Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-0633 State: PUBLISHED Published: 2015-02-26T01:00:00 Last Updated: 2024-08-06T04:17:32.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Integrated Management Controller (IMC) in Cisco Unified Computing System (UCS) 1.4(7h) and earlier on C-Series servers allows remote attackers to bypass intended access restrictions by sending crafted DHCP response packets on the local network, aka Bug ID CSCuf52876. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031796 - http://tools.cisco.com/security/center/viewAlert.x?alertId=37575 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0633 - h
/center/viewAlert.x?alertId=37575 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0633 - http://www.securityfocus.com/bid/72760 - http://www.securityfocus.com/bid/85711
CVE ID: CVE-2015-0634 State: PUBLISHED Published: 2015-05-15T01:00:00 Last Updated: 2024-08-06T04:17:32.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the administrative interface in Cisco WebEx Meetings Server 2.5 and 2.5.0.997 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuq86310. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74647 - http://tools.cisco.com/security/center/viewAlert.x?alertId=38811 - http://www.securitytracker.com/id/1032329
CVE ID: CVE-2015-0635 State: PUBLISHED Published: 2015-03-26T10:00:00 Last Updated: 2024-08-06T04:17:32.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Autonomic Networking Infrastructure (ANI) implementation in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.10.xS through 3.13.xS before 3.13.1S allows remote attackers to spoof Autonomic Networking Registration Authority (ANRA) responses, and consequently bypass intended device and node access restrictions or cause a denial of service (disrupted domain access), via crafted AN messages, aka Bug ID CSCup62191. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/cent
Bug ID CSCup62191. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150325-ani - http://www.securitytracker.com/id/1031982
CVE ID: CVE-2015-0636 State: PUBLISHED Published: 2015-03-26T10:00:00 Last Updated: 2024-08-06T04:17:32.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Autonomic Networking Infrastructure (ANI) implementation in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.10.xS through 3.13.xS before 3.13.1S allows remote attackers to cause a denial of service (disrupted domain access) via spoofed AN messages that reset a finite state machine, aka Bug ID CSCup62293. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150325-ani - http://www.securitytracker.com/id/1031982
CVE ID: CVE-2015-0637 State: PUBLISHED Published: 2015-03-26T10:00:00 Last Updated: 2024-08-06T04:17:32.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Autonomic Networking Infrastructure (ANI) implementation in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.10.xS through 3.13.xS before 3.13.1S allows remote attackers to cause a denial of service (device reload) via spoofed AN messages, aka Bug ID CSCup62315. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150325-ani - http://www.securitytracker.com/id/1031982
CVE ID: CVE-2015-0638 State: PUBLISHED Published: 2015-03-26T10:00:00 Last Updated: 2024-08-06T04:17:32.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 12.2, 12.4, 15.0, 15.2, and 15.3, when a VRF interface is configured, allows remote attackers to cause a denial of service (interface queue wedge) via crafted ICMPv4 packets, aka Bug ID CSCsi02145. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150325-wedge - http://www.securitytracker.com/id/1031983
CVE ID: CVE-2015-0639 State: PUBLISHED Published: 2015-03-26T10:00:00 Last Updated: 2024-08-06T04:17:32.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Common Flow Table (CFT) feature in Cisco IOS XE 3.6 and 3.7 before 3.7.1S, 3.8 before 3.8.0S, 3.9 before 3.9.0S, 3.10 before 3.10.0S, 3.11 before 3.11.0S, 3.12 before 3.12.0S, 3.13 before 3.13.0S, 3.14 before 3.14.0S, and 3.15 before 3.15.0S, when MMON or NBAR is enabled, allows remote attackers to cause a denial of service (device reload) via malformed IPv6 packets with IPv4 UDP encapsulation, aka Bug ID CSCua79665. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031981
CSCua79665. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031981 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150325-iosxe
CVE ID: CVE-2015-0640 State: PUBLISHED Published: 2015-03-26T10:00:00 Last Updated: 2024-08-06T04:17:32.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: The high-speed logging (HSL) feature in Cisco IOS XE 2.x and 3.x before 3.10.4S, 3.11 before 3.11.3S, 3.12 before 3.12.1S, 3.13 before 3.13.0S, 3.14 before 3.14.0S, and 3.15 before 3.15.0S allows remote attackers to cause a denial of service (device reload) via large IP packets that require NAT and HSL processing after fragmentation, aka Bug ID CSCuo25741. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031981 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvi
ferences: - http://www.securitytracker.com/id/1031981 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150325-iosxe
CVE ID: CVE-2015-0641 State: PUBLISHED Published: 2015-03-26T10:00:00 Last Updated: 2024-08-06T04:17:32.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS XE 2.x and 3.x before 3.9.0S, 3.10 before 3.10.0S, 3.11 before 3.11.0S, 3.12 before 3.12.0S, 3.13 before 3.13.0S, 3.14 before 3.14.0S, and 3.15 before 3.15.0S allows remote attackers to cause a denial of service (device reload) via crafted IPv6 packets, aka Bug ID CSCub68073. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031981 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150325-iosxe
CVE ID: CVE-2015-0642 State: PUBLISHED Published: 2015-03-26T10:00:00 Last Updated: 2024-08-06T04:17:32.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 12.2, 12.4, 15.0, 15.1, 15.2, 15.3, and 15.4 and IOS XE 2.5.x, 2.6.x, 3.1.xS through 3.12.xS before 3.12.3S, 3.2.xE through 3.7.xE before 3.7.1E, 3.3.xSG, 3.4.xSG, and 3.13.xS before 3.13.2S allow remote attackers to cause a denial of service (device reload) by sending malformed IKEv2 packets over (1) IPv4 or (2) IPv6, aka Bug ID CSCum36951. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=37816 - http://www.securitytracker.com/id/1031978 - ht
ces: - http://tools.cisco.com/security/center/viewAlert.x?alertId=37816 - http://www.securitytracker.com/id/1031978 - http://www.securityfocus.com/bid/73333 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150325-ikev2
CVE ID: CVE-2015-0643 State: PUBLISHED Published: 2015-03-26T10:00:00 Last Updated: 2024-08-06T04:17:32.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 12.2, 12.4, 15.0, 15.1, 15.2, 15.3, and 15.4 and IOS XE 2.5.x, 2.6.x, 3.1.xS through 3.12.xS before 3.12.3S, 3.2.xE through 3.7.xE before 3.7.1E, 3.3.xSG, 3.4.xSG, and 3.13.xS before 3.13.2S allow remote attackers to cause a denial of service (memory consumption and device reload) by sending malformed IKEv2 packets over (1) IPv4 or (2) IPv6, aka Bug ID CSCuo75572. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031978 - http://tools.cisco.com/security/center/viewAle
gram Container: References: - http://www.securitytracker.com/id/1031978 - http://tools.cisco.com/security/center/viewAlert.x?alertId=37815 - http://www.securityfocus.com/bid/73333 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150325-ikev2
CVE ID: CVE-2015-0644 State: PUBLISHED Published: 2015-03-26T10:00:00 Last Updated: 2024-08-06T04:17:32.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: AppNav in Cisco IOS XE 3.8 through 3.10 before 3.10.3S, 3.11 before 3.11.3S, 3.12 before 3.12.1S, 3.13 before 3.13.0S, 3.14 before 3.14.0S, and 3.15 before 3.15.0S allows remote attackers to execute arbitrary code or cause a denial of service (device reload) via a crafted TCP packet, aka Bug ID CSCuo53622. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031981 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150325-iosxe
CVE ID: CVE-2015-0645 State: PUBLISHED Published: 2015-03-26T10:00:00 Last Updated: 2024-08-06T04:17:32.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Layer 4 Redirect (L4R) feature in Cisco IOS XE 2.x and 3.x before 3.10.4S, 3.11 before 3.11.3S, 3.12 before 3.12.2S, 3.13 before 3.13.1S, 3.14 before 3.14.0S, and 3.15 before 3.15.0S allows remote attackers to cause a denial of service (device reload) via malformed (1) IPv4 or (2) IPv6 packets, aka Bug ID CSCuq59131. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031981 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150325-iosxe
CVE ID: CVE-2015-0646 State: PUBLISHED Published: 2015-03-26T10:00:00 Last Updated: 2024-08-06T04:17:32.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the TCP input module in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.3.xXO, 3.5.xE, 3.6.xE, 3.8.xS through 3.10.xS before 3.10.5S, and 3.11.xS and 3.12.xS before 3.12.3S allows remote attackers to cause a denial of service (memory consumption or device reload) by sending crafted TCP packets over (1) IPv4 or (2) IPv6, aka Bug ID CSCum94811. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150325-tcplea
m Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150325-tcpleak - http://www.securityfocus.com/bid/73340 - http://www.securitytracker.com/id/1031980
CVE ID: CVE-2015-0647 State: PUBLISHED Published: 2015-03-26T10:00:00 Last Updated: 2024-08-06T04:17:32.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 12.2, 12.4, 15.0, 15.2, and 15.3 allows remote attackers to cause a denial of service (device reload) via malformed Common Industrial Protocol (CIP) UDP packets, aka Bug ID CSCum98371. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150325-cip
