Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-12250 State: PUBLISHED Published: 2017-09-21T05:00:00 Last Updated: 2024-08-05T18:28:16.677Z Vendors: n/a Products: Cisco Wide Area Application Services Problem Types: CWE-399 Description: A vulnerability in the HTTP web interface for Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, remote attacker to cause an HTTP Application Optimization (AO) related process to restart, causing a partial denial of service (DoS) condition. The vulnerability is due to lack of input validation of user-supplied input parameters within an HTTP request. An attacker could exploit this vulnerability by sending a crafted HTTP request through the targeted device. An exploi
t. An attacker could exploit this vulnerability by sending a crafted HTTP request through the targeted device. An exploit could allow the attacker to cause a DoS condition due to a process unexpectedly restarting. The WAAS could drop traffic during the brief time the process is restarting. Cisco Bug IDs: CSCvc63048. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039415 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170920-waas - http://www.securityfocus.com/bid/100928
CVE ID: CVE-2017-12251 State: PUBLISHED Published: 2017-10-19T08:00:00 Last Updated: 2024-08-05T18:28:16.707Z Vendors: n/a Products: Cisco Cloud Services Platform 2100 Problem Types: CWE-264 Description: A vulnerability in the web console of the Cisco Cloud Services Platform (CSP) 2100 could allow an authenticated, remote attacker to interact maliciously with the services or virtual machines (VMs) operating remotely on an affected CSP device. The vulnerability is due to weaknesses in the generation of certain authentication mechanisms in the URL of the web console. An attacker could exploit this vulnerability by browsing to one of the hosted VMs' URLs in Cisco CSP and viewing specific patter
ker could exploit this vulnerability by browsing to one of the hosted VMs' URLs in Cisco CSP and viewing specific patterns that control the web application's mechanisms for authentication control. An exploit could allow the attacker to access a specific VM on the CSP, which causes a complete loss of the system's confidentiality, integrity, and availability. This vulnerability affects Cisco Cloud Services Platform (CSP) 2100 running software release 2.1.0, 2.1.1, 2.1.2, 2.2.0, 2.2.1, or 2.2.2. Cisco Bug IDs: CSCve64690. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171018-ccs - http://www.secur
rences: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171018-ccs - http://www.securityfocus.com/bid/101487 - http://www.securitytracker.com/id/1039613
CVE ID: CVE-2017-12252 State: PUBLISHED Published: 2017-09-21T05:00:00 Last Updated: 2024-08-05T18:28:16.693Z Vendors: n/a Products: Cisco FindIT Problem Types: CWE-20 Description: A vulnerability in the Cisco FindIT Network Discovery Utility could allow an authenticated, local attacker to perform a DLL preloading attack, potentially causing a partial impact to device availability, confidentiality, and integrity. The vulnerability is due to the application loading a malicious copy of a specific, nondefined DLL file instead of the DLL file it was expecting. An attacker could exploit this vulnerability by placing an affected DLL within the search path of the host system. An exploit could allow
exploit this vulnerability by placing an affected DLL within the search path of the host system. An exploit could allow the attacker to load a malicious DLL file into the system, thus partially compromising confidentiality, integrity, and availability on the device. Cisco Bug IDs: CSCve89785. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170920-findit - http://www.securityfocus.com/bid/100923
CVE ID: CVE-2017-12253 State: PUBLISHED Published: 2017-09-21T05:00:00 Last Updated: 2024-08-05T18:28:16.792Z Vendors: n/a Products: Cisco Unified Intelligence Center Problem Types: CWE-352 Description: A vulnerability in the Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to execute unwanted actions. The vulnerability is due to a lack of cross-site request forgery (CSRF) protection. An attacker could exploit this vulnerability by tricking the user of a web application into executing an adverse action. Cisco Bug IDs: CSCve76872. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100919 - http://www.securitytrack
Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100919 - http://www.securitytracker.com/id/1039409 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170920-cuic1
CVE ID: CVE-2017-12254 State: PUBLISHED Published: 2017-09-21T05:00:00 Last Updated: 2024-08-05T18:28:16.744Z Vendors: n/a Products: Cisco Unified Intelligence Center Problem Types: CWE-79 Description: A vulnerability in the web interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to perform a Document Object Model (DOM)-based cross-site scripting attack. The vulnerability is due to insufficient input validation of some parameters passed to the web server. An attacker could exploit this vulnerability by convincing the user to access a malicious link or by intercepting the user request and injecting the malicious code. An exploit could allow the attac
