Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-0686 State: PUBLISHED Published: 2014-02-04T02:00:00 Last Updated: 2024-08-06T09:27:19.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Unified Communications Manager (aka Unified CM) 9.1 (2.10000.28) and earlier allows local users to gain privileges by leveraging incorrect file permissions, aka Bug IDs CSCul24917 and CSCul24908. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/102750 - http://www.securityfocus.com/bid/65281 - http://secunia.com/advisories/56818 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0686 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90852 - http://tools.cis
ontent/CiscoSecurityNotice/CVE-2014-0686 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90852 - http://tools.cisco.com/security/center/viewAlert.x?alertId=32683
CVE ID: CVE-2014-0691 State: PUBLISHED Published: 2017-10-24T14:00:00 Last Updated: 2024-08-06T09:27:19.889Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco WebEx Meetings Server before 1.1 uses meeting IDs with insufficient entropy, which makes it easier for remote attackers to bypass authentication and join arbitrary meetings without a password, aka Bug ID CSCuc79643. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisco.com/c/en/us/td/docs/collaboration/CWMS/1_1/b_Release_Notes.html
CVE ID: CVE-2014-0694 State: PUBLISHED Published: 2014-03-14T10:00:00 Last Updated: 2024-08-06T09:27:19.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: Intelligent Automation for Cloud (IAC) in Cisco Cloud Portal 9.4.1 and earlier includes a cryptographic key in binary files, which makes it easier for remote attackers to obtain cleartext data from an arbitrary IAC installation by leveraging knowledge of this key, aka Bug IDs CSCui34764, CSCui34772, CSCui34776, CSCui34798, CSCui34800, CSCui34805, CSCui34809, CSCui34810, CSCui34813, CSCui34814, and CSCui34818. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSe
Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0694 - http://tools.cisco.com/security/center/viewAlert.x?alertId=33336
CVE ID: CVE-2014-0701 State: PUBLISHED Published: 2014-03-06T11:00:00 Last Updated: 2024-08-06T09:27:19.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Wireless LAN Controller (WLC) devices 7.0 before 7.0.250.0, 7.2, 7.3, and 7.4 before 7.4.110.0 do not properly deallocate memory, which allows remote attackers to cause a denial of service (reboot) by sending WebAuth login requests at a high rate, aka Bug ID CSCuf52361. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140305-wlc
CVE ID: CVE-2014-0703 State: PUBLISHED Published: 2014-03-06T11:00:00 Last Updated: 2024-08-06T09:27:18.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Wireless LAN Controller (WLC) devices 7.4 before 7.4.110.0 distribute Aironet IOS software with a race condition in the status of the administrative HTTP server, which allows remote attackers to bypass intended access restrictions by connecting to an Aironet access point on which this server had been disabled ineffectively, aka Bug ID CSCuf66202. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140305-wlc
CVE ID: CVE-2014-0704 State: PUBLISHED Published: 2014-03-06T11:00:00 Last Updated: 2024-08-06T09:27:19.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IGMP implementation on Cisco Wireless LAN Controller (WLC) devices 4.x, 5.x, 6.x, 7.0 before 7.0.250.0, 7.1, 7.2, and 7.3, when IGMPv3 Snooping is enabled, allows remote attackers to cause a denial of service (memory over-read and device restart) via a crafted field in an IGMPv3 message, aka Bug ID CSCuh33240. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140305-wlc
CVE ID: CVE-2014-0705 State: PUBLISHED Published: 2014-03-06T11:00:00 Last Updated: 2024-08-06T09:27:19.097Z Vendors: n/a Products: n/a Problem Types: n/a Description: The multicast listener discovery (MLD) service on Cisco Wireless LAN Controller (WLC) devices 7.2, 7.3, 7.4 before 7.4.121.0, and 7.5, when MLDv2 Snooping is enabled, allows remote attackers to cause a denial of service (device restart) via a malformed IPv6 MLDv2 packet, aka Bug ID CSCuh74233. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140305-wlc
CVE ID: CVE-2014-0706 State: PUBLISHED Published: 2014-03-06T11:00:00 Last Updated: 2024-08-06T09:27:19.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Wireless LAN Controller (WLC) devices 7.2 before 7.2.115.2, 7.3, and 7.4 before 7.4.110.0 allow remote attackers to cause a denial of service (device restart) via a crafted 802.11 Ethernet frame, aka Bug ID CSCue87929. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140305-wlc
CVE ID: CVE-2014-0707 State: PUBLISHED Published: 2014-03-06T11:00:00 Last Updated: 2024-08-06T09:27:19.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Wireless LAN Controller (WLC) devices 7.2, 7.3, and 7.4 before 7.4.110.0 allow remote attackers to cause a denial of service (device restart) via a crafted 802.11 Ethernet frame, aka Bug ID CSCuf80681. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140305-wlc
