n/a Products: Cisco IOS XE Problem Types: CWE-264 Description: Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to gain access to the underlying Linux shell of an affected device and execute arbitrary commands with root privileges on the device. The vulnerabilities are due to the affected software improperly sanitizing command arguments to prevent access to internal data structures on a device. An attacker who has user EXEC mode (privilege level 1) access to an affected device could exploit these vulnerabilities
An attacker who has user EXEC mode (privilege level 1) access to an affected device could exploit these vulnerabilities on the device by executing CLI commands that contain crafted arguments. A successful exploit could allow the attacker to gain access to the underlying Linux shell of the affected device and execute arbitrary commands with root privileges on the device. Cisco Bug IDs: CSCtw85441, CSCus42252, CSCuv95370. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/103567 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-privesc1 - http://www.securitytracker.com/id/1040583
CVE ID: CVE-2018-0170 State: PUBLISHED Published: 2018-03-28T22:00:00 Last Updated: 2024-12-02T20:53:55.577Z Vendors: n/a Products: Cisco IOS XE Problem Types: CWE-416 Description: A vulnerability in the Cisco Umbrella Integration feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition, related to the OpenDNS software. The vulnerability is due to a logic error that exists when handling a malformed incoming packet, leading to access to an internal data structure after it has been freed. An attacker could exploit this vulnerability by sending crafted, malformed IP packets to an affected device. A successful exploit could all
xploit this vulnerability by sending crafted, malformed IP packets to an affected device. A successful exploit could allow the attacker to cause an affected device to reload, resulting in a DoS condition. Cisco Bug IDs: CSCvb86327. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/103560 - http://www.securitytracker.com/id/1040590 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-opendns-dos
CVE ID: CVE-2018-0171 State: PUBLISHED Published: 2018-03-28T22:00:00.000Z Last Updated: 2025-10-21T23:45:53.665Z Vendors: n/a Products: Cisco IOS and IOS XE Problem Types: CWE-20 Description: A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service (DoS) condition, or to execute arbitrary code on an affected device. The vulnerability is due to improper validation of packet data. An attacker could exploit this vulnerability by sending a crafted Smart Install message to an affected device on TCP port 4786. A successful exploit could al
ability by sending a crafted Smart Install message to an affected device on TCP port 4786. A successful exploit could allow the attacker to cause a buffer overflow on the affected device, which could have the following impacts: Triggering a reload of the device, Allowing the attacker to execute arbitrary code on the device, Causing an indefinite loop on the affected device that triggers a watchdog crash. Cisco Bug IDs: CSCvg76186. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-107-04 - http://www.securitytracker.com/id/1040580 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisc
- http://www.securitytracker.com/id/1040580 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi2 - https://www.darkreading.com/perimeter/attackers-exploit-cisco-switch-issue-as-vendor-warns-of-yet-another-critical-flaw/d/d-id/1331490 - https://ics-cert.us-cert.gov/advisories/ICSA-18-107-05 - http://www.securityfocus.com/bid/103538
CVE ID: CVE-2018-0172 State: PUBLISHED Published: 2018-03-28T22:00:00.000Z Last Updated: 2025-10-21T23:45:53.521Z Vendors: n/a Products: Cisco IOS and IOS XE Problem Types: CWE-20 Description: A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerability exists because the affected software performs incomplete input validation of option 82 information that it receives in DHCP Version 4 (DHCPv4) packets from DHCP relay agents. An attacker could exploit this vulnerability by sending a craft
DHCP Version 4 (DHCPv4) packets from DHCP relay agents. An attacker could exploit this vulnerability by sending a crafted DHCPv4 packet to an affected device. A successful exploit could allow the attacker to cause a heap overflow condition on the affected device, which will cause the device to reload and result in a DoS condition. Cisco Bug IDs: CSCvg62730. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-107-04 - https://www.tenable.com/security/research/tra-2018-06 - http://www.securitytracker.com/id/1040591 - http://www.securityfocus.com/bid/103552 - https://tools.cisco.com/security/center/content/Ci
itytracker.com/id/1040591 - http://www.securityfocus.com/bid/103552 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-dhcpr1 - https://ics-cert.us-cert.gov/advisories/ICSA-18-107-05
CVE ID: CVE-2018-0173 State: PUBLISHED Published: 2018-03-28T22:00:00.000Z Last Updated: 2025-10-21T23:45:53.331Z Vendors: n/a Products: Cisco IOS and IOS XE Problem Types: CWE-20 Description: A vulnerability in the Cisco IOS Software and Cisco IOS XE Software function that restores encapsulated option 82 information in DHCP Version 4 (DHCPv4) packets could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a Relay Reply denial of service (DoS) condition. The vulnerability exists because the affected software performs incomplete input validation of encapsulated option 82 information that it receives in DHCPOFFER messages from DHCPv4 servers. An atta