CVE ID: CVE-2015-0648 State: PUBLISHED Published: 2015-03-26T10:00:00 Last Updated: 2024-08-06T04:17:32.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in Cisco IOS 12.2, 12.4, 15.0, 15.2, and 15.3 allows remote attackers to cause a denial of service (memory consumption) via crafted Common Industrial Protocol (CIP) TCP packets, aka Bug ID CSCun49658. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150325-cip
CVE ID: CVE-2015-0649 State: PUBLISHED Published: 2015-03-26T10:00:00 Last Updated: 2024-08-06T04:17:32.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 12.2, 12.4, 15.0, 15.2, and 15.3 allows remote attackers to cause a denial of service (device reload) via malformed Common Industrial Protocol (CIP) TCP packets, aka Bug ID CSCun63514. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150325-cip
CVE ID: CVE-2015-0650 State: PUBLISHED Published: 2015-03-26T10:00:00 Last Updated: 2024-08-06T04:17:32.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Service Discovery Gateway (aka mDNS Gateway) in Cisco IOS 12.2, 12.4, 15.0, 15.1, 15.2, 15.3, and 15.4 and IOS XE 3.9.xS and 3.10.xS before 3.10.4S, 3.11.xS before 3.11.3S, 3.12.xS before 3.12.2S, and 3.13.xS before 3.13.1S allows remote attackers to cause a denial of service (device reload) by sending malformed mDNS UDP packets over (1) IPv4 or (2) IPv6, aka Bug ID CSCup70579. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-2015
CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150325-mdns - http://www.securitytracker.com/id/1031979
CVE ID: CVE-2015-0651 State: PUBLISHED Published: 2015-02-27T02:00:00 Last Updated: 2024-08-06T04:17:32.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the web GUI in Cisco Application Networking Manager (ANM), and Device Manager (DM) on Cisco 4710 Application Control Engine (ACE) appliances, allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuo99753. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0651 - http://www.securitytracker.com/id/1031815 - http://www.securityfocus.com/bid/72796
CVE ID: CVE-2015-0652 State: PUBLISHED Published: 2015-03-13T01:00:00 Last Updated: 2024-08-06T04:17:32.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Session Description Protocol (SDP) implementation in Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway before X8.2 and Cisco TelePresence Conductor before XC2.4 allows remote attackers to cause a denial of service (mishandled exception and device reload) via a crafted media description, aka Bug IDs CSCus96593 and CSCun73192. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031910 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/
ces: - http://www.securitytracker.com/id/1031910 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150311-vcs
CVE ID: CVE-2015-0653 State: PUBLISHED Published: 2015-03-13T01:00:00 Last Updated: 2024-08-06T04:17:32.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: The management interface in Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway before X7.2.4, X8 before X8.1.2, and X8.2 before X8.2.2 and Cisco TelePresence Conductor before X2.3.1 and XC2.4 before XC2.4.1 allows remote attackers to bypass authentication via crafted login parameters, aka Bug IDs CSCur02680 and CSCur05556. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031910 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-s
http://www.securitytracker.com/id/1031910 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150311-vcs
CVE ID: CVE-2015-0654 State: PUBLISHED Published: 2015-03-13T01:00:00 Last Updated: 2024-08-06T04:17:32.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the TLS implementation in MainApp in the management interface in Cisco Intrusion Prevention System (IPS) Software before 7.3(3)E4 allows remote attackers to cause a denial of service (process hang) by establishing many HTTPS sessions, aka Bug ID CSCuq40652. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150311-ips - http://www.securitytracker.com/id/1031908
CVE ID: CVE-2015-0655 State: PUBLISHED Published: 2015-02-28T02:00:00 Last Updated: 2024-08-06T04:17:32.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Unified Web Interaction Manager in Cisco Unified Web and E-Mail Interaction Manager allows remote attackers to inject arbitrary web script or HTML via vectors related to a POST request, aka Bug ID CSCus74184. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0655 - http://www.securitytracker.com/id/1031820 - http://www.securityfocus.com/bid/72824
CVE ID: CVE-2015-0656 State: PUBLISHED Published: 2015-03-04T02:00:00 Last Updated: 2024-08-06T04:17:32.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the login page in Cisco Network Analysis Module (NAM) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCum81269. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0656 - http://www.securitytracker.com/id/1031827
CVE ID: CVE-2015-0657 State: PUBLISHED Published: 2015-03-06T02:00:00 Last Updated: 2024-08-06T04:17:32.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS XR allows remote attackers to cause a denial of service (RSVP process reload) via a malformed RSVP packet, aka Bug ID CSCur69192. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031841 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0657