a malicious link or by intercepting the user request and injecting the malicious code. An exploit could allow the attacker to execute arbitrary code in the context of the affected site or allow the attacker to access sensitive browser-based information. Cisco Bug IDs: CSCve76848, CSCve76856. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100922 - http://www.securitytracker.com/id/1039410 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170920-cuic2
CVE ID: CVE-2017-12255 State: PUBLISHED Published: 2017-09-21T05:00:00 Last Updated: 2024-08-05T18:28:16.789Z Vendors: n/a Products: Cisco UCS Central Software Problem Types: CWE-20 Description: A vulnerability in the CLI of Cisco UCS Central Software could allow an authenticated, local attacker to gain shell access. The vulnerability is due to insufficient input validation of commands entered in the CLI, aka a Restricted Shell Break Vulnerability. An attacker could exploit this vulnerability by entering a specific command with crafted arguments. An exploit could allow the attacker to gain shell access to the underlying system. Cisco Bug IDs: CSCve70762. Additional Analyst Notes: - CVE Progr
attacker to gain shell access to the underlying system. Cisco Bug IDs: CSCve70762. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100932 - http://www.securitytracker.com/id/1039412 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170920-ucs
CVE ID: CVE-2017-12256 State: PUBLISHED Published: 2017-10-05T07:00:00 Last Updated: 2024-08-05T18:28:16.880Z Vendors: n/a Products: Cisco Wide Area Application Services Problem Types: CWE-399 Description: A vulnerability in the Akamai Connect feature of Cisco Wide Area Application Services (WAAS) Appliances could allow an unauthenticated, remote attacker to cause a denial-of-service (DoS) condition on an affected device. The vulnerability is due to certain file-handling inefficiencies of the affected system. An attacker could exploit this vulnerability by directing client systems to access a corrupted file that the client systems cannot decompress correctly. A successful exploit could allow
systems to access a corrupted file that the client systems cannot decompress correctly. A successful exploit could allow the attacker to cause the affected device to crash or hang unexpectedly and result in a DoS condition that may require manual intervention to regain normal operating conditions. Cisco Bug IDs: CSCve82472. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101180 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171004-waas
CVE ID: CVE-2017-12257 State: PUBLISHED Published: 2017-10-05T07:00:00 Last Updated: 2024-08-05T18:28:16.724Z Vendors: n/a Products: Cisco WebEx Meetings Server Problem Types: CWE-79 Description: A vulnerability in the web framework of Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validation of some parameters that are passed to the web server of the affected system. An attacker could exploit this vulnerability by convincing a user to follow a malicious link or by intercepting a user request and injecting malici
his vulnerability by convincing a user to follow a malicious link or by intercepting a user request and injecting malicious code into the request. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected web interface or allow the attacker to access sensitive browser-based information. Cisco Bug IDs: CSCve96608. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171004-wms - http://www.securityfocus.com/bid/101167
CVE ID: CVE-2017-12258 State: PUBLISHED Published: 2017-10-05T07:00:00 Last Updated: 2024-08-05T18:28:16.665Z Vendors: n/a Products: Cisco Unified Communications Manager Problem Types: CWE-59 Description: A vulnerability in the web-based UI of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to execute a cross-frame scripting (XFS) attack. The vulnerability exists because the affected software does not provide sufficient protections for HTML inline frames (iframes). An attacker could exploit this vulnerability by directing a user of the affected software to an attacker-controlled web page that contains a malicious HTML inline frame. A successful exploit co
ffected software to an attacker-controlled web page that contains a malicious HTML inline frame. A successful exploit could allow the attacker to conduct click-jacking or other types of client-side browser attacks. Cisco Bug IDs: CSCve60993. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101172 - http://www.securitytracker.com/id/1039505 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171004-ucm
CVE ID: CVE-2017-12259 State: PUBLISHED Published: 2017-10-19T08:00:00 Last Updated: 2024-08-05T18:28:16.740Z Vendors: n/a Products: Cisco Small Business SPA51x Series IP Phones Problem Types: CWE-119 Description: A vulnerability in the implementation of Session Initiation Protocol (SIP) functionality in Cisco Small Business SPA51x Series IP Phones could allow an unauthenticated, remote attacker to cause an affected device to become unresponsive, resulting in a denial of service (DoS) condition. The vulnerability is due to the improper handling of SIP request messages by an affected device. An attacker could exploit this vulnerability by sending malformed SIP messages to an affected device.
