Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-5448 State: PUBLISHED Published: 2013-11-29T15:00:00 Last Updated: 2024-08-06T17:15:20.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Right Click Plugin context menus in IBM Security QRadar SIEM 7.1 and 7.2 before 7.2 MR1 Patch 1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/63938 - http://www-01.ibm.com/support/docview.wss?uid=swg21656875 - https://exchange.xforce.ibmcloud.com/vulnerabilities/87912
CVE ID: CVE-2013-5449 State: PUBLISHED Published: 2013-12-04T02:00:00 Last Updated: 2024-08-06T17:15:20.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in workingSet.jsp in IBM Eclipse Help System (IEHS), as used in the installable InfoCenter component in IBM FileNet Content Manager 4.5.1, 5.0.0, 5.1.0, and 5.2.0, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/64058 - https://exchange.xforce.ibmcloud.com/vulnerabilities/88056 - http://www-01.ibm.com/support/docview.wss?uid=swg21657493
CVE ID: CVE-2013-5450 State: PUBLISHED Published: 2013-11-13T15:00:00 Last Updated: 2024-08-06T17:15:19.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security AppScan Enterprise 8.5 through 8.7.0.1, when Jazz authentication is enabled, allows man-in-the-middle attackers to obtain sensitive information or modify data by leveraging an improperly protected URL to obtain a session token. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/88190 - http://www-01.ibm.com/support/docview.wss?uid=swg21655578
CVE ID: CVE-2013-5452 State: PUBLISHED Published: 2013-12-19T22:00:00 Last Updated: 2024-08-06T17:15:20.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM FileNet Business Process Framework 4.1.0 allows remote authenticated users to read arbitrary files or send TCP requests to intranet servers via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/88192 - http://www.securitytracker.com/id/1033734 - http://www-01.ibm.com/support/docview.wss?uid=swg1PJ40949 - http://www-304.
http://www.securitytracker.com/id/1033734 - http://www-01.ibm.com/support/docview.wss?uid=swg1PJ40949 - http://www-304.ibm.com/support/docview.wss?uid=swg21963014 - http://www-01.ibm.com/support/docview.wss?uid=swg21660343
CVE ID: CVE-2013-5453 State: PUBLISHED Published: 2013-11-13T15:00:00 Last Updated: 2024-08-06T17:15:20.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security AppScan Enterprise 5.6 through 8.7.0.1 allows remote authenticated users to read arbitrary report files by leveraging knowledge of filenames that cannot be easily predicted. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21655578 - https://exchange.xforce.ibmcloud.com/vulnerabilities/88193
CVE ID: CVE-2013-5454 State: PUBLISHED Published: 2013-11-16T02:00:00 Last Updated: 2024-08-06T17:15:20.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Portal 6.0 through 6.0.1.7, 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF25, and 8.0 through 8.0.0.1 CF08 allows remote attackers to read arbitrary files via a modified URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PM99205 - http://www-01.ibm.com/support/docview.wss?uid=swg21655656 - https://exchange.xforce.ibmcloud.com/vulnerabilities/88253
CVE ID: CVE-2013-5455 State: PUBLISHED Published: 2013-12-07T02:00:00 Last Updated: 2024-08-06T17:15:20.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM SmartCloud Provisioning 2.1 before FP3 IF0001 allows remote authenticated users to modify virtual-system deployment via deployer.virtualsystems CLI commands, as demonstrated by a deletion using a deployer.virtualsystems[#].delete command. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21657949 - https://exchange.xforce.ibmcloud.com/vulnerabilities/88254
CVE ID: CVE-2013-5456 State: PUBLISHED Published: 2013-11-24T18:00:00 Last Updated: 2024-08-06T17:15:20.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: The com.ibm.rmi.io.SunSerializableFactory class in IBM Java SDK 7.0.0 before SR6 allows remote attackers to bypass a sandbox protection mechanism and execute arbitrary code via vectors related to deserialization inside the AccessController doPrivileged block. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IV51329 - https://exchange.xforce.ibmcloud.com/vulnerabilities/88255 - http://www-01.ibm.com/support/docview.wss?uid=swg21655202 - http://lists.opensuse.org/
cloud.com/vulnerabilities/88255 - http://www-01.ibm.com/support/docview.wss?uid=swg21655202 - http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00013.html - http://www-01.ibm.com/support/docview.wss?uid=swg21655201 - http://www.security-explorations.com/materials/SE-2012-01-IBM-3.pdf - https://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security_Update_November_2013 - http://rhn.redhat.com/errata/RHSA-2013-1507.html - http://www.security-explorations.com/materials/SE-2012-01-IBM-5.pdf - http://secunia.com/advisories/56338
