Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-4163 State: PUBLISHED Published: 2015-06-15T15:00:00 Last Updated: 2024-08-06T06:04:02.761Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNTTABOP_swap_grant_ref in Xen 4.2 through 4.5 does not check the grant table operation version, which allows local guest domains to cause a denial of service (NULL pointer dereference) via a hypercall without a GNTTABOP_setup_table or GNTTABOP_set_version. Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX206006 - http://www.debian.org/security/2015/dsa-3286 - http://www.securityfocus.com/bid/75141 - http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00030.html
86 - http://www.securityfocus.com/bid/75141 - http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00030.html - http://support.citrix.com/article/CTX201145 - http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00007.html - http://xenbits.xen.org/xsa/advisory-134.html - https://security.gentoo.org/glsa/201604-03 - http://www.securitytracker.com/id/1032568 - http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00004.html
CVE ID: CVE-2015-4164 State: PUBLISHED Published: 2015-06-15T15:00:00 Last Updated: 2024-08-06T06:04:02.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: The compat_iret function in Xen 3.1 through 4.5 iterates the wrong way through a loop, which allows local 32-bit PV guest administrators to cause a denial of service (large loop and system hang) via a hypercall_iret call with EFLAGS.VM set. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75149 - http://www.debian.org/security/2015/dsa-3286 - http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00029.html - http://lists.opensuse.org/opensuse-security-announce/2015-09/
use.org/opensuse-security-announce/2015-06/msg00029.html - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00027.html - http://www.securitytracker.com/id/1032569 - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00014.html - http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00030.html - http://support.citrix.com/article/CTX201145 - http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00007.html - http://xenbits.xen.org/xsa/advisory-136.html - https://security.gentoo.org/glsa/201604-03 - http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00004.html
CVE ID: CVE-2015-4165 State: PUBLISHED Published: 2017-08-09T16:00:00 Last Updated: 2024-08-06T06:04:02.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: The snapshot API in Elasticsearch before 1.6.0 when another application exists on the system that can read Lucene files and execute code from them, is accessible by the attacker, and the Java VM on which Elasticsearch is running can write to a location that the other application can read and execute from, allows remote authenticated users to write to and create arbitrary snapshot metadata files, and potentially execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.c
ly execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/132234/Elasticsearch-1.5.2-File-Creation.html - http://www.securityfocus.com/archive/1/535727/100/0/threaded - http://www.securityfocus.com/bid/75113 - https://bugzilla.redhat.com/show_bug.cgi?id=1230761 - http://www.securityfocus.com/archive/1/536855/100/0/threaded - https://www.elastic.co/community/security/
CVE ID: CVE-2015-4166 State: PUBLISHED Published: 2017-03-23T20:00:00 Last Updated: 2024-08-06T06:04:02.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cloudera Key Trustee Server before 5.4.3 does not store keys synchronously, which might allow attackers to have unspecified impact via vectors related to loss of an encryption key. Additional Analyst Notes: - CVE Program Container: References: - https://www.cloudera.com/documentation/other/security-bulletins/topics/csb_topic_1.html#concept_jpc_mwm_js
CVE ID: CVE-2015-4167 State: PUBLISHED Published: 2015-08-05T18:00:00 Last Updated: 2024-08-06T06:04:03.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: The udf_read_inode function in fs/udf/inode.c in the Linux kernel before 3.19.1 does not validate certain length values, which allows local users to cause a denial of service (incorrect data representation or integer overflow, and OOPS) via a crafted UDF filesystem. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2015/dsa-3290 - http://www.ubuntu.com/usn/USN-2631-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1228204 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.19.1
1-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1228204 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.19.1 - http://www.ubuntu.com/usn/USN-2632-1 - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00021.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00049.html - http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00011.html - https://github.com/torvalds/linux/commit/23b133bdc452aa441fcb9b82cbf6dd05cfd342d0 - http://www.debian.org/security/2015/dsa-3313 - http://www.openwall.com/lists/oss-security/2015/06/02/6 - http://www.securityfocus.com/bid/74963 - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00018.html -
- http://www.securityfocus.com/bid/74963 - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00018.html - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=23b133bdc452aa441fcb9b82cbf6dd05cfd342d0 - http://www.securitytracker.com/id/1033187
CVE ID: CVE-2015-4169 State: REJECTED Published: 2022-07-08T17:37:10 Last Updated: 2022-07-08T17:37:10 Description: No description available.