CVE ID: CVE-2014-0708 State: PUBLISHED Published: 2014-03-20T20:00:00 Last Updated: 2024-08-06T09:27:19.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebEx Meeting Center in Cisco WebEx Business Suite does not properly compose URLs for HTTP GET requests, which allows remote attackers to obtain sensitive information by reading (1) web-server access logs, (2) web-server Referer logs, or (3) a browser's history, aka Bug ID CSCul98272. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0708
CVE ID: CVE-2014-0709 State: PUBLISHED Published: 2014-02-22T21:00:00 Last Updated: 2024-08-06T09:27:19.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco UCS Director (formerly Cloupia) before 4.0.0.3 has a hardcoded password for the root account, which makes it easier for remote attackers to obtain administrative access via an SSH session to the CLI interface, aka Bug ID CSCui73930. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140219-ucsd
CVE ID: CVE-2014-0710 State: PUBLISHED Published: 2014-02-22T21:00:00 Last Updated: 2024-08-06T09:27:19.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the cut-through proxy feature in Cisco Firewall Services Module (FWSM) Software 3.x before 3.2(28) and 4.x before 4.1(15) allows remote attackers to cause a denial of service (device reload) via certain matching traffic, aka Bug ID CSCuj16824. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140219-fwsm
CVE ID: CVE-2014-0718 State: PUBLISHED Published: 2014-02-22T21:00:00 Last Updated: 2024-08-06T09:27:19.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: The produce-verbose-alert feature in Cisco IPS Software 7.1 before 7.1(8)E4 and 7.2 before 7.2(2)E4 allows remote attackers to cause a denial of service (Analysis Engine process outage) via fragmented packets, aka Bug ID CSCui91266. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140219-ips
CVE ID: CVE-2014-0719 State: PUBLISHED Published: 2014-02-22T21:00:00 Last Updated: 2024-08-06T09:27:19.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: The control-plane access-list implementation in Cisco IPS Software before 7.1(8p2)E4 and 7.2 before 7.2(2)E4 allows remote attackers to cause a denial of service (MainApp process outage) via crafted packets to TCP port 7000, aka Bug ID CSCui67394. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140219-ips
CVE ID: CVE-2014-0720 State: PUBLISHED Published: 2014-02-22T21:00:00 Last Updated: 2024-08-06T09:27:19.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IPS Software 7.1 before 7.1(8)E4 and 7.2 before 7.2(2)E4 allows remote attackers to cause a denial of service (Analysis Engine process outage) via a flood of jumbo frames, aka Bug ID CSCuh94944. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140219-ips
CVE ID: CVE-2014-0721 State: PUBLISHED Published: 2014-02-22T21:00:00 Last Updated: 2024-08-06T09:27:19.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cisco Unified SIP Phone 3905 with firmware before 9.4(1) allows remote attackers to obtain root access via a session on the test interface on TCP port 7870, aka Bug ID CSCuh75574. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140219-phone
CVE ID: CVE-2014-0722 State: PUBLISHED Published: 2014-02-13T02:00:00 Last Updated: 2024-08-06T09:27:19.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: The log4jinit web application in Cisco Unified Communications Manager (UCM) does not properly validate authentication, which allows remote attackers to cause a denial of service (performance degradation) via unspecified use of this application, aka Bug ID CSCum05347. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0722
CVE ID: CVE-2014-0723 State: PUBLISHED Published: 2014-02-13T02:00:00 Last Updated: 2024-08-06T09:27:18.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the IP Manager Assistant (IPMA) interface in Cisco Unified Communications Manager (UCM) allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCum05343. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/65495 - http://www.securitytracker.com/id/1029756 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0723 - http://osvdb.org/103222
CVE ID: CVE-2014-0724 State: PUBLISHED Published: 2014-02-13T02:00:00 Last Updated: 2024-08-06T09:27:18.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bulk administration interface in Cisco Unified Communications Manager (UCM) 10.0(1) and earlier allows remote attackers to bypass authentication and read arbitrary files by using an unspecified prompt, aka Bug ID CSCum05340. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=32825 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0724