CVE ID: CVE-2013-5457 State: PUBLISHED Published: 2013-11-24T18:00:00 Last Updated: 2024-08-06T17:15:20.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM Java SDK 7.0.0 before SR6, 6.0.1 before SR7, and 6.0.0 before SR15 allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21655202 - https://exchange.xforce.ibmcloud.com/vulnerabilities/88256 - http://rhn.redhat.com/errata/RHSA-2013-1508.html - http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00013.html - http://www-01.ibm.com/support/docview.wss?u
http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00013.html - http://www-01.ibm.com/support/docview.wss?uid=swg21655201 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV51334 - https://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security_Update_November_2013 - http://rhn.redhat.com/errata/RHSA-2013-1793.html - http://rhn.redhat.com/errata/RHSA-2013-1507.html - http://secunia.com/advisories/56338
CVE ID: CVE-2013-5458 State: PUBLISHED Published: 2013-11-24T18:00:00 Last Updated: 2024-08-06T17:15:20.197Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM Java SDK 7.0.0 before SR6 allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IV51328 - http://www-01.ibm.com/support/docview.wss?uid=swg21655202 - http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00013.html - http://www-01.ibm.com/support/docview.wss?uid=swg21655201 - https://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security_Update_Nove
m.com/support/docview.wss?uid=swg21655201 - https://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security_Update_November_2013 - https://exchange.xforce.ibmcloud.com/vulnerabilities/88257 - http://rhn.redhat.com/errata/RHSA-2013-1507.html - http://secunia.com/advisories/56338
CVE ID: CVE-2013-5459 State: PUBLISHED Published: 2014-04-21T22:00:00 Last Updated: 2024-08-06T17:15:20.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM Rational Software Architect (RSA) Design Manager and Rational Rhapsody Design Manager 3.x through 3.0.1 and 4.x before 4.0.6 allows remote authenticated users to modify data by leveraging improper parameter checking. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21664531 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84773
CVE ID: CVE-2013-5460 State: PUBLISHED Published: 2014-05-26T16:00:00 Last Updated: 2024-08-06T17:15:20.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Maximo Asset Management 7.x before 7.5.0.6 and SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2 allow remote authenticated users to bypass intended access restrictions, and read communication logs associated with unrelated records, via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/88308 - http://www-01.ibm.com/support/docview.wss?uid=swg21670870 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV46745
CVE ID: CVE-2013-5461 State: PUBLISHED Published: 2018-04-27T16:00:00 Last Updated: 2024-08-06T17:15:20.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Endpoint Manager for Remote Control 9.0.0 and 9.0.1 and Tivoli Remote Control 5.1.2 store multiple hashes of partial passwords, which makes it easier for remote attackers to decrypt passwords by leveraging access to the hashes. IBM X-Force ID: 88309. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/88309 - https://www.ibm.com/blogs/psirt/ibm-security-bulletin-insecure-storage-of-passwords-in-tivoli-remote-control-cve-2013-5461/ - https://www.ibm.com/blogs
/ibm-security-bulletin-insecure-storage-of-passwords-in-tivoli-remote-control-cve-2013-5461/ - https://www.ibm.com/blogs/psirt/ibm-security-bulletin-insecure-storage-of-passwords-in-ibm-endpoint-manager-for-remote-control-cve-2013-5461/
CVE ID: CVE-2013-5462 State: PUBLISHED Published: 2013-12-19T22:00:00 Last Updated: 2024-08-06T17:15:20.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM/ECMClient/configure/explodedformat/navigator/header.jsp in IBM Content Navigator 2.0.0, 2.0.1 before 2.0.1.2-ICN-FP002, and 2.0.2 before 2.0.2.1-ICN-FP001 allows remote attackers to conduct clickjacking attacks via vectors involving FRAME elements. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037704 - http://www-01.ibm.com/support/docview.wss?uid=swg21660223 - https://exchange.xforce.ibmcloud.com/vulnerabilities/88358
CVE ID: CVE-2013-5463 State: PUBLISHED Published: 2013-11-29T15:00:00 Last Updated: 2024-08-06T17:15:20.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WinCollect agent in IBM Security QRadar SIEM before 7.1.1.569824 allows remote attackers to bypass intended access restrictions by injecting a (1) DLL or (2) configuration file. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21656875 - https://exchange.xforce.ibmcloud.com/vulnerabilities/88361
CVE ID: CVE-2013-5464 State: PUBLISHED Published: 2014-05-26T16:00:00 Last Updated: 2024-08-06T17:15:20.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Maximo Asset Management 7.5.x before 7.5.0.3 IFIX027, 7.5.0.4 before IFIX011, and 7.5.0.5 before IFIX006 and SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2 allow remote authenticated users to bypass intended access restrictions, and modify physical counts associated with restricted storerooms, via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IV46277 - https://exchange.xforce.ibmcloud.com/vulnerabilities/88362 -