CVE ID: CVE-2015-4170 State: PUBLISHED Published: 2016-05-02T10:00:00 Last Updated: 2024-08-06T06:04:02.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the ldsem_cmpxchg function in drivers/tty/tty_ldsem.c in the Linux kernel before 3.13-rc4-next-20131218 allows local users to cause a denial of service (ldsem_down_read and ldsem_down_write deadlock) by establishing a new tty thread during shutdown of a previous tty thread. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1218879 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cf872776fc84128bb779ce2b83a37c884c3203ae - htt
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cf872776fc84128bb779ce2b83a37c884c3203ae - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - https://github.com/torvalds/linux/commit/cf872776fc84128bb779ce2b83a37c884c3203ae - http://www.openwall.com/lists/oss-security/2015/05/26/1 - https://www.kernel.org/pub/linux/kernel/next/patch-v3.13-rc4-next-20131218.xz - https://access.redhat.com/errata/RHSA-2016:1395 - http://www.securityfocus.com/bid/74820
CVE ID: CVE-2015-4171 State: PUBLISHED Published: 2015-06-10T18:00:00 Last Updated: 2024-08-06T06:04:03.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: strongSwan 4.3.0 through 5.x before 5.3.2 and strongSwan VPN Client before 1.4.6, when using EAP or pre-shared keys for authenticating an IKEv2 connection, does not enforce server authentication restrictions until the entire authentication process is complete, which allows remote servers to obtain credentials by using a valid certificate and then reading the responses. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032514 - https://www.strongswan.org/blog/2015/06/08/strongsw
Container: References: - http://www.securitytracker.com/id/1032514 - https://www.strongswan.org/blog/2015/06/08/strongswan-vulnerability-%2528cve-2015-4171%2529.html - http://lists.opensuse.org/opensuse-updates/2015-06/msg00040.html - http://www.openwall.com/lists/oss-security/2015/06/08/4 - https://www.suse.com/security/cve/CVE-2015-4171.html - http://www.openwall.com/lists/oss-security/2015/05/29/6 - http://www.openwall.com/lists/oss-security/2015/05/29/7 - https://play.google.com/store/apps/details?id=org.strongswan.android - http://www.ubuntu.com/usn/USN-2628-1 - http://www.debian.org/security/2015/dsa-3282 - http://www.securityfocus.com/bid/74933 - https://bugzilla.suse.com/show_bug.cgi
/www.debian.org/security/2015/dsa-3282 - http://www.securityfocus.com/bid/74933 - https://bugzilla.suse.com/show_bug.cgi?id=933591
CVE ID: CVE-2015-4173 State: PUBLISHED Published: 2015-08-26T19:00:00 Last Updated: 2024-08-06T06:04:02.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unquoted Windows search path vulnerability in the autorun value in Dell SonicWall NetExtender before 7.5.227 and 8.0.x before 8.0.238, as used in the SRA firmware before 7.5.1.2-40sv and 8.x before 8.0.0.3-23sv, allows local users to gain privileges via a Trojan horse program in the %SYSTEMDRIVE% folder. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/133302/Dell-SonicWall-NetExtender-7.5.215-Privilege-Escalation.html - http://www.securityfocus.com/archive/1/536303/100/0/th
02/Dell-SonicWall-NetExtender-7.5.215-Privilege-Escalation.html - http://www.securityfocus.com/archive/1/536303/100/0/threaded - http://www.securitytracker.com/id/1033417 - https://support.software.dell.com/product-notification/157537
CVE ID: CVE-2015-4174 State: PUBLISHED Published: 2015-06-28T10:00:00 Last Updated: 2024-08-06T06:04:02.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the integrated web server on the Siemens Climatix BACnet/IP communication module with firmware before 10.34 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-142512.pdf - https://ics-cert.us-cert.gov/advisories/ICSA-15-176-01 - http://www.securityfocus.com/bid/75427 - http://packetstormsecurity.com/fi
-cert.us-cert.gov/advisories/ICSA-15-176-01 - http://www.securityfocus.com/bid/75427 - http://packetstormsecurity.com/files/132514/Climatix-BACnet-IP-Communication-Module-Cross-Site-Scripting.html
CVE ID: CVE-2015-4176 State: PUBLISHED Published: 2016-05-02T10:00:00 Last Updated: 2024-08-06T06:04:02.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: fs/namespace.c in the Linux kernel before 4.0.2 does not properly support mount connectivity, which allows local users to read arbitrary files by leveraging user-namespace root access for deletion of a file or directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/06/04/5 - https://bugzilla.redhat.com/show_bug.cgi?id=1249442 - https://github.com/torvalds/linux/commit/e0c9c0afd2fc958ffa34b697972721d81df8a56f - http://www.kernel.org/pub/linux/kernel/v4.x/Change
.com/torvalds/linux/commit/e0c9c0afd2fc958ffa34b697972721d81df8a56f - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.0.2 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e0c9c0afd2fc958ffa34b697972721d81df8a56f
CVE ID: CVE-2015-4177 State: PUBLISHED Published: 2016-05-02T10:00:00 Last Updated: 2024-08-06T06:04:02.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: The collect_mounts function in fs/namespace.c in the Linux kernel before 4.0.5 does not properly consider that it may execute after a path has been unmounted, which allows local users to cause a denial of service (system crash) by leveraging user-namespace root access for an MNT_DETACH umount2 system call. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cd4a40174b71acd021877341684d8bb1dc8ea4ae - http://openwall.com/lists/oss-security/201