CVE ID: CVE-2014-0725 State: PUBLISHED Published: 2014-02-13T02:00:00 Last Updated: 2024-08-06T09:27:19.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Unified Communications Manager (UCM) does not require authentication for reading WAR files, which allows remote attackers to obtain sensitive information via unspecified access to a "file storage location," aka Bug ID CSCum05337. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0725
CVE ID: CVE-2014-0726 State: PUBLISHED Published: 2014-02-13T02:00:00 Last Updated: 2024-08-06T09:27:18.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the IP Manager Assistant (IPMA) interface in Cisco Unified Communications Manager (UCM) 10.0(1) and earlier allows remote attackers to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCum05326. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/65514 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0726 - http://tools.cisco.com/security/center/viewAlert.x?alertId=32843 - http://osvdb.org/103218
CVE ID: CVE-2014-0727 State: PUBLISHED Published: 2014-02-13T02:00:00 Last Updated: 2024-08-06T09:27:19.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the CallManager Interactive Voice Response (CMIVR) interface in Cisco Unified Communications Manager (UCM) allows remote attackers to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCum05318. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0727 - http://www.securityfocus.com/bid/65516 - http://tools.cisco.com/security/center/viewAlert.x?alertId=32844 - http://osvdb.org/103219
CVE ID: CVE-2014-0728 State: PUBLISHED Published: 2014-02-13T02:00:00 Last Updated: 2024-08-06T09:27:19.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Java database interface in Cisco Unified Communications Manager (UCM) 10.0(1) and earlier allows remote attackers to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCum05313. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=32834 - http://osvdb.org/103221 - http://www.securityfocus.com/bid/65499 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0728
CVE ID: CVE-2014-0729 State: PUBLISHED Published: 2014-02-13T02:00:00 Last Updated: 2024-08-06T09:27:19.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Enterprise Mobility Application (EMApp) interface in Cisco Unified Communications Manager (UCM) allows remote attackers to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCum05302. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/103220 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0729 - http://www.securityfocus.com/bid/65501
CVE ID: CVE-2014-0730 State: PUBLISHED Published: 2014-02-22T21:00:00 Last Updated: 2024-08-06T09:27:19.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Unified Computing System (UCS) Central Software 1.1 and earlier allows local users to gain privileges via a CLI copy command in a local-mgmt context, aka Bug ID CSCul53128. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0730 - http://tools.cisco.com/security/center/viewAlert.x?alertId=32910
CVE ID: CVE-2014-0731 State: PUBLISHED Published: 2014-02-22T21:00:00 Last Updated: 2024-08-06T09:27:19.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: The administration interface in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier allows remote attackers to bypass authentication and read Java class files via a direct request, aka Bug ID CSCum46497. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0731 - http://tools.cisco.com/security/center/viewAlert.x?alertId=32915
CVE ID: CVE-2014-0732 State: PUBLISHED Published: 2014-02-20T02:00:00 Last Updated: 2024-08-06T09:27:19.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Real Time Monitoring Tool (RTMT) web application in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier does not properly enforce authentication requirements, which allows remote attackers to read application files via a direct request to a URL, aka Bug ID CSCum46495. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=32913 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0732
CVE ID: CVE-2014-0733 State: PUBLISHED Published: 2014-02-20T11:00:00 Last Updated: 2024-08-06T09:27:19.742Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Enterprise License Manager (ELM) component in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier does not properly enforce authentication requirements, which allows remote attackers to read ELM files via a direct request to a URL, aka Bug ID CSCum46494. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0733 - http://tools.cisco.com/security/center/viewAlert.x?alertId=32914
CVE ID: CVE-2014-0734 State: PUBLISHED Published: 2014-02-20T02:00:00 Last Updated: 2024-08-06T09:27:19.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Certificate Authority Proxy Function (CAPF) implementation in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier allows remote attackers to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCum46483. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0734 - http://tools.cisco.com/security/center/viewAlert.x?alertId=32916 - http://www.securityfocus.com/bid/65645
