Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-0746 State: PUBLISHED Published: 2015-05-22T00:00:00 Last Updated: 2024-08-06T04:17:32.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: The REST API in Cisco Access Control Server (ACS) 5.5(0.46.2) allows remote attackers to cause a denial of service (API outage) by sending many requests, aka Bug ID CSCut62022. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=38946 - http://www.securitytracker.com/id/1032387
CVE ID: CVE-2015-0747 State: PUBLISHED Published: 2015-05-30T14:00:00 Last Updated: 2024-08-06T04:17:32.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Conductor for Videoscape 3.0 and Cisco Headend System Release allow remote attackers to inject arbitrary cookies via a crafted HTTP request, aka Bug ID CSCuh25408. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032447 - http://tools.cisco.com/security/center/viewAlert.x?alertId=38945
CVE ID: CVE-2015-0749 State: PUBLISHED Published: 2020-02-19T02:55:13.277944Z Last Updated: 2024-11-15T17:41:43.310Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Cisco Products: Cisco Unified Communications Manager Problem Types: CWE-79 Description: A vulnerability in Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack on the affected software. The vulnerabilities is due to improper input validation of certain parameters passed to the affected software. An attacker could exploit this vulnerability by convincing a user to follow a malicious link. A successful exploit could allo
tacker could exploit this vulnerability by convincing a user to follow a malicious link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected site or allow the attacker to access sensitive browser-based information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20150522-CVE-2015-0749
CVE ID: CVE-2015-0750 State: PUBLISHED Published: 2015-05-23T01:00:00 Last Updated: 2024-08-06T04:17:32.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: The administrative web interface in Cisco Hosted Collaboration Solution (HCS) 10.6(1) and earlier allows remote authenticated users to execute arbitrary commands via crafted input to unspecified fields, aka Bug ID CSCut02786. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=38969
CVE ID: CVE-2015-0751 State: PUBLISHED Published: 2015-05-29T15:00:00 Last Updated: 2024-08-06T04:17:32.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IP Phone 7861, when firmware from Cisco Unified Communications Manager 10.3(1) is used, allows remote attackers to cause a denial of service via crafted packets, aka Bug ID CSCus81800. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032407 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39011
CVE ID: CVE-2015-0752 State: PUBLISHED Published: 2015-05-29T15:00:00 Last Updated: 2024-08-06T04:17:32.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Cisco TelePresence Video Communication Server (VCS) X8.5.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCut27635. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032421 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39012
CVE ID: CVE-2015-0753 State: PUBLISHED Published: 2015-05-29T15:00:00 Last Updated: 2024-08-06T04:17:32.789Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Cisco Unified Email Interaction Manager (EIM) and Unified Web Interaction Manager (WIM) 9.0(2) allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuu30028. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032422 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39013
CVE ID: CVE-2015-0754 State: PUBLISHED Published: 2015-05-29T15:00:00 Last Updated: 2024-08-06T04:17:32.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Finesse 10.5(1) allows remote authenticated users to obtain sensitive information or cause a denial of service (CPU and memory consumption) via a crafted XML document, aka Bug ID CSCut95810. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=39015 - http://www.securitytracker.com/id/1032423
CVE ID: CVE-2015-0755 State: PUBLISHED Published: 2015-05-29T15:00:00 Last Updated: 2024-08-06T04:17:32.824Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Posture module for Cisco Identity Services Engine (ISE), as distributed in Cisco AnyConnect Secure Mobility Client 4.0(64), allows local users to gain privileges via unspecified commands, aka Bug ID CSCut05797. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032424 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39018
CVE ID: CVE-2015-0756 State: PUBLISHED Published: 2015-05-29T15:00:00 Last Updated: 2024-08-06T04:17:32.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Wireless LAN Controller (WLC) devices with software 7.4(1.1) allow remote attackers to cause a denial of service (wireless-networking outage) via crafted TCP traffic on the local network, aka Bug ID CSCug67104. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032419 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39041