put validation of encapsulated option 82 information that it receives in DHCPOFFER messages from DHCPv4 servers. An attacker could exploit this vulnerability by sending a crafted DHCPv4 packet to an affected device, which the device would then forward to a DHCPv4 server. When the affected software processes the option 82 information that is encapsulated in the response from the server, an error could occur. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition. Cisco Bug IDs: CSCvg62754. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSec
- CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-dhcpr2 - http://www.securityfocus.com/bid/103545 - https://ics-cert.us-cert.gov/advisories/ICSA-18-107-04 - https://www.tenable.com/security/research/tra-2018-06 - http://www.securitytracker.com/id/1040591 - https://ics-cert.us-cert.gov/advisories/ICSA-18-107-05
CVE ID: CVE-2018-0174 State: PUBLISHED Published: 2018-03-28T22:00:00.000Z Last Updated: 2025-10-21T23:45:53.179Z Vendors: n/a Products: Cisco IOS and IOS XE Problem Types: CWE-20 Description: A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerability exists because the affected software performs incomplete input validation of option 82 information that it receives in DHCP Version 4 (DHCPv4) packets from DHCP relay agents. An attacker could exploit this vulnerability by sending a craft
DHCP Version 4 (DHCPv4) packets from DHCP relay agents. An attacker could exploit this vulnerability by sending a crafted DHCPv4 packet to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition. Cisco Bug IDs: CSCuh91645. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/103554 - https://ics-cert.us-cert.gov/advisories/ICSA-18-107-04 - https://www.tenable.com/security/research/tra-2018-06 - http://www.securitytracker.com/id/1040591 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-dhcpr3 - https://ics
d/1040591 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-dhcpr3 - https://ics-cert.us-cert.gov/advisories/ICSA-18-107-05
CVE ID: CVE-2018-0175 State: PUBLISHED Published: 2018-03-28T22:00:00.000Z Last Updated: 2025-10-21T23:45:52.972Z Vendors: n/a Products: Cisco IOS, IOS XE, and IOS XR Problem Types: CWE-119 Description: Format String vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition or execute arbitrary code with elevated privileges on an affected device. Cisco Bug IDs: CSCvd73664. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecu
CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-lldp - https://ics-cert.us-cert.gov/advisories/ICSA-18-107-03 - https://ics-cert.us-cert.gov/advisories/ICSA-18-107-04 - http://www.securitytracker.com/id/1040586 - https://ics-cert.us-cert.gov/advisories/ICSA-18-107-05 - http://www.securityfocus.com/bid/103564
CVE ID: CVE-2018-0176 State: PUBLISHED Published: 2018-03-28T22:00:00 Last Updated: 2024-12-02T20:53:45.611Z Vendors: n/a Products: Cisco IOS XE Problem Types: CWE-264 Description: Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to gain access to the underlying Linux shell of an affected device and execute arbitrary commands with root privileges on the device. The vulnerabilities are due to the affected software improperly sanitizing command arguments to prevent access to internal data structures on a device. An attacker who has user EXEC mode (privilege level 1) access to an affected device could exploit these vulnerabilities
CVE ID: CVE-2018-0177 State: PUBLISHED Published: 2018-03-28T22:00:00 Last Updated: 2024-12-02T20:53:34.215Z Vendors: n/a Products: Cisco IOS XE Problem Types: CWE-19 Description: A vulnerability in the IP Version 4 (IPv4) processing code of Cisco IOS XE Software running on Cisco Catalyst 3850 and Cisco Catalyst 3650 Series Switches could allow an unauthenticated, remote attacker to cause high CPU utilization, traceback messages, or a reload of an affected device that leads to a denial of service (DoS) condition. The vulnerability is due to incorrect processing of certain IPv4 packets. An attacker could exploit this vulnerability by sending specific IPv4 packets to an IPv4 address on an affe
Pv4 packets. An attacker could exploit this vulnerability by sending specific IPv4 packets to an IPv4 address on an affected device. A successful exploit could allow the attacker to cause high CPU utilization, traceback messages, or a reload of the affected device that leads to a DoS condition. If the switch does not reboot when under attack, it would require manual intervention to reload the device. This vulnerability affects Cisco Catalyst 3850 and Cisco Catalyst 3650 Series Switches that are running Cisco IOS XE Software Release 16.1.1 or later, until the first fixed release, and are configured with an IPv4 address. Cisco Bug IDs: CSCvd80714. Additional Analyst Notes: - CVE Program Contai
ease, and are configured with an IPv4 address. Cisco Bug IDs: CSCvd80714. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/103563 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-ipv4 - http://www.securitytracker.com/id/1040588
CVE ID: CVE-2018-0178 State: REJECTED Published: 2019-11-05T17:50:34 Last Updated: 2019-11-05T17:50:34 Description: No description available.