/git/torvalds/linux.git/commit/?id=cd4a40174b71acd021877341684d8bb1dc8ea4ae - http://openwall.com/lists/oss-security/2015/05/29/5 - https://bugzilla.redhat.com/show_bug.cgi?id=1248486 - https://github.com/torvalds/linux/commit/cd4a40174b71acd021877341684d8bb1dc8ea4ae - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.0.5 - http://openwall.com/lists/oss-security/2015/05/29/10 - http://www.openwall.com/lists/oss-security/2015/06/04/5
CVE ID: CVE-2015-4178 State: PUBLISHED Published: 2016-05-02T10:00:00 Last Updated: 2024-08-06T06:04:02.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: The fs_pin implementation in the Linux kernel before 4.0.5 does not ensure the internal consistency of a certain list data structure, which allows local users to cause a denial of service (system crash) by leveraging user-namespace root access for an MNT_DETACH umount2 system call, related to fs/fs_pin.c and include/linux/fs_pin.h. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2015/05/29/5 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.0.5 - https://bugzilla.
ll.com/lists/oss-security/2015/05/29/5 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.0.5 - https://bugzilla.redhat.com/show_bug.cgi?id=1249849 - http://openwall.com/lists/oss-security/2015/05/29/10 - http://www.openwall.com/lists/oss-security/2015/06/04/5 - https://github.com/torvalds/linux/commit/820f9f147dcce2602eefd9b575bbbd9ea14f0953 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=820f9f147dcce2602eefd9b575bbbd9ea14f0953
CVE ID: CVE-2015-4179 State: PUBLISHED Published: 2018-02-05T16:00:00 Last Updated: 2024-08-06T06:04:03.101Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the Codestyling Localization plugin 1.99.30 and earlier for Wordpress. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/06/13/3 - http://www.openwall.com/lists/oss-security/2015/06/03/3 - http://www.openwall.com/lists/oss-security/2015/06/04/11
CVE ID: CVE-2015-4180 State: PUBLISHED Published: 2017-08-25T18:00:00 Last Updated: 2024-08-06T06:04:02.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in get_file.php in phpMyBackupPro 2.1 through 2.4 allows remote attackers to read arbitrary files via a .. (dot dot) in the view parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: this vulnerability exists due to an incomplete fix to CVE-2009-4050. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/06/04/10
CVE ID: CVE-2015-4181 State: PUBLISHED Published: 2017-08-25T18:00:00 Last Updated: 2024-08-06T06:04:03.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in get_file.php in phpMyBackupPro 2.1 through 2.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the view parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: this vulnerability exists due to an incomplete fix to CVE-2015-4180. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/06/04/10
CVE ID: CVE-2015-4182 State: PUBLISHED Published: 2015-06-12T14:00:00 Last Updated: 2024-08-06T06:04:02.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: The administrative web interface in Cisco Identity Services Engine (ISE) before 1.3 allows remote authenticated users to bypass intended access restrictions, and obtain sensitive information or change settings, via unspecified vectors, aka Bug ID CSCui72087. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75152 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39299 - http://www.securitytracker.com/id/1032579
CVE ID: CVE-2015-4183 State: PUBLISHED Published: 2015-06-17T10:00:00 Last Updated: 2024-08-06T06:04:02.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco UCS Central Software 1.2(1a) allows local users to gain privileges for OS command execution via a crafted CLI parameter, aka Bug ID CSCut32795. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=39324 - http://www.securityfocus.com/bid/75205 - http://www.securitytracker.com/id/1032584
CVE ID: CVE-2015-4184 State: PUBLISHED Published: 2015-06-13T10:00:00 Last Updated: 2024-08-06T06:04:03.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: The anti-spam scanner on Cisco Email Security Appliance (ESA) devices 3.3.1-09, 7.5.1-gpl-022, and 8.5.6-074 allows remote attackers to bypass intended e-mail restrictions via a malformed DNS SPF record, aka Bug IDs CSCuu35853 and CSCuu37733. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032582 - http://www.securityfocus.com/bid/75181 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39339
CVE ID: CVE-2015-4185 State: PUBLISHED Published: 2015-06-13T10:00:00 Last Updated: 2024-08-06T06:04:02.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TCL interpreter in Cisco IOS 15.2 does not properly maintain the vty state, which allows local users to gain privileges by starting a session very soon after a TCL script execution, aka Bug ID CSCuq24202. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032581 - http://www.securityfocus.com/bid/72310 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39343
