Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
rafted user input at the CLI, using this script file to escalate their privilege level and execute commands as root. A successful exploit could allow the attacker to acquire root-level privileges and take full control of the appliance. The user has to be logged-in to the device with valid credentials for a specific set of users. The Cisco Policy Suite application is vulnerable when running software versions 10.0.0, 10.1.0, or 11.0.0. Cisco Bug IDs: CSCvc07366. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98521 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-cps
CVE ID: CVE-2017-6624 State: PUBLISHED Published: 2017-05-03T21:00:00 Last Updated: 2024-08-05T15:33:20.457Z Vendors: n/a Products: Cisco CallManager Express Problem Types: CWE-264 Description: A vulnerability in Cisco IOS 15.5(3)M Software for Cisco CallManager Express (CME) could allow an unauthenticated, remote attacker to make unauthorized phone calls. The vulnerability is due to a configuration restriction in the toll-fraud protections component of the affected software. An attacker could exploit this vulnerability to place unauthorized, long-distance phone calls by using an affected system. Cisco Bug IDs: CSCuy40939. Additional Analyst Notes: - CVE Program Container: References: - http
ing an affected system. Cisco Bug IDs: CSCuy40939. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98283 - http://www.securitytracker.com/id/1038398 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170503-cme1
CVE ID: CVE-2017-6625 State: PUBLISHED Published: 2017-05-03T21:00:00 Last Updated: 2024-08-05T15:33:20.441Z Vendors: n/a Products: Cisco Firepower Threat Defense and Cisco ASA with FirePOWER Module Problem Types: CWE-399 Description: A "Cisco Firepower Threat Defense 6.0.0 through 6.2.2 and Cisco ASA with FirePOWER Module Denial of Service" vulnerability in the access control policy of Cisco Firepower System Software could allow an authenticated, remote attacker to cause an affected system to stop inspecting and processing packets, resulting in a denial of service (DoS) condition. The vulnerability is due to improper SSL policy handling by the affected software when packets are passed throu
ndition. The vulnerability is due to improper SSL policy handling by the affected software when packets are passed through the sensing interfaces of an affected system. An attacker could exploit this vulnerability by sending crafted packets through a targeted system. This vulnerability affects Cisco Firepower System Software that is configured with the SSL policy feature. Cisco Bug IDs: CSCvc84361. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98292 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170503-ftd - http://www.securitytracker.com/id/1038397
CVE ID: CVE-2017-6626 State: PUBLISHED Published: 2017-05-03T21:00:00 Last Updated: 2024-08-05T15:33:20.464Z Vendors: n/a Products: Cisco Finesse for Cisco Unified Contact Center Enterprise Problem Types: CWE-200 Description: A vulnerability in the Cisco Finesse Notification Service for Cisco Unified Contact Center Enterprise (UCCE) 11.5(1) and 11.6(1) could allow an unauthenticated, remote attacker to retrieve information from agents using the Finesse Desktop. The vulnerability is due to the existence of a user account that has an undocumented, hard-coded password. An attacker could exploit this vulnerability by using the hard-coded credentials to subscribe to the Finesse Notification Servi
cker could exploit this vulnerability by using the hard-coded credentials to subscribe to the Finesse Notification Service, which would allow the attacker to receive notifications when an agent signs in or out of the Finesse Desktop, when information about an agent changes, or when an agent's state changes. Cisco Bug IDs: CSCvc08314. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170503-finesse-ucce - http://www.securityfocus.com/bid/98291 - http://www.securitytracker.com/id/1038396
CVE ID: CVE-2017-6627 State: PUBLISHED Published: 2017-09-07T21:00:00.000Z Last Updated: 2025-10-21T23:55:34.940Z Vendors: n/a Products: Cisco IOS and Cisco IOS XE Problem Types: CWE-399 Description: A vulnerability in the UDP processing code of Cisco IOS 15.1, 15.2, and 15.4 and IOS XE 3.14 through 3.18 could allow an unauthenticated, remote attacker to cause the input queue of an affected system to hold UDP packets, causing an interface queue wedge and a denial of service (DoS) condition. The vulnerability is due to Cisco IOS Software application changes that create UDP sockets and leave the sockets idle without closing them. An attacker could exploit this vulnerability by sending UDP pack
ockets and leave the sockets idle without closing them. An attacker could exploit this vulnerability by sending UDP packets with a destination port of 0 to an affected device. A successful exploit could allow the attacker to cause UDP packets to be held in the input interfaces queue, resulting in a DoS condition. The input interface queue will stop holding UDP packets when it receives 250 packets. Cisco Bug IDs: CSCup10024, CSCva55744, CSCva95506. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/100644 - http://www.securitytracker.com/id/1039289 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/ci
4 - http://www.securitytracker.com/id/1039289 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-ios-udp