CVE ID: CVE-2015-0757 State: PUBLISHED Published: 2015-05-29T15:00:00 Last Updated: 2024-08-06T04:17:32.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web framework in Cisco Identity Services Engine (ISE) 1.2(1.901) and 1.3(0.722) does not properly implement session handlers, which allows remote attackers to obtain sensitive information by reading web pages, as demonstrated by MnT reports, aka Bug ID CSCuq23140. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=39042 - http://www.securityfocus.com/bid/74864 - http://www.securitytracker.com/id/1032420
CVE ID: CVE-2015-0758 State: PUBLISHED Published: 2015-05-30T14:00:00 Last Updated: 2024-08-06T04:17:32.849Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web-based user interface in Cisco Unified MeetingPlace 8.6(1.9) allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka Bug ID CSCus97452. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032448 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39130
CVE ID: CVE-2015-0759 State: PUBLISHED Published: 2015-06-02T14:00:00 Last Updated: 2024-08-06T04:17:32.822Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Cisco Headend Digital Broadband Delivery System allows remote attackers to hijack the authentication of arbitrary users. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=39133 - http://www.securitytracker.com/id/1032446
CVE ID: CVE-2015-0760 State: PUBLISHED Published: 2015-06-04T10:00:00 Last Updated: 2024-08-06T04:17:32.790Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IKEv1 implementation in Cisco ASA Software 7.x, 8.0.x, 8.1.x, and 8.2.x before 8.2.2.13 allows remote authenticated users to bypass XAUTH authentication via crafted IKEv1 packets, aka Bug ID CSCus47259. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032473 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39157
CVE ID: CVE-2015-0761 State: PUBLISHED Published: 2015-06-04T10:00:00 Last Updated: 2024-08-06T04:17:32.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco AnyConnect Secure Mobility Client before 3.1(8009) and 4.x before 4.0(2052) on Linux does not properly implement unspecified internal functions, which allows local users to obtain root privileges via crafted vpnagent options, aka Bug ID CSCus86790. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74954 - http://www.securitytracker.com/id/1032472 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39158
CVE ID: CVE-2015-0762 State: PUBLISHED Published: 2015-06-04T10:00:00 Last Updated: 2024-08-06T04:17:32.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the management interface in Cisco Unified MeetingPlace 8.6(1.2) and 8.6(1.9) for Microsoft Outlook allows remote attackers to inject arbitrary web script or HTML via a crafted value in a URL, aka Bug ID CSCuu51400. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032470 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39161
CVE ID: CVE-2015-0763 State: PUBLISHED Published: 2015-06-04T10:00:00 Last Updated: 2024-08-06T04:17:32.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Unified MeetingPlace 8.6(1.2) does not properly validate session IDs in http URLs, which allows remote attackers to obtain sensitive session information via a crafted URL, aka Bug ID CSCuu60338. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=39162 - http://www.securitytracker.com/id/1032471
CVE ID: CVE-2015-0764 State: PUBLISHED Published: 2015-06-04T10:00:00 Last Updated: 2024-08-06T04:17:32.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Unified MeetingPlace 8.6(1.9) allows remote attackers to read arbitrary files via a crafted resource request, aka Bug ID CSCus95603. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032481 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39163
CVE ID: CVE-2015-0765 State: PUBLISHED Published: 2015-06-04T10:00:00 Last Updated: 2024-08-06T04:17:32.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco ONS 15454 System Software 10.30 and 10.301 allows remote attackers to cause a denial of service (tNetTask CPU consumption or card reset) via a flood of (1) IP or (2) Ethernet traffic, aka Bug ID CSCus57263. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032483 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39172
CVE ID: CVE-2015-0766 State: PUBLISHED Published: 2015-06-04T10:00:00 Last Updated: 2024-08-06T04:17:32.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the administrative web interface in the Management Center component in Cisco FireSIGHT System Software 6.0.0 allow remote attackers to inject arbitrary web script or HTML via unspecified fields, aka Bug IDs CSCus93566, CSCut31557, and CSCut47196. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=39171 - http://www.securitytracker.com/id/1032482
