Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-3366 State: PUBLISHED Published: 2014-10-31T10:00:00 Last Updated: 2024-08-06T10:43:05.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the administrative web interface in Cisco Unified Communications Manager allows remote authenticated users to execute arbitrary SQL commands via a crafted response, aka Bug ID CSCup88089. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/70855 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98405 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3366 - http://www.securitytracker.com/id/1031160
CVE ID: CVE-2014-3367 State: PUBLISHED Published: 2014-09-20T10:00:00 Last Updated: 2024-08-06T10:43:05.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the vCloud Director component in Cisco Nexus 1000V InterCloud for VMware allows remote attackers to inject arbitrary web script or HTML via an unspecified value, aka Bug ID CSCuq90524. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/96126 - http://www.securityfocus.com/bid/70010 - http://www.securitytracker.com/id/1030881 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3367 - http://se
itytracker.com/id/1030881 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3367 - http://secunia.com/advisories/61426
CVE ID: CVE-2014-3368 State: PUBLISHED Published: 2014-10-19T01:00:00 Last Updated: 2024-08-06T10:43:05.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco TelePresence Video Communication Server (VCS) and Expressway Software before X8.2 allow remote attackers to cause a denial of service (device reload) via a high rate of crafted packets, aka Bug ID CSCui06507. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/60850 - http://www.securitytracker.com/id/1031055 - http://tools.cisco.com/security/center/viewAlert.x?alertId=35827 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141015-vcs
CVE ID: CVE-2014-3369 State: PUBLISHED Published: 2014-10-19T01:00:00 Last Updated: 2024-08-06T10:43:05.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SIP IX implementation in Cisco TelePresence Video Communication Server (VCS) and Expressway Software before X8.1.1 allows remote attackers to cause a denial of service (device reload) via crafted SDP packets, aka Bug ID CSCuo42252. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/60850 - http://www.securitytracker.com/id/1031055 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141015-vcs - http://tools.cisco.com/security/center/viewAlert.x?alert
ty/center/content/CiscoSecurityAdvisory/cisco-sa-20141015-vcs - http://tools.cisco.com/security/center/viewAlert.x?alertId=35828
CVE ID: CVE-2014-3370 State: PUBLISHED Published: 2014-10-19T01:00:00 Last Updated: 2024-08-06T10:43:05.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco TelePresence Video Communication Server (VCS) and Expressway Software before X8.1.1 allow remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug IDs CSCum60442 and CSCum60447. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/60850 - http://www.securitytracker.com/id/1031055 - http://tools.cisco.com/security/center/viewAlert.x?alertId=35829 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141015-vcs
CVE ID: CVE-2014-3371 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-3372 State: PUBLISHED Published: 2014-10-31T10:00:00 Last Updated: 2024-08-06T10:43:05.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the CCM reports interface in the Server in Cisco Unified Communications Manager allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCuq90589. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3372 - http://tools.cisco.com/security/center/viewAlert.x?alertId=36292 - http://www.securitytracker.com/id/1031159 - http://secunia.com/adviso
co.com/security/center/viewAlert.x?alertId=36292 - http://www.securitytracker.com/id/1031159 - http://secunia.com/advisories/61003 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98404 - http://www.securityfocus.com/bid/70846
CVE ID: CVE-2014-3373 State: PUBLISHED Published: 2014-10-31T10:00:00 Last Updated: 2024-08-06T10:43:05.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the CCM Dialed Number Analyzer interface in the Server in Cisco Unified Communications Manager allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCup92550. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3373 - http://secunia.com/advisories/59692 - http://www.securityfocus.com/bid/70848 - http://tools.cisco.com/security/center/vie
ttp://secunia.com/advisories/59692 - http://www.securityfocus.com/bid/70848 - http://tools.cisco.com/security/center/viewAlert.x?alertId=36294 - http://www.securitytracker.com/id/1031161 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98406
CVE ID: CVE-2014-3374 State: PUBLISHED Published: 2014-10-31T10:00:00 Last Updated: 2024-08-06T10:43:05.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the CCM admin interface in the Server in Cisco Unified Communications Manager allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCuq90582. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/98407 - http://www.securityfocus.com/bid/70849 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3374 - http://tools.cisco.com/security/cent