CVE ID: CVE-2017-6628 State: PUBLISHED Published: 2017-05-03T21:00:00 Last Updated: 2024-08-05T15:33:20.451Z Vendors: n/a Products: Cisco Wide Area Application Services SMART-SSL Accelerator Problem Types: CWE-399 Description: A vulnerability in SMART-SSL Accelerator functionality for Cisco Wide Area Application Services (WAAS) 6.2.1, 6.2.1a, and 6.2.3a could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition where the WAN optimization could stop functioning while the process restarts. The vulnerability is due to a Secure Sockets Layer/Transport Layer Security (SSL/TLS) alert being incorrectly handled when in a specific SSL/TLS connection state. An attacke
ansport Layer Security (SSL/TLS) alert being incorrectly handled when in a specific SSL/TLS connection state. An attacker could exploit this vulnerability by establishing a SMART-SSL connection through the targeted device. The attacker would then send a crafted stream of SSL/TLS traffic. An exploit could allow the attacker to cause a DoS condition where WAN optimization could stop processing traffic for a short period of time. Cisco Bug IDs: CSCvb71133. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98294 - http://www.securitytracker.com/id/1038399 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170503-waas
CVE ID: CVE-2017-6629 State: PUBLISHED Published: 2017-05-03T21:00:00 Last Updated: 2024-08-05T15:33:20.463Z Vendors: n/a Products: Cisco Unity Connection Problem Types: CWE-22 Description: A vulnerability in the ImageID parameter of Cisco Unity Connection 10.5(2) could allow an unauthenticated, remote attacker to access files in arbitrary locations on the filesystem of an affected device. The issue is due to improper sanitization of user-supplied input in HTTP POST parameters that describe filenames. An attacker could exploit this vulnerability by using directory traversal techniques to submit a path to a desired file location. Cisco Bug IDs: CSCvd90118. Additional Analyst Notes: - CVE Prog
techniques to submit a path to a desired file location. Cisco Bug IDs: CSCvd90118. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170503-cuc - http://www.securitytracker.com/id/1038400 - http://www.securityfocus.com/bid/98286
CVE ID: CVE-2017-6630 State: PUBLISHED Published: 2017-05-22T01:00:00 Last Updated: 2024-08-05T15:33:20.539Z Vendors: n/a Products: Cisco IP Phone 8851 Problem Types: CWE-399 Description: A vulnerability in the Session Initiation Protocol (SIP) implementation of Cisco IP Phone 8851 11.0(0.1) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to an abnormal SIP message. An attacker could exploit this vulnerability by manipulating the CANCEL packet. An exploit could allow the attacker to cause a disruption of service to the phone. Cisco Bug IDs: CSCvc34795. Additional Analyst Notes: - CVE Program Container: References: - http:
service to the phone. Cisco Bug IDs: CSCvc34795. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038511 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-sip - http://www.securityfocus.com/bid/98533
CVE ID: CVE-2017-6631 State: PUBLISHED Published: 2017-09-07T21:00:00 Last Updated: 2024-08-05T15:33:20.455Z Vendors: n/a Products: Cisco Yes Set-Top Box Problem Types: CWE-399 Description: A vulnerability in the HTTP remote procedure call (RPC) service of set-top box (STB) receivers manufactured by Cisco for Yes could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability exists because the firmware of an affected device fails to handle certain XML values that are passed to the HTTP RPC service listening on the local subnet of the device. An attacker could exploit this vulnerability by submitting a malformed request to
ing on the local subnet of the device. An attacker could exploit this vulnerability by submitting a malformed request to an affected device. A successful attack could cause the affected device to restart, resulting in a DoS condition. Yes has updated the affected devices with firmware that addresses this vulnerability. Customers are not required to take action. Vulnerable Products: This vulnerability affects YesMaxTotal, YesMax HD, and YesQuattro STB devices. Cisco Bug IDs: CSCvd08812. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100672 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-stb
CVE ID: CVE-2017-6632 State: PUBLISHED Published: 2017-05-22T01:00:00 Last Updated: 2024-08-05T15:33:20.462Z Vendors: n/a Products: Cisco FirePOWER System Software Problem Types: CWE-399 Description: A vulnerability in the logging configuration of Secure Sockets Layer (SSL) policies for Cisco FirePOWER System Software 5.3.0 through 6.2.2 could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition due to high consumption of system resources. The vulnerability is due to the logging of certain TCP packets by the affected software. An attacker could exploit this vulnerability by sending a flood of crafted TCP packets to an affected device. A successful exploit co
ould exploit this vulnerability by sending a flood of crafted TCP packets to an affected device. A successful exploit could allow the attacker to cause a DoS condition. The success of an exploit is dependent on how an administrator has configured logging for SSL policies for a device. This vulnerability affects Cisco FirePOWER System Software that is configured to log connections by using SSL policy default actions. Cisco Bug IDs: CSCvd07072. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-fpwr - http://www.securityfocus.com/bid/98523