http://www-01.ibm.com/support/docview.wss?uid=swg1IV46277 - https://exchange.xforce.ibmcloud.com/vulnerabilities/88362 - http://www-01.ibm.com/support/docview.wss?uid=swg21670870
CVE ID: CVE-2013-5465 State: PUBLISHED Published: 2014-05-26T16:00:00 Last Updated: 2024-08-06T17:15:20.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Maximo Asset Management 7.x before 7.1.1.7 LAFIX.20140319-0837, 7.1.1.11 before IFIX.20140323-0749, 7.1.1.12 before IFIX.20140321-1336, 7.5.x before 7.5.0.3 IFIX027, and 7.5.0.4 before IFIX011; SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2; and Tivoli IT Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB) 7.x before 7.1.1.7 LAFIX.20140319-0837, 7.1.1.11 before IFIX.20140207-1801, and 7.1.1.12 before IFIX.20140218-1510
CMDB) 7.x before 7.1.1.7 LAFIX.20140319-0837, 7.1.1.11 before IFIX.20140207-1801, and 7.1.1.12 before IFIX.20140218-1510 do not properly restrict file types during uploads, which allows remote authenticated users to have an unspecified impact via an invalid type. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IV46511 - http://www-01.ibm.com/support/docview.wss?uid=swg21670870 - https://exchange.xforce.ibmcloud.com/vulnerabilities/88364
CVE ID: CVE-2013-5466 State: PUBLISHED Published: 2013-12-18T11:00:00 Last Updated: 2024-08-06T17:15:20.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XSLT library in IBM DB2 and DB2 Connect 9.5 through 10.5, and the DB2 pureScale Feature 9.8 for Enterprise Server Edition, allows remote authenticated users to cause a denial of service via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IC97470 - https://exchange.xforce.ibmcloud.com/vulnerabilities/88365 - http://www.securityfocus.com/bid/64334 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC97402 - http://www-01.ibm.com/support/
securityfocus.com/bid/64334 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC97402 - http://www-01.ibm.com/support/docview.wss?uid=swg21660046 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC97472 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC97763 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC97471
CVE ID: CVE-2013-5467 State: PUBLISHED Published: 2014-08-29T10:00:00 Last Updated: 2024-08-06T17:15:20.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: Monitoring Agent for UNIX Logs 6.2.0 through FP03, 6.2.1 through FP04, 6.2.2 through FP09, and 6.2.3 through FP04 and Monitoring Server (ms) and Shared Libraries (ax) 6.2.0 through FP03, 6.2.1 through FP04, 6.2.2 through FP08, 6.2.3 through FP01, and 6.3.0 through FP01 in IBM Tivoli Monitoring (ITM) on UNIX allow local users to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/69436 - https://exchange.xforce.ibmcloud.com/vulnerabilities/88
ontainer: References: - http://www.securityfocus.com/bid/69436 - https://exchange.xforce.ibmcloud.com/vulnerabilities/88370 - http://www-01.ibm.com/support/docview.wss?uid=swg21675798
CVE ID: CVE-2013-5468 State: PUBLISHED Published: 2014-03-05T11:00:00 Last Updated: 2024-08-06T17:15:20.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 through 4.9.0, and ACSWeb in AlgoWebApps 5.0.0, does not encrypt login requests, which allows remote attackers to obtain sensitive information by sniffing the network. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21666110 - https://exchange.xforce.ibmcloud.com/vulnerabilities/88382
CVE ID: CVE-2013-5469 State: PUBLISHED Published: 2013-08-30T20:00:00 Last Updated: 2024-08-06T17:15:20.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TCP implementation in Cisco IOS does not properly implement the transitions from the ESTABLISHED state to the CLOSED state, which allows remote attackers to cause a denial of service (flood of ACK packets) via a crafted series of ACK and FIN packets, aka Bug ID CSCtz14399. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1028969 - http://www.securityfocus.com/bid/62083 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5469 - https://exchange.xfor
com/bid/62083 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5469 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86794 - http://osvdb.org/96764
CVE ID: CVE-2013-5470 State: PUBLISHED Published: 2013-09-04T01:00:00 Last Updated: 2024-08-06T17:15:20.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Secure Access Control System (ACS) does not properly handle requests to read from the TACACS+ socket, which allows remote attackers to cause a denial of service (process crash) via malformed TCP packets, aka Bug ID CSCuh12488. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5470 - http://osvdb.org/96822 - http://www.securityfocus.com/bid/62145