CVE ID: CVE-2014-0735 State: PUBLISHED Published: 2014-02-20T02:00:00 Last Updated: 2024-08-06T09:27:19.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the IP Manager Assistant (IPMA) interface in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCum46470. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0735 - http://tools.cisco.com/security/center/viewAlert.x?alertId=32912 - http://www.securityfocus.com/bid/65641 - http://www.s
http://tools.cisco.com/security/center/viewAlert.x?alertId=32912 - http://www.securityfocus.com/bid/65641 - http://www.securitytracker.com/id/1029793
CVE ID: CVE-2014-0736 State: PUBLISHED Published: 2014-02-20T02:00:00 Last Updated: 2024-08-06T09:27:19.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Call Detail Records Analysis and Reporting (CAR) page in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier allows remote attackers to hijack the authentication of arbitrary users for requests that make CAR modifications, aka Bug ID CSCum46468. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0736 - http://tools.cisco.com/security/center/viewAlert.x?alertId=32911
ity/center/content/CiscoSecurityNotice/CVE-2014-0736 - http://tools.cisco.com/security/center/viewAlert.x?alertId=32911 - http://www.securitytracker.com/id/1029792
CVE ID: CVE-2014-0737 State: PUBLISHED Published: 2014-02-22T21:00:00 Last Updated: 2024-08-06T09:27:19.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cisco Unified IP Phone 7960G 9.2(1) and earlier allows remote attackers to bypass authentication and change trust relationships by injecting a Certificate Trust List (CTL) file, aka Bug ID CSCuj66795. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0737 - http://tools.cisco.com/security/center/viewAlert.x?alertId=32957
CVE ID: CVE-2014-0738 State: PUBLISHED Published: 2014-02-22T21:00:00 Last Updated: 2024-08-06T09:27:19.744Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Phone Proxy component in Cisco Adaptive Security Appliance (ASA) Software 9.1(.3) and earlier allows remote attackers to bypass authentication and change trust relationships by injecting a Certificate Trust List (CTL) file, aka Bug ID CSCuj66770. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=32956 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0738
CVE ID: CVE-2014-0739 State: PUBLISHED Published: 2014-02-22T21:00:00 Last Updated: 2024-08-06T09:27:19.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the Phone Proxy component in Cisco Adaptive Security Appliance (ASA) Software 9.1(.3) and earlier allows remote attackers to bypass sec_db authentication and provide certain pass-through services to untrusted devices via a crafted configuration-file TFTP request, aka Bug ID CSCuj66766. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0739 - http://tools.cisco.com/security/center/viewAlert.x?alertId=32955
CVE ID: CVE-2014-0740 State: PUBLISHED Published: 2014-02-27T01:00:00 Last Updated: 2024-08-06T09:27:19.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Call Detail Records Analysis and Reporting (CAR) interface in the OS Administration component in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier allows remote attackers to hijack the authentication of administrators for requests that make administrative changes, aka Bug ID CSCun00701. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=33049 - http://tools.cisco.com/security/cente
: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=33049 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0740 - http://www.securitytracker.com/id/1029843
CVE ID: CVE-2014-0741 State: PUBLISHED Published: 2014-02-27T01:00:00 Last Updated: 2024-08-06T09:27:19.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: The certificate-import feature in the Certificate Authority Proxy Function (CAPF) CLI implementation in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier allows local users to read or modify arbitrary files via a crafted command, aka Bug ID CSCum95461. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=33046 - http://www.securitytracker.com/id/1029843 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0741
CVE ID: CVE-2014-0742 State: PUBLISHED Published: 2014-02-27T01:00:00 Last Updated: 2024-08-06T09:27:19.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Certificate Authority Proxy Function (CAPF) CLI implementation in the CSR management feature in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier allows local users to read or modify arbitrary files via unspecified vectors, aka Bug ID CSCum95464. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=33045 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0742 - http://www.securitytracker.com/id/1029843