CVE ID: CVE-2017-6633 State: PUBLISHED Published: 2017-05-22T01:00:00 Last Updated: 2024-08-05T15:33:20.472Z Vendors: n/a Products: Cisco UCS C-Series Rack Servers Problem Types: CWE-119 Description: A vulnerability in the TCP throttling process of Cisco UCS C-Series Rack Servers 3.0(0.234) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient rate-limiting protection. An attacker could exploit this vulnerability by sending a high rate of TCP SYN packets to a specific TCP listening port on an affected device. An exploit could allow the attacker to cause a specific TCP listening port to stop
listening port on an affected device. An exploit could allow the attacker to cause a specific TCP listening port to stop accepting new connections, resulting in a DoS condition. Cisco Bug IDs: CSCva65544. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038513 - http://www.securityfocus.com/bid/98525 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-ucsc
CVE ID: CVE-2017-6634 State: PUBLISHED Published: 2017-05-22T01:00:00 Last Updated: 2024-08-05T15:33:20.439Z Vendors: n/a Products: Cisco Industrial Ethernet 1000 Series Switches Problem Types: CWE-352 Description: A vulnerability in the Device Manager web interface of Cisco Industrial Ethernet 1000 Series Switches 1.3 could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack against a user of an affected system. The vulnerability is due to insufficient CSRF protection by the Device Manager web interface. An attacker could exploit this vulnerability by persuading a user of the interface to follow a malicious link or visit an attacker-controlled web
this vulnerability by persuading a user of the interface to follow a malicious link or visit an attacker-controlled website. A successful exploit could allow the attacker to submit arbitrary requests to an affected device via the Device Manager web interface and with the privileges of the user. Cisco Bug IDs: CSCvc88811. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98524 - http://www.securitytracker.com/id/1038517 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-ie1000csrf
CVE ID: CVE-2017-6635 State: PUBLISHED Published: 2017-05-22T01:00:00 Last Updated: 2024-08-05T15:33:20.450Z Vendors: n/a Products: Cisco Prime Collaboration Provisioning Problem Types: CWE-264 Description: A vulnerability in the web interface of Cisco Prime Collaboration Provisioning Software (prior to Release 12.1) could allow an authenticated, remote attacker to delete any file from an affected system. The vulnerability exists because the affected software does not perform proper input validation of HTTP requests and fails to apply role-based access controls (RBACs) to requested HTTP URLs. An attacker could exploit this vulnerability by sending a crafted HTTP request that uses directory t
equested HTTP URLs. An attacker could exploit this vulnerability by sending a crafted HTTP request that uses directory traversal techniques to submit a path to a desired file location on an affected system. A successful exploit could allow the attacker to delete any file from the system. Cisco Bug IDs: CSCvc99597. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038514 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-pcp3 - http://www.securityfocus.com/bid/98535
CVE ID: CVE-2017-6636 State: PUBLISHED Published: 2017-05-22T01:00:00 Last Updated: 2024-08-05T15:33:20.473Z Vendors: n/a Products: Cisco Prime Collaboration Provisioning Problem Types: CWE-22 Description: A vulnerability in the web interface of Cisco Prime Collaboration Provisioning Software (prior to Release 11.1) could allow an authenticated, remote attacker to view any file on an affected system. The vulnerability exists because the affected software does not perform proper input validation of HTTP requests and fails to apply role-based access controls (RBACs) to requested HTTP URLs. An attacker could exploit this vulnerability by sending a crafted HTTP request that uses directory traver
ted HTTP URLs. An attacker could exploit this vulnerability by sending a crafted HTTP request that uses directory traversal techniques to submit a path to a desired file location on an affected system. A successful exploit could allow the attacker to view any file on the system. Cisco Bug IDs: CSCvc99604. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98526 - http://www.securitytracker.com/id/1038515 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-pcp4
CVE ID: CVE-2017-6637 State: PUBLISHED Published: 2017-05-22T01:00:00 Last Updated: 2024-08-05T15:33:20.434Z Vendors: n/a Products: Cisco Prime Collaboration Provisioning Problem Types: CWE-264 Description: A vulnerability in the web interface of Cisco Prime Collaboration Provisioning Software (prior to Release 11.1) could allow an authenticated, remote attacker to delete any file from an affected system. The vulnerability exists because the affected software does not perform proper input validation of HTTP requests and fails to apply role-based access controls (RBACs) to requested HTTP URLs. An attacker could exploit this vulnerability by sending a crafted HTTP request that uses directory t
equested HTTP URLs. An attacker could exploit this vulnerability by sending a crafted HTTP request that uses directory traversal techniques to submit a path to a desired file location on an affected system. A successful exploit could allow the attacker to delete any file from the system. Cisco Bug IDs: CSCvc99618. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98530 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-pcp5 - http://www.securitytracker.com/id/1038515