CVE ID: CVE-2018-0179 State: PUBLISHED Published: 2018-03-28T22:00:00.000Z Last Updated: 2025-10-21T23:45:52.817Z Vendors: n/a Products: Cisco IOS Problem Types: CWE-399 Description: Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a reload of an affected system, resulting in a denial of service (DoS) condition. These vulnerabilities affect Cisco devices that are running Cisco IOS Software Release 15.4(2)T, 15.4(3)M, or 15.4(2)CG and later. Cisco Bug IDs: CSCuy32360, CSCuz60599. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.c
uz60599. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-slogin - http://www.securityfocus.com/bid/103556
CVE ID: CVE-2018-0180 State: PUBLISHED Published: 2018-03-28T22:00:00.000Z Last Updated: 2025-10-21T23:45:52.663Z Vendors: n/a Products: Cisco IOS Problem Types: CWE-399 Description: Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a reload of an affected system, resulting in a denial of service (DoS) condition. These vulnerabilities affect Cisco devices that are running Cisco IOS Software Release 15.4(2)T, 15.4(3)M, or 15.4(2)CG and later. Cisco Bug IDs: CSCuy32360, CSCuz60599. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.c
CVE ID: CVE-2018-0181 State: PUBLISHED Published: 2019-01-10T00:00:00Z Last Updated: 2024-11-19T19:19:29.892Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Cisco Products: Cisco Policy Suite (CPS) Software Problem Types: CWE-306 Description: A vulnerability in the Redis implementation used by the Cisco Policy Suite for Mobile and Cisco Policy Suite Diameter Routing Agent software could allow an unauthenticated, remote attacker to modify key-value pairs for short-lived events stored by the Redis server. The vulnerability is due to improper authentication when accessing the Redis server. An unauthenticated attacker could exploit this vulnerability by modifying
uthentication when accessing the Redis server. An unauthenticated attacker could exploit this vulnerability by modifying key-value pairs stored within the Redis server database. An exploit could allow the attacker to reduce the efficiency of the Cisco Policy Suite for Mobile and Cisco Policy Suite Diameter Routing Agent software. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190109-cps-redis - http://www.securityfocus.com/bid/106547
CVE ID: CVE-2018-0182 State: PUBLISHED Published: 2018-03-28T22:00:00 Last Updated: 2024-12-02T20:53:23.213Z Vendors: n/a Products: Cisco IOS XE Problem Types: CWE-78 Description: Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to inject arbitrary commands into the CLI of the affected software, which could allow the attacker to gain access to the underlying Linux shell of an affected device and execute commands with root privileges on the device. The vulnerabilities exist because the affected software does not sufficiently sanitize command arguments before passing commands to the Linux shell for execution. An attacker could exp
sufficiently sanitize command arguments before passing commands to the Linux shell for execution. An attacker could exploit these vulnerabilities by submitting a malicious CLI command to the affected software. A successful exploit could allow the attacker to break from the CLI of the affected software, which could allow the attacker to gain access to the underlying Linux shell on an affected device and execute arbitrary commands with root privileges on the device. Cisco Bug IDs: CSCuz03145, CSCuz56419, CSCva31971, CSCvb09542. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-s
er: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-cmdinj - http://www.securityfocus.com/bid/103547
CVE ID: CVE-2018-0183 State: PUBLISHED Published: 2018-03-28T22:00:00 Last Updated: 2024-12-02T20:53:07.028Z Vendors: n/a Products: Cisco IOS XE Problem Types: CWE-264 Description: A vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to gain access to the underlying Linux shell of an affected device and execute arbitrary commands with root privileges on the device. The vulnerability is due to the affected software improperly sanitizing command arguments to prevent access to internal data structures on a device. An attacker who has privileged EXEC mode (privilege level 15) access to an affected device could exploit this vulnerability on the d
who has privileged EXEC mode (privilege level 15) access to an affected device could exploit this vulnerability on the device by executing CLI commands that contain crafted arguments. A successful exploit could allow the attacker to gain access to the underlying Linux shell of the affected device and execute arbitrary commands with root privileges on the device. Cisco Bug IDs: CSCuv91356. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-privesc3 - http://www.securityfocus.com/bid/103555