CVE ID: CVE-2013-5471 State: PUBLISHED Published: 2013-09-05T01:00:00 Last Updated: 2024-08-06T17:15:20.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Global Site Selector (GSS) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuh42164. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5471 - http://www.securitytracker.com/id/1028985 - http://osvdb.org/96823 - http://www.securityfocus.com/bid/62166
CVE ID: CVE-2013-5472 State: PUBLISHED Published: 2013-09-27T10:00:00Z Last Updated: 2024-09-16T17:07:47.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NTP implementation in Cisco IOS 12.0 through 12.4 and 15.0 through 15.1, and IOS XE 2.1 through 3.3, does not properly handle encapsulation of multicast NTP packets within MSDP SA messages, which allows remote attackers to cause a denial of service (device reload) by leveraging an MSDP peer relationship, aka Bug ID CSCuc81226. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130925-ntp
CVE ID: CVE-2013-5473 State: PUBLISHED Published: 2013-09-27T10:00:00Z Last Updated: 2024-09-17T01:36:26.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in Cisco IOS 12.2, 15.1, and 15.2; IOS XE 3.4.2S through 3.4.5S; and IOS XE 3.6.xS before 3.6.1S allows remote attackers to cause a denial of service (memory consumption or device reload) via malformed IKEv1 packets, aka Bug ID CSCtx66011. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130925-ike
CVE ID: CVE-2013-5474 State: PUBLISHED Published: 2013-09-27T10:00:00Z Last Updated: 2024-09-16T20:17:31.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the IPv6 virtual fragmentation reassembly (VFR) implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.3 allows remote attackers to cause a denial of service (device reload or hang) via fragmented IPv6 packets, aka Bug ID CSCud64812. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130925-ipv6vfr
CVE ID: CVE-2013-5475 State: PUBLISHED Published: 2013-09-27T10:00:00Z Last Updated: 2024-09-16T19:50:49.010Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 12.2 through 12.4 and 15.0 through 15.3, and IOS XE 2.1 through 3.9, allows remote attackers to cause a denial of service (device reload) via crafted DHCP packets that are processed locally by a (1) server or (2) relay agent, aka Bug ID CSCug31561. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130925-dhcp
CVE ID: CVE-2013-5476 State: PUBLISHED Published: 2013-09-27T10:00:00Z Last Updated: 2024-09-16T18:03:49.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Zone-Based Firewall (ZFW) feature in Cisco IOS 15.1 through 15.2, when content filtering or HTTP ALG inspection is enabled, allows remote attackers to cause a denial of service (device reload or hang) via crafted IPv4 HTTP traffic, aka Bug ID CSCtx56174. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130925-cce
CVE ID: CVE-2013-5477 State: PUBLISHED Published: 2013-09-27T10:00:00Z Last Updated: 2024-09-16T23:01:09.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: The T1/E1 driver-queue functionality in Cisco IOS 12.2 and 15.0 through 15.3, when an HDLC32 driver is used, allows remote attackers to cause a denial of service (interface queue wedge) via bursty network traffic, aka Bug ID CSCub67465. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130925-wedge
CVE ID: CVE-2013-5478 State: PUBLISHED Published: 2013-09-27T10:00:00Z Last Updated: 2024-09-16T20:31:50.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 15.0 through 15.3 and IOS XE 3.2 through 3.8, when a VRF interface exists, allows remote attackers to cause a denial of service (interface queue wedge) via crafted UDP RSVP packets, aka Bug ID CSCuf17023. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130925-rsvp
CVE ID: CVE-2013-5479 State: PUBLISHED Published: 2013-09-27T10:00:00Z Last Updated: 2024-09-16T23:26:02.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DNS-over-TCP implementation in Cisco IOS 12.2 and 15.0 through 15.3, when NAT is used, allows remote attackers to cause a denial of service (device reload) via a crafted IPv4 DNS TCP stream, aka Bug ID CSCtn53730. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130925-nat
CVE ID: CVE-2013-5480 State: PUBLISHED Published: 2013-09-27T10:00:00Z Last Updated: 2024-09-16T21:03:26.005Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DNS-over-TCP implementation in Cisco IOS 12.2 and 15.0 through 15.3, when NAT is used, allows remote attackers to cause a denial of service (device reload) via a crafted IPv4 DNS TCP stream, aka Bug ID CSCuf28733. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130925-nat
CVE ID: CVE-2013-5481 State: PUBLISHED Published: 2013-09-27T10:00:00Z Last Updated: 2024-09-16T23:05:47.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PPTP implementation in Cisco IOS 12.2 and 15.0 through 15.3, when NAT is used, allows remote attackers to cause a denial of service (device reload) via crafted TCP port-1723 packets, aka Bug ID CSCtq14817. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130925-nat