CVE ID: CVE-2015-4186 State: PUBLISHED Published: 2015-06-17T10:00:00 Last Updated: 2024-08-06T06:04:03.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: The diagnostics subsystem in the administrative web interface on Cisco Virtualization Experience (aka VXC) Client 6215 devices with firmware 11.2(27.4) allows local users to gain privileges for OS command execution via a crafted option value, aka Bug ID CSCug54412. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75195 - http://www.securitytracker.com/id/1032583 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39347
CVE ID: CVE-2015-4188 State: PUBLISHED Published: 2015-06-17T10:00:00 Last Updated: 2024-08-06T06:04:02.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Manager interface in Cisco Prime Collaboration 10.5(1) allows remote attackers to execute arbitrary SQL commands via a crafted URL, aka Bug IDs CSCuu29910, CSCuu29928, and CSCuu59104. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032592 - http://www.securityfocus.com/bid/75268 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39365
CVE ID: CVE-2015-4189 State: PUBLISHED Published: 2015-06-23T14:00:00 Last Updated: 2024-08-06T06:04:02.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Cisco Data Center Analytics Framework (DCAF) 1.4 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCun26807. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=39377 - http://www.securityfocus.com/bid/75349
CVE ID: CVE-2015-4190 State: PUBLISHED Published: 2015-06-17T10:00:00 Last Updated: 2024-08-06T06:04:03.034Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Cloud Portal in Cisco Prime Service Catalog 9.4.1_vortex on Cloud Portal appliances allows man-in-the-middle attackers to modify data via unspecified vectors, aka Bug ID CSCuh19683. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75271 - http://www.securitytracker.com/id/1032593 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39380 - http://www.securitytracker.com/id/1032594
CVE ID: CVE-2015-4191 State: PUBLISHED Published: 2015-06-19T01:00:00 Last Updated: 2024-08-06T06:04:03.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS XR 5.2.1 allows remote attackers to cause a denial of service (ipv6_io service reload) via a malformed IPv6 packet, aka Bug ID CSCuq95565. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=39383 - http://www.securitytracker.com/id/1032615 - http://www.securityfocus.com/bid/75260
CVE ID: CVE-2015-4194 State: PUBLISHED Published: 2015-06-19T01:00:00 Last Updated: 2024-08-06T06:04:02.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web-based administrative interface in Cisco WebEx Meeting Center provides different error messages for failed login attempts depending on whether the username exists or corresponds to a privileged account, which allows remote attackers to enumerate account names and obtain sensitive information via a series of requests, aka Bug ID CSCuf28861. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=39420 - http://www.securityfocus.com/bid/75296 - http://www
- http://tools.cisco.com/security/center/viewAlert.x?alertId=39420 - http://www.securityfocus.com/bid/75296 - http://www.securitytracker.com/id/1032660
CVE ID: CVE-2015-4195 State: PUBLISHED Published: 2015-06-19T01:00:00 Last Updated: 2024-08-06T06:04:03.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS XR 5.1.1.K9SEC allows remote authenticated users to cause a denial of service (vty error, and SSH and TELNET outage) via a crafted disconnect action within an SSH session, aka Bug ID CSCul63127. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75295 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39402 - http://www.securitytracker.com/id/1032661
CVE ID: CVE-2015-4196 State: PUBLISHED Published: 2015-07-04T10:00:00 Last Updated: 2024-08-06T06:04:03.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: Platform Software before 4.4.5 in Cisco Unified Communications Domain Manager (CDM) 8.x has a hardcoded password for a privileged account, which allows remote attackers to obtain root access by leveraging knowledge of this password and entering it in an SSH session, aka Bug ID CSCuq45546. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150701-cucdm - http://www.securitytracker.com/id/1032774
CVE ID: CVE-2015-4197 State: PUBLISHED Published: 2015-06-20T14:00:00 Last Updated: 2024-08-06T06:04:02.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco NX-OS 5.2(5) on Nexus 7000 devices allows remote attackers to cause a denial of service (device crash) by sending a malformed LLDP packet on the local network, aka Bug ID CSCud89415. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75324 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39421 - http://www.securitytracker.com/id/1032675
CVE ID: CVE-2015-4198 State: PUBLISHED Published: 2015-06-20T14:00:00 Last Updated: 2024-08-06T06:04:02.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the web framework on Cisco Web Security Appliance (WSA) devices with software 8.5.0-497 allows remote attackers to inject arbitrary web script or HTML via an unspecified HTTP header, aka Bug ID CSCuu24409. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=39422 - http://www.securityfocus.com/bid/75326 - http://www.securitytracker.com/id/1032676