CVE ID: CVE-2015-0767 State: PUBLISHED Published: 2015-06-07T18:00:00 Last Updated: 2024-08-06T04:17:32.793Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Edge 300 software 1.0 and 1.1 on Edge 340 devices allows local users to obtain root privileges via unspecified commands, aka Bug ID CSCur18132. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=39187
CVE ID: CVE-2015-0768 State: PUBLISHED Published: 2015-06-12T14:00:00 Last Updated: 2024-08-06T04:17:32.822Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Device Work Center (DWC) component in Cisco Prime Network Control System (NCS) 2.1(0.0.85), 2.2(0.0.58), and 2.2(0.0.69) does not properly implement AAA roles, which allows remote authenticated users to bypass intended access restrictions and execute commands via a login session, aka Bug ID CSCur27371. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=39192 - http://www.securitytracker.com/id/1032541
CVE ID: CVE-2015-0769 State: PUBLISHED Published: 2015-06-12T14:00:00 Last Updated: 2024-08-06T04:17:32.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS XR 4.0.1 through 4.2.0 for CRS-3 Carrier Routing System allows remote attackers to cause a denial of service (NPU ASIC scan and line-card reload) via crafted IPv6 extension headers, aka Bug ID CSCtx03546. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032563 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150611-iosxr
CVE ID: CVE-2015-0770 State: PUBLISHED Published: 2015-06-07T18:00:00 Last Updated: 2024-08-06T04:17:32.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in Cisco TelePresence TC 6.x before 6.3.4 and 7.x before 7.3.3 on Integrator C SX20 devices allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL, aka Bug ID CSCut79341. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032511 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39210
CVE ID: CVE-2015-0771 State: PUBLISHED Published: 2015-06-12T10:00:00 Last Updated: 2024-08-06T04:17:32.841Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IKE implementation in the WS-IPSEC-3 service module in Cisco IOS 12.2 on Catalyst 6500 devices allows remote authenticated users to cause a denial of service (device reload) by sending a crafted message during IPsec tunnel setup, aka Bug ID CSCur70505. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=39233 - http://www.securitytracker.com/id/1032517
CVE ID: CVE-2015-0772 State: PUBLISHED Published: 2015-06-12T14:00:00 Last Updated: 2024-08-06T04:17:32.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco TelePresence Video Communication Server (VCS) X8.5RC4 allows remote attackers to cause a denial of service (CPU consumption or device outage) via a crafted SDP parameter-negotiation request in an SDP session during a SIP connection, aka Bug ID CSCut42422. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=39240 - http://www.securitytracker.com/id/1032540
CVE ID: CVE-2015-0773 State: PUBLISHED Published: 2015-06-12T10:00:00 Last Updated: 2024-08-06T04:17:32.854Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco FireSIGHT System Software 5.3.1.3 and 6.0.0 allows remote authenticated users to delete an arbitrary user's dashboard via a modified VPN deletion request in a management session, aka Bug ID CSCut67078. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032542 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39256
CVE ID: CVE-2015-0774 State: PUBLISHED Published: 2015-06-12T10:00:00 Last Updated: 2024-08-06T04:17:32.846Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Cisco Application and Content Networking System (ACNS) 5.5(9) allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuu70650. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032539 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39257
CVE ID: CVE-2015-0775 State: PUBLISHED Published: 2015-06-12T14:00:00 Last Updated: 2024-08-06T04:26:09.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: The banner (aka MOTD) implementation in Cisco NX-OS 4.1(2)E1(1f) on Nexus 4000 devices, 5.2(1)SV3(2.1) on Nexus 1000V devices, 6.0(2)N2(2) on Nexus 5000 devices, 6.2(11) on MDS 9000 devices, 6.2(12) on Nexus 7000 devices, 7.0(3) on Nexus 9000 devices, and 7.2(0)ZN(99.67) on Nexus 3000 devices allows remote attackers to cause a denial of service (login process reset) via an unspecified terminal-session request during TELNET session setup, aka Bug IDs CSCuo10554, CSCuu75466, CSCuu75471, CSCuu75484, CSCuu75498, CSCuu77170, and CS
during TELNET session setup, aka Bug IDs CSCuo10554, CSCuu75466, CSCuu75471, CSCuu75484, CSCuu75498, CSCuu77170, and CSCuu77182. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032561 - http://www.securitytracker.com/id/1032562 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39280
CVE ID: CVE-2015-0776 State: PUBLISHED Published: 2015-06-12T14:00:00 Last Updated: 2024-08-06T04:26:10.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: telnetd in Cisco IOS XR 5.0.1 on Network Convergence System 6000 devices allows remote attackers to cause a denial of service (device reload) via a malformed TELNET packet, aka Bug ID CSCuq31566. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032560 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39293