CVE ID: CVE-2017-6638 State: PUBLISHED Published: 2017-06-08T13:00:00 Last Updated: 2024-08-05T15:33:20.448Z Vendors: n/a Products: Cisco AnyConnect Local Privilege Escalation Vulnerability Problem Types: CWE-264 Description: A vulnerability in how DLL files are loaded with Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to install and run an executable file with privileges equivalent to the Microsoft Windows SYSTEM account. The vulnerability is due to incomplete input validation of path and file names of a DLL file before it is loaded. An attacker could exploit this vulnerability by creating a malicious DLL file and installing it in a specifi
is loaded. An attacker could exploit this vulnerability by creating a malicious DLL file and installing it in a specific system directory. A successful exploit could allow the attacker to execute commands on the underlying Microsoft Windows host with privileges equivalent to the SYSTEM account. The attacker would need valid user credentials to exploit this vulnerability. This vulnerability affects all Cisco AnyConnect Secure Mobility Client for Windows software versions prior to 4.4.02034. Cisco Bug IDs: CSCvc97928. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98938 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/c
nces: - http://www.securityfocus.com/bid/98938 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-anyconnect - http://www.securitytracker.com/id/1038627
CVE ID: CVE-2017-6639 State: PUBLISHED Published: 2017-06-08T13:00:00 Last Updated: 2024-08-05T15:33:20.460Z Vendors: n/a Products: Cisco Prime Data Center Network Manager Debug Remote Code Execution Vulnerability Problem Types: CWE-16 Description: A vulnerability in the role-based access control (RBAC) functionality of Cisco Prime Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to access sensitive information or execute arbitrary code with root privileges on an affected system. The vulnerability is due to the lack of authentication and authorization mechanisms for a debugging tool that was inadvertently enabled in the affected software. An attacker could e
thorization mechanisms for a debugging tool that was inadvertently enabled in the affected software. An attacker could exploit this vulnerability by remotely connecting to the debugging tool via TCP. A successful exploit could allow the attacker to access sensitive information about the affected software or execute arbitrary code with root privileges on the affected system. This vulnerability affects Cisco Prime Data Center Network Manager (DCNM) Software Releases 10.1(1) and 10.1(2) for Microsoft Windows, Linux, and Virtual Appliance platforms. Cisco Bug IDs: CSCvd09961. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038626 - https://tool
dditional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038626 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-dcnm1 - http://www.securityfocus.com/bid/98935 - https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesb3p03762en_us
CVE ID: CVE-2017-6640 State: PUBLISHED Published: 2017-06-08T13:00:00 Last Updated: 2024-08-05T15:33:20.445Z Vendors: n/a Products: Cisco Prime Data Center Network Manager Server Static Credential Vulnerability Problem Types: CWE-264 Description: A vulnerability in Cisco Prime Data Center Network Manager (DCNM) Software could allow an unauthenticated, remote attacker to log in to the administrative console of a DCNM server by using an account that has a default, static password. The account could be granted root- or system-level privileges. The vulnerability exists because the affected software has a default user account that has a default, static password. The user account is created automa
the affected software has a default user account that has a default, static password. The user account is created automatically when the software is installed. An attacker could exploit this vulnerability by connecting remotely to an affected system and logging in to the affected software by using the credentials for this default user account. A successful exploit could allow the attacker to use this default user account to log in to the affected software and gain access to the administrative console of a DCNM server. This vulnerability affects Cisco Prime Data Center Network Manager (DCNM) Software releases prior to Release 10.2(1) for Microsoft Windows, Linux, and Virtual Appliance platfor
rk Manager (DCNM) Software releases prior to Release 10.2(1) for Microsoft Windows, Linux, and Virtual Appliance platforms. Cisco Bug IDs: CSCvd95346. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038625 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-dcnm2 - http://www.securityfocus.com/bid/98937
CVE ID: CVE-2017-6641 State: PUBLISHED Published: 2017-05-22T01:00:00 Last Updated: 2024-08-05T15:33:20.457Z Vendors: n/a Products: Cisco Remote Expert Manager Problem Types: CWE-399 Description: A vulnerability in the TCP connection handling functionality of Cisco Remote Expert Manager Software 11.0.0 could allow an unauthenticated, remote attacker to disable TCP ports and cause a denial of service (DoS) condition on an affected system. The vulnerability is due to a lack of rate-limiting functionality in the TCP Listen application of the affected software. An attacker could exploit this vulnerability by sending a crafted TCP traffic stream in which specific types of TCP packets are flooded