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3374 - http://tools.cisco.com/security/center/viewAlert.x?alertId=36295 - http://www.securitytracker.com/id/1031162 - http://secunia.com/advisories/59696
CVE ID: CVE-2014-3375 State: PUBLISHED Published: 2014-10-31T10:00:00 Last Updated: 2024-08-06T10:43:05.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the CCM Service interface in the Server in Cisco Unified Communications Manager allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCuq90597. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=36297 - http://www.securityfocus.com/bid/70850 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3375 - https://exchange.xforce.ibmc
/70850 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3375 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98408 - http://www.securitytracker.com/id/1031163 - http://secunia.com/advisories/61025
CVE ID: CVE-2014-3376 State: PUBLISHED Published: 2014-09-20T10:00:00 Last Updated: 2024-08-06T10:43:05.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS XR 5.1 and earlier allows remote attackers to cause a denial of service (process reload) via a malformed RSVP packet, aka Bug ID CSCuq12031. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=35773 - http://www.securityfocus.com/bid/69956 - http://www.securitytracker.com/id/1030878 - http://secunia.com/advisories/59638 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96065 - http://tools.cisco.com/security/center/content/CiscoSecurityNotic
//exchange.xforce.ibmcloud.com/vulnerabilities/96065 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3376
CVE ID: CVE-2014-3377 State: PUBLISHED Published: 2014-09-20T10:00:00 Last Updated: 2024-08-06T10:43:05.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: snmpd in Cisco IOS XR 5.1 and earlier allows remote authenticated users to cause a denial of service (process reload) via a malformed SNMPv2 packet, aka Bug ID CSCun67791. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/69959 - http://www.securitytracker.com/id/1030878 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96066 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3377 - http://tools.cisco.com/security/center/viewAlert.x?alertId=35774 -
ty/center/content/CiscoSecurityNotice/CVE-2014-3377 - http://tools.cisco.com/security/center/viewAlert.x?alertId=35774 - http://secunia.com/advisories/59606
CVE ID: CVE-2014-3378 State: PUBLISHED Published: 2014-09-20T10:00:00 Last Updated: 2024-08-06T10:43:05.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: tacacsd in Cisco IOS XR 5.1 and earlier allows remote attackers to cause a denial of service (process reload) via a malformed TACACS+ packet, aka Bug ID CSCum00468. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/59632 - http://tools.cisco.com/security/center/viewAlert.x?alertId=35775 - http://secunia.com/advisories/59649 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3378 - http://www.securitytracker.com/id/1030878 - https://exchange.xforce.ibmcloud
content/CiscoSecurityNotice/CVE-2014-3378 - http://www.securitytracker.com/id/1030878 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96067 - http://www.securityfocus.com/bid/69957
CVE ID: CVE-2014-3379 State: PUBLISHED Published: 2014-09-20T10:00:00 Last Updated: 2024-08-06T10:43:05.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS XR 5.1 and earlier on Network Convergence System 6000 devices allows remote attackers to cause a denial of service (NPU and card hang or reload) via a malformed MPLS packet, aka Bug ID CSCuq10466. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=35776 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3379 - http://www.securitytracker.com/id/1030878 - http://secunia.com/advisories/61372 - http://www.securityfocus.com
14-3379 - http://www.securitytracker.com/id/1030878 - http://secunia.com/advisories/61372 - http://www.securityfocus.com/bid/69960 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96068
CVE ID: CVE-2014-3380 State: PUBLISHED Published: 2014-09-24T00:00:00 Last Updated: 2024-08-06T10:43:05.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Unified Communications Domain Manager Platform Software 4.4(.3) and earlier allows remote attackers to cause a denial of service (CPU consumption) by sending crafted TCP packets quickly, aka Bug ID CSCuo42063. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/70044 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96146 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3380 - http://www.securitytracker.com/id/1030885 - http://tools.cisco.com
ty/center/content/CiscoSecurityNotice/CVE-2014-3380 - http://www.securitytracker.com/id/1030885 - http://tools.cisco.com/security/center/viewAlert.x?alertId=35803