CVE ID: CVE-2015-0777 State: PUBLISHED Published: 2015-04-05T21:00:00 Last Updated: 2024-08-06T04:26:09.822Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/xen/usbback/usbback.c in linux-2.6.18-xen-3.4.0 (aka the Xen 3.4.x support patches for the Linux kernel 2.6.18), as used in the Linux kernel 2.6.x and 3.x in SUSE Linux distributions, allows guest OS users to obtain sensitive information from uninitialized locations in host OS kernel memory via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg0
org/opensuse-security-announce/2015-04/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00021.html - https://bugzilla.novell.com/show_bug.cgi?id=917830 - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00018.html - http://www.securityfocus.com/bid/73921
CVE ID: CVE-2015-0778 State: PUBLISHED Published: 2015-03-16T14:00:00 Last Updated: 2024-08-06T04:26:09.821Z Vendors: n/a Products: n/a Problem Types: n/a Description: osc before 0.151.0 allows remote attackers to execute arbitrary commands via shell metacharacters in a _service file. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154267.html - https://bugzilla.suse.com/show_bug.cgi?id=901643 - http://www.securityfocus.com/bid/73114 - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/154117.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154257.html - http://l
nce/2015-March/154117.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154257.html - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00011.html - https://security.gentoo.org/glsa/201603-02 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00012.html
CVE ID: CVE-2015-0779 State: PUBLISHED Published: 2015-06-07T23:00:00 Last Updated: 2024-08-06T04:26:09.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in UploadServlet in Novell ZENworks Configuration Management (ZCM) 10 and 11 before 11.3.2 allows remote attackers to execute arbitrary code via a crafted directory name in the uid parameter, in conjunction with a WAR filename in the filename parameter and WAR content in the POST data, a different vulnerability than CVE-2010-5323 and CVE-2010-5324. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rapid7/metasploit-framework/pull/5096 - https://www.exploit-db.
CVE Program Container: References: - https://github.com/rapid7/metasploit-framework/pull/5096 - https://www.exploit-db.com/exploits/36964/ - https://www.novell.com/support/kb/doc.php?id=7016419 - https://raw.githubusercontent.com/pedrib/PoC/master/generic/zenworks_zcm_rce.txt - http://seclists.org/fulldisclosure/2015/Apr/21
CVE ID: CVE-2015-0780 State: PUBLISHED Published: 2017-08-09T18:00:00 Last Updated: 2024-08-06T04:26:09.806Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the GetReRequestData method of the GetStoredResult class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032166 - http://www.securityfocus.com/bid/74284 - https://www.novell.com/support/kb/doc.php?id=7016431 - http://www.zerodayinitiative.com/advisories/ZDI-15-147
CVE ID: CVE-2015-0781 State: PUBLISHED Published: 2017-08-09T18:00:00 Last Updated: 2024-08-06T04:26:09.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the doPost method of the Rtrlet class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to upload and execute arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.novell.com/support/kb/doc.php?id=7016431 - http://www.securityfocus.com/bid/74291 - http://www.zerodayinitiative.com/advisories/ZDI-15-151
CVE ID: CVE-2015-0782 State: PUBLISHED Published: 2017-08-09T18:00:00 Last Updated: 2024-08-06T04:26:09.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the ScheduleQuery method of the schedule class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/72808 - https://www.novell.com/support/kb/doc.php?id=7016431 - http://www.zerodayinitiative.com/advisories/ZDI-15-148
CVE ID: CVE-2015-0783 State: PUBLISHED Published: 2017-08-09T18:00:00 Last Updated: 2024-08-06T04:26:09.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FileViewer class in Novell ZENworks Configuration Management (ZCM) allows remote authenticated users to read arbitrary files via the filename variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032166 - http://www.zerodayinitiative.com/advisories/ZDI-15-150 - https://www.novell.com/support/kb/doc.php?id=7016431
CVE ID: CVE-2015-0784 State: PUBLISHED Published: 2017-08-09T18:00:00 Last Updated: 2024-08-06T04:26:09.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rtrlet.class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to obtain Session IDs of logged in users via a value of ShowLogins for the maintenance variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032166 - https://www.novell.com/support/kb/doc.php?id=7016431 - http://www.securityfocus.com/bid/74289 - http://www.zerodayinitiative.com/advisories/ZDI-15-149