affected device. An attacker could exploit this vulnerability by sending malformed SIP messages to an affected device. A successful exploit could allow the attacker to cause the affected device to become unresponsive, resulting in a DoS condition that persists until the device is restarted manually. This vulnerability affects Cisco Small Business SPA51x Series IP Phones that are running Cisco SPA51x Firmware Release 7.6.2SR1 or earlier. Cisco Bug IDs: CSCvc63982. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171018-sip - http://www.securitytracker.com/id/1039615 - http://www.securityfocus.com
t/CiscoSecurityAdvisory/cisco-sa-20171018-sip - http://www.securitytracker.com/id/1039615 - http://www.securityfocus.com/bid/101488
CVE ID: CVE-2017-12260 State: PUBLISHED Published: 2017-10-19T08:00:00 Last Updated: 2024-08-05T18:28:16.705Z Vendors: n/a Products: Cisco Small Business SPA50x, SPA51x, and SPA52x Series IP Phones Problem Types: CWE-119 Description: A vulnerability in the implementation of Session Initiation Protocol (SIP) functionality in Cisco Small Business SPA50x, SPA51x, and SPA52x Series IP Phones could allow an unauthenticated, remote attacker to cause an affected device to become unresponsive, resulting in a denial of service (DoS) condition. The vulnerability is due to the improper handling of SIP request messages by an affected device. An attacker could exploit this vulnerability by using formatte
r handling of SIP request messages by an affected device. An attacker could exploit this vulnerability by using formatted specifiers in a SIP payload that is sent to an affected device. A successful exploit could allow the attacker to cause the affected device to become unresponsive, resulting in a DoS condition that persists until the device is restarted manually. This vulnerability affects Cisco Small Business SPA50x, SPA51x, and SPA52x Series IP Phones that are running firmware release 7.6.2SR1 or earlier. Cisco Bug IDs: CSCvc63986. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101495 - http://www.securitytracker.com/id/1039616 - https:/
m Container: References: - http://www.securityfocus.com/bid/101495 - http://www.securitytracker.com/id/1039616 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171018-sip1
CVE ID: CVE-2017-12261 State: PUBLISHED Published: 2017-11-02T16:00:00 Last Updated: 2024-08-05T18:28:16.789Z Vendors: n/a Products: Cisco Identity Services Engine Problem Types: CWE-264 Description: A vulnerability in the restricted shell of the Cisco Identity Services Engine (ISE) that is accessible via SSH could allow an authenticated, local attacker to run arbitrary CLI commands with elevated privileges. The vulnerability is due to incomplete input validation of the user input for CLI commands issued at the restricted shell. An attacker could exploit this vulnerability by authenticating to the targeted device and executing commands that could lead to elevated privileges. An attacker woul
by authenticating to the targeted device and executing commands that could lead to elevated privileges. An attacker would need valid user credentials to the device to exploit this vulnerability. The vulnerability affects the following Cisco Identity Services Engine (ISE) products running Release 1.4, 2.0, 2.0.1, 2.1.0: ISE, ISE Express, ISE Virtual Appliance. Cisco Bug IDs: CSCve74916. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101641 - http://www.securitytracker.com/id/1039717 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171101-ise
CVE ID: CVE-2017-12262 State: PUBLISHED Published: 2017-11-02T16:00:00 Last Updated: 2024-08-05T18:28:16.793Z Vendors: n/a Products: Cisco Application Policy Infrastructure Controller Enterprise Module Problem Types: CWE-284 Description: A vulnerability within the firewall configuration of the Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) could allow an unauthenticated, adjacent attacker to gain privileged access to services only available on the internal network of the device. The vulnerability is due to an incorrect firewall rule on the device. The misconfiguration could allow traffic sent to the public interface of the device to be forwarded to the interna
vice. The misconfiguration could allow traffic sent to the public interface of the device to be forwarded to the internal virtual network of the APIC-EM. An attacker that is logically adjacent to the network on which the public interface of the affected APIC-EM resides could leverage this behavior to gain access to services listening on the internal network with elevated privileges. This vulnerability affects appliances or virtual devices running Cisco Application Policy Infrastructure Controller Enterprise Module prior to version 1.5. Cisco Bug IDs: CSCve89638. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039716 - https://tools.cisco.co
Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039716 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171101-apicem - http://www.securityfocus.com/bid/101647
CVE ID: CVE-2017-12263 State: PUBLISHED Published: 2017-10-05T07:00:00 Last Updated: 2024-08-05T18:28:16.811Z Vendors: n/a Products: Cisco License Manager Problem Types: CWE-22 Description: A vulnerability in the web interface of Cisco License Manager software could allow an unauthenticated, remote attacker to download and view files within the application that should be restricted, aka Directory Traversal. The issue is due to improper sanitization of user-supplied input in HTTP request parameters that describe filenames. An attacker could exploit this vulnerability by using directory traversal techniques to submit a path to a desired file location. An exploit could allow the attacker to vie