CVE ID: CVE-2015-0658 State: PUBLISHED Published: 2015-03-28T01:00:00 Last Updated: 2024-08-06T04:17:32.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DHCP implementation in the PowerOn Auto Provisioning (POAP) feature in Cisco NX-OS does not properly restrict the initialization process, which allows remote attackers to execute arbitrary commands as root by sending crafted response packets on the local network, aka Bug ID CSCur14589. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031992 - http://tools.cisco.com/security/center/viewAlert.x?alertId=38062
CVE ID: CVE-2015-0659 State: PUBLISHED Published: 2015-03-06T02:00:00 Last Updated: 2024-08-06T04:17:32.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Autonomic Networking Infrastructure (ANI) implementation in Cisco IOS allows remote attackers to trigger self-referential adjacencies via a crafted Autonomic Networking (AN) message, aka Bug ID CSCup62157. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031845 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0659
CVE ID: CVE-2015-0660 State: PUBLISHED Published: 2015-03-14T01:00:00 Last Updated: 2024-08-06T04:17:32.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Virtual TelePresence Server Software does not properly restrict use of the serial port, which allows local users to execute arbitrary OS commands as root by leveraging vSphere controller administrative privileges, aka Bug ID CSCus61123. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031924 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0660
CVE ID: CVE-2015-0661 State: PUBLISHED Published: 2015-03-06T02:00:00 Last Updated: 2024-08-06T04:17:32.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SNMPv2 implementation in Cisco IOS XR allows remote authenticated users to cause a denial of service (snmpd daemon reload) via a malformed SNMP packet, aka Bug ID CSCur25858. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0661 - http://www.securitytracker.com/id/1031843
CVE ID: CVE-2015-0662 State: PUBLISHED Published: 2015-03-17T01:00:00 Last Updated: 2024-08-06T04:17:32.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco AnyConnect Secure Mobility Client 4.0(.00051) and earlier allows local users to gain privileges via crafted IPC messages that trigger use of root privileges for a software-package installation, aka Bug ID CSCus79385. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=37860 - http://www.securitytracker.com/id/1031933
CVE ID: CVE-2015-0663 State: PUBLISHED Published: 2015-03-17T01:00:00 Last Updated: 2024-08-06T04:17:32.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco AnyConnect Secure Mobility Client 4.0(.00051) and earlier does not properly implement access control for IPC messages, which allows local users to write to arbitrary files via crafted messages, aka Bug ID CSCus79392. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=37863 - http://www.securitytracker.com/id/1031930
CVE ID: CVE-2015-0664 State: PUBLISHED Published: 2015-03-18T23:00:00 Last Updated: 2024-08-06T04:17:32.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IPC channel in Cisco AnyConnect Secure Mobility Client 4.0(.00051) and earlier allows local users to write to arbitrary userspace memory locations, and consequently gain privileges, via crafted messages, aka Bug ID CSCus79195. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=37861 - http://www.securitytracker.com/id/1031932
CVE ID: CVE-2015-0665 State: PUBLISHED Published: 2015-03-17T01:00:00 Last Updated: 2024-08-06T04:17:32.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Hostscan module in Cisco AnyConnect Secure Mobility Client 4.0(.00051) and earlier allows local users to write to arbitrary files via crafted IPC messages, aka Bug ID CSCus79173. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=37862 - http://www.securitytracker.com/id/1031931
CVE ID: CVE-2015-0666 State: PUBLISHED Published: 2015-04-03T10:00:00.000Z Last Updated: 2025-10-22T00:05:32.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) before 7.1(1) allows remote attackers to read arbitrary files via a crafted pathname, aka Bug ID CSCus00241. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securitytracker.com/id/1032009 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150401-dcnm
CVE ID: CVE-2015-0667 State: PUBLISHED Published: 2015-03-18T23:00:00 Last Updated: 2024-08-06T04:17:32.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Management Interface on Cisco Content Services Switch (CSS) 11500 devices 8.20.4.02 and earlier allows remote attackers to bypass intended restrictions on local-network device access via crafted SSH packets, aka Bug ID CSCut14855. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031939 - http://tools.cisco.com/security/center/viewAlert.x?alertId=37889