CVE ID: CVE-2014-3381 State: PUBLISHED Published: 2014-10-19T01:00:00 Last Updated: 2024-08-06T10:43:05.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ZIP inspection engine in Cisco AsyncOS 8.5 and earlier on the Cisco Email Security Appliance (ESA) does not properly analyze ZIP archives, which allows remote attackers to bypass malware filtering via a crafted archive, aka Bug ID CSCup07934. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3381 - http://tools.cisco.com/security/center/viewAlert.x?alertId=36062
CVE ID: CVE-2014-3382 State: PUBLISHED Published: 2014-10-10T10:00:00 Last Updated: 2024-08-06T10:43:05.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SQL*Net inspection engine in Cisco ASA Software 7.2 before 7.2(5.13), 8.2 before 8.2(5.50), 8.3 before 8.3(2.42), 8.4 before 8.4(7.15), 8.5 before 8.5(1.21), 8.6 before 8.6(1.14), 8.7 before 8.7(1.13), 9.0 before 9.0(4.5), and 9.1 before 9.1(5.1) allows remote attackers to cause a denial of service (device reload) via crafted SQL REDIRECT packets, aka Bug ID CSCum46027. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141008-asa
CVE ID: CVE-2014-3383 State: PUBLISHED Published: 2014-10-10T10:00:00 Last Updated: 2024-08-06T10:43:05.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IKE implementation in the VPN component in Cisco ASA Software 9.1 before 9.1(5.1) allows remote attackers to cause a denial of service (device reload) via crafted UDP packets, aka Bug ID CSCul36176. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/70302 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141008-asa
CVE ID: CVE-2014-3384 State: PUBLISHED Published: 2014-10-10T10:00:00 Last Updated: 2024-08-06T10:43:05.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IKEv2 implementation in Cisco ASA Software 8.4 before 8.4(7.15), 8.6 before 8.6(1.14), 9.0 before 9.0(4.8), and 9.1 before 9.1(5.1) allows remote attackers to cause a denial of service (device reload) via a crafted packet that is sent during tunnel creation, aka Bug ID CSCum96401. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141008-asa
CVE ID: CVE-2014-3385 State: PUBLISHED Published: 2014-10-10T10:00:00 Last Updated: 2024-08-06T10:43:05.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the Health and Performance Monitoring (HPM) for ASDM feature in Cisco ASA Software 8.3 before 8.3(2.42), 8.4 before 8.4(7.11), 8.5 before 8.5(1.19), 8.6 before 8.6(1.13), 8.7 before 8.7(1.11), 9.0 before 9.0(4.8), and 9.1 before 9.1(4.5) allows remote attackers to cause a denial of service (device reload) via TCP traffic that triggers many half-open connections at the same time, aka Bug ID CSCum00556. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/conte
SCum00556. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141008-asa
CVE ID: CVE-2014-3386 State: PUBLISHED Published: 2014-10-10T10:00:00 Last Updated: 2024-08-06T10:43:05.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GPRS Tunneling Protocol (GTP) inspection engine in Cisco ASA Software 8.2 before 8.2(5.51), 8.4 before 8.4(7.15), 8.7 before 8.7(1.13), 9.0 before 9.0(4.8), and 9.1 before 9.1(5.1) allows remote attackers to cause a denial of service (device reload) via a crafted series of GTP packets, aka Bug ID CSCum56399. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141008-asa
CVE ID: CVE-2014-3387 State: PUBLISHED Published: 2014-10-10T10:00:00 Last Updated: 2024-08-06T10:43:05.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SunRPC inspection engine in Cisco ASA Software 7.2 before 7.2(5.14), 8.2 before 8.2(5.51), 8.3 before 8.3(2.42), 8.4 before 8.4(7.23), 8.5 before 8.5(1.21), 8.6 before 8.6(1.14), 8.7 before 8.7(1.13), 9.0 before 9.0(4.5), and 9.1 before 9.1(5.3) allows remote attackers to cause a denial of service (device reload) via crafted SunRPC packets, aka Bug ID CSCun11074. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141008-asa
CVE ID: CVE-2014-3388 State: PUBLISHED Published: 2014-10-10T10:00:00 Last Updated: 2024-08-06T10:43:05.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DNS inspection engine in Cisco ASA Software 9.0 before 9.0(4.13), 9.1 before 9.1(5.7), and 9.2 before 9.2(2) allows remote attackers to cause a denial of service (device reload) via crafted DNS packets, aka Bug ID CSCuo68327. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141008-asa
CVE ID: CVE-2014-3389 State: PUBLISHED Published: 2014-10-10T10:00:00 Last Updated: 2024-08-06T10:43:05.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: The VPN implementation in Cisco ASA Software 7.2 before 7.2(5.15), 8.2 before 8.2(5.51), 8.3 before 8.3(2.42), 8.4 before 8.4(7.23), 8.6 before 8.6(1.15), 9.0 before 9.0(4.24), 9.1 before 9.1(5.12), 9.2 before 9.2(2.6), and 9.3 before 9.3(1.1) does not properly implement a tunnel filter, which allows remote authenticated users to obtain failover-unit access via crafted packets, aka Bug ID CSCuq28582. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdv
al Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141008-asa
CVE ID: CVE-2014-3390 State: PUBLISHED Published: 2014-10-10T10:00:00 Last Updated: 2024-08-06T10:43:05.877Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Virtual Network Management Center (VNMC) policy implementation in Cisco ASA Software 8.7 before 8.7(1.14), 9.2 before 9.2(2.8), and 9.3 before 9.3(1.1) allows local users to obtain Linux root access by leveraging administrative privileges and executing a crafted script, aka Bug IDs CSCuq41510 and CSCuq47574. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141008-asa
CVE ID: CVE-2014-3391 State: PUBLISHED Published: 2014-10-10T10:00:00 Last Updated: 2024-08-06T10:43:05.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Cisco ASA Software 8.x before 8.4(3), 8.5, and 8.7 before 8.7(1.13) allows local users to gain privileges by placing a Trojan horse library file in external memory, leading to library use after device reload because of an incorrect LD_LIBRARY_PATH value, aka Bug ID CSCtq52661. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141008-asa
CVE ID: CVE-2014-3392 State: PUBLISHED Published: 2014-10-10T10:00:00 Last Updated: 2024-08-06T10:43:05.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Clientless SSL VPN portal in Cisco ASA Software 8.2 before 8.2(5.51), 8.3 before 8.3(2.42), 8.4 before 8.4(7.23), 8.6 before 8.6(1.15), 9.0 before 9.0(4.24), 9.1 before 9.1(5.12), 9.2 before 9.2(2.8), and 9.3 before 9.3(1.1) allows remote attackers to obtain sensitive information from process memory or modify memory contents via crafted parameters, aka Bug ID CSCuq29136. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141008-as
ogram Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141008-asa
CVE ID: CVE-2014-3393 State: PUBLISHED Published: 2014-10-10T10:00:00 Last Updated: 2024-08-06T10:43:05.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Clientless SSL VPN portal customization framework in Cisco ASA Software 8.2 before 8.2(5.51), 8.3 before 8.3(2.42), 8.4 before 8.4(7.23), 8.6 before 8.6(1.14), 9.0 before 9.0(4.24), 9.1 before 9.1(5.12), and 9.2 before 9.2(2.4) does not properly implement authentication, which allows remote attackers to modify RAMFS customization objects via unspecified vectors, as demonstrated by inserting XSS sequences or capturing credentials, aka Bug ID CSCup36829. Additional Analyst Notes: - CVE Program Container: References: - http:/
or capturing credentials, aka Bug ID CSCup36829. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141008-asa
CVE ID: CVE-2014-3394 State: PUBLISHED Published: 2014-10-10T10:00:00 Last Updated: 2024-08-06T10:43:05.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Smart Call Home (SCH) implementation in Cisco ASA Software 8.2 before 8.2(5.50), 8.4 before 8.4(7.15), 8.6 before 8.6(1.14), 8.7 before 8.7(1.13), 9.0 before 9.0(4.8), and 9.1 before 9.1(5.1) allows remote attackers to bypass certificate validation via an arbitrary VeriSign certificate, aka Bug ID CSCun10916. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141008-asa
CVE ID: CVE-2014-3395 State: PUBLISHED Published: 2014-09-30T22:00:00 Last Updated: 2024-08-06T10:43:05.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco WebEx Meetings Server (WMS) 2.5 allows remote attackers to trigger the download of arbitrary files via a crafted URL, aka Bug ID CSCup10343. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3395 - http://tools.cisco.com/security/center/viewAlert.x?alertId=35876
CVE ID: CVE-2014-3396 State: PUBLISHED Published: 2014-10-05T01:00:00 Last Updated: 2024-08-06T10:43:05.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS XR on ASR 9000 devices does not properly use compression for port-range and address-range encoding, which allows remote attackers to bypass intended Typhoon line-card ACL restrictions via transit traffic, aka Bug ID CSCup30133. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3396
CVE ID: CVE-2014-3397 State: PUBLISHED Published: 2014-10-19T01:00:00 Last Updated: 2024-08-06T10:43:05.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: The network stack in Cisco TelePresence MCU Software before 4.3(2.30) allows remote attackers to cause a denial of service (memory consumption) via crafted TCP packets, aka Bug ID CSCtz35468. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/60855 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141015-mcu - http://tools.cisco.com/security/center/viewAlert.x?alertId=36016 - http://www.securitytracker.com/id/1031054
CVE ID: CVE-2014-3398 State: PUBLISHED Published: 2014-10-05T01:00:00 Last Updated: 2024-08-06T10:43:05.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SSL VPN implementation in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to obtain potentially sensitive software-version information by reading the verbose response data that is provided for a request to an unspecified URL, aka Bug ID CSCuq65542. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3398