g directory traversal techniques to submit a path to a desired file location. An exploit could allow the attacker to view application files that may contain sensitive information. Cisco Bug IDs: CSCvd83577. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101169 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171004-clm
CVE ID: CVE-2017-12264 State: PUBLISHED Published: 2017-10-05T07:00:00 Last Updated: 2024-08-05T18:28:16.842Z Vendors: n/a Products: Cisco Meeting Server Problem Types: CWE-20 Description: A vulnerability in the Web Admin Interface of Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to insufficient bound checks performed by the affected software. An attacker could exploit this vulnerability by sending a malicious HTTP packet to the affected system. A successful exploit could allow the attacker to cause a reload of the Web Admin Server. Cisco Bug IDs: CSCve89149. Additional Analyst Notes: - CVE Program
attacker to cause a reload of the Web Admin Server. Cisco Bug IDs: CSCve89149. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039506 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171004-cms - http://www.securityfocus.com/bid/101148
CVE ID: CVE-2017-12265 State: PUBLISHED Published: 2017-10-05T07:00:00 Last Updated: 2024-08-05T18:28:16.790Z Vendors: n/a Products: Cisco Adaptive Security Appliance Software Problem Types: CWE-79 Description: A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device, aka HREF XSS. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading a u
the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or allow the attacker to access sensitive browser-based information. The vulnerability exists in the Cisco Adaptive Security Appliance (ASA) Software when the WEBVPN feature is enabled. Cisco Bug IDs: CSCve91068. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101170 - http://www.securitytracker.com/id/1039502 - https://tools.cisco.com/security/center/content/CiscoSecuri
com/bid/101170 - http://www.securitytracker.com/id/1039502 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171004-asa1
CVE ID: CVE-2017-12266 State: PUBLISHED Published: 2017-10-05T07:00:00 Last Updated: 2024-08-05T18:28:16.782Z Vendors: n/a Products: Cisco Meeting App Problem Types: CWE-264 Description: A vulnerability in the routine that loads DLL files in Cisco Meeting App for Windows could allow an authenticated, local attacker to run an executable file with privileges equivalent to those of Cisco Meeting App. The vulnerability is due to incomplete input validation of the path name for DLL files before they are loaded. An attacker could exploit this vulnerability by installing a crafted DLL file in a specific system directory. A successful exploit could allow the attacker to execute commands on the under
DLL file in a specific system directory. A successful exploit could allow the attacker to execute commands on the underlying Microsoft Windows host with privileges equivalent to those of Cisco Meeting App. The attacker would need valid user credentials to exploit this vulnerability. Cisco Bug IDs: CSCvd77907. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101158 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171004-cma
CVE ID: CVE-2017-12267 State: PUBLISHED Published: 2017-10-05T07:00:00 Last Updated: 2024-08-05T18:28:16.809Z Vendors: n/a Products: Cisco Wide Area Application Services Problem Types: CWE-119 Description: A vulnerability in the Independent Computing Architecture (ICA) accelerator feature for the Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, remote attacker to cause an ICA application optimization-related process to restart, resulting in a partial denial of service (DoS) condition. The vulnerability is due to improperly aborting a connection when an unexpected protocol packet is received. An attacker could exploit this vulnerability by sending a crafted ICA traf
en an unexpected protocol packet is received. An attacker could exploit this vulnerability by sending a crafted ICA traffic through the targeted device. A successful exploit could allow the attacker to cause a DoS condition that is due to a process unexpectedly restarting. The Cisco WAAS could drop ICA traffic while the process is restarting. This vulnerability affects Cisco Wide Area Application Services (WAAS) and Cisco Virtual Wide Area Application Services (vWAAS). Cisco Bug IDs: CSCve74457. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101176 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171004-waas
urityfocus.com/bid/101176 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171004-waas1
CVE ID: CVE-2017-12268 State: PUBLISHED Published: 2017-10-05T07:00:00 Last Updated: 2024-08-05T18:28:16.840Z Vendors: n/a Products: Cisco AnyConnect Network Access Manager Problem Types: CWE-264 Description: A vulnerability in the Network Access Manager (NAM) of Cisco AnyConnect Secure Mobility Client could allow an authenticated, local attacker to enable multiple network adapters, aka a Dual-Homed Interface vulnerability. The vulnerability is due to insufficient NAM policy enforcement. An attacker could exploit this vulnerability by manipulating network interfaces of the device to allow multiple active network interfaces. A successful exploit could allow the attacker to send traffic over a