CVE ID: CVE-2018-0184 State: PUBLISHED Published: 2018-03-28T22:00:00 Last Updated: 2024-12-02T20:52:53.282Z Vendors: n/a Products: Cisco IOS XE Problem Types: CWE-264 Description: A vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to gain access to the underlying Linux shell of an affected device and execute arbitrary commands with root privileges on the device. The vulnerability is due to the affected software improperly sanitizing command arguments to prevent access to internal data structures on a device. An attacker who has privileged EXEC mode (privilege level 15) access to an affected device could exploit this vulnerability on the d
who has privileged EXEC mode (privilege level 15) access to an affected device could exploit this vulnerability on the device by executing CLI commands that contain crafted arguments. A successful exploit could allow the attacker to gain access to the underlying Linux shell of the affected device and execute arbitrary commands with root privileges on the device. Cisco Bug IDs: CSCve74432. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-privesc2 - http://www.securityfocus.com/bid/103550
CVE ID: CVE-2018-0185 State: PUBLISHED Published: 2018-03-28T22:00:00 Last Updated: 2024-12-02T20:52:39.729Z Vendors: n/a Products: Cisco IOS XE Problem Types: CWE-78 Description: Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to inject arbitrary commands into the CLI of the affected software, which could allow the attacker to gain access to the underlying Linux shell of an affected device and execute commands with root privileges on the device. The vulnerabilities exist because the affected software does not sufficiently sanitize command arguments before passing commands to the Linux shell for execution. An attacker could exp
CVE ID: CVE-2018-0186 State: PUBLISHED Published: 2018-03-28T22:00:00 Last Updated: 2024-12-02T20:52:26.732Z Vendors: n/a Products: Cisco IOS XE Problem Types: CWE-79 Description: Multiple vulnerabilities in the web-based user interface (web UI) of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web UI of the affected software. The vulnerabilities are due to insufficient input validation of certain parameters that are passed to the affected software via the web UI. An attacker could exploit these vulnerabilities by persuading a user of the affected UI to access a malicious link or by intercepting a use
xploit these vulnerabilities by persuading a user of the affected UI to access a malicious link or by intercepting a user request for the affected UI and injecting malicious code into the request. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected UI or allow the attacker to access sensitive browser-based information on the user's system. Cisco Bug IDs: CSCuz38591, CSCvb09530, CSCvb10022. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/103551 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-webuixss
CVE ID: CVE-2018-0187 State: PUBLISHED Published: 2019-01-23T22:00:00Z Last Updated: 2024-11-21T19:48:24.056Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Cisco Products: Cisco Identity Services Engine Software Problem Types: CWE-200 Description: A vulnerability in the Admin portal of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to obtain confidential information for privileged accounts. The vulnerability is due to the improper handling of confidential information. An attacker could exploit this vulnerability by logging into the web interface on a vulnerable system. An exploit could allow an attacker to obtain confide
erability by logging into the web interface on a vulnerable system. An exploit could allow an attacker to obtain confidential information for privileged accounts. This information could then be used to impersonate or negatively impact the privileged account on the affected system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190123-ise-info-disclosure - http://www.securityfocus.com/bid/106717
CVE ID: CVE-2018-0188 State: PUBLISHED Published: 2018-03-28T22:00:00 Last Updated: 2024-12-02T20:52:14.377Z Vendors: n/a Products: Cisco IOS XE Problem Types: CWE-79 Description: Multiple vulnerabilities in the web-based user interface (web UI) of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web UI of the affected software. The vulnerabilities are due to insufficient input validation of certain parameters that are passed to the affected software via the web UI. An attacker could exploit these vulnerabilities by persuading a user of the affected UI to access a malicious link or by intercepting a use