rainbutterfly/cve_corpus huggingface dataset:
CVE-2015-0694 
Cisco ASR 9000 devices with software 5.3.0.BASE do not recognize that certain ACL entries have a single-host constraint, which allows remote attackers to bypass intended network-resource access restrictions by using an address that was not supposed to have been allowed, aka Bug ID CSCur28806.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-11T01:00:00.000Z
CVE-2015-0695 
Cisco IOS XR 4.3.4 through 5.3.0 on ASR 9000 devices, when uRPF, PBR, QoS, or an ACL is configured, does not properly handle bridge-group virtual interface (BVI) traffic, which allows remote attackers to cause a denial of service (chip and card hangs and reloads) by triggering use of a BVI interface for IPv4 packets, aka Bug ID CSCur62957.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-17T01:00:00.000Z
CVE-2015-0696 
Cross-site scripting (XSS) vulnerability in the login page in Cisco TC Software before 7.1.0 on Cisco TelePresence Collaboration Desk and Room Endpoints devices allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCuq94977.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-15T10:00:00.000Z
CVE-2015-0697 
Open redirect vulnerability in the login page in Cisco TC Software before 6.3-26 and 7.x before 7.3.0 on Cisco TelePresence Collaboration Desk and Room Endpoints devices allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCuq94980.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-15T10:00:00.000Z
CVE-2015-0698 
Multiple cross-site scripting (XSS) vulnerabilities in filter search forms in admin web pages on Cisco Web Security Appliance (WSA) devices with software 8.5.0-497 allow remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCut39213.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-15T10:00:00.000Z
CVE-2015-0699 
SQL injection vulnerability in the Interactive Voice Response (IVR) component in Cisco Unified Communications Manager (UCM) 10.5(1.98991.13) allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCut21563.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-15T10:00:00.000Z
CVE-2015-0700 
Cross-site request forgery (CSRF) vulnerability in the Dashboard page in the monitoring-and-report section in Cisco Secure Access Control Server Solution Engine before 5.5(0.46.5) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuj62924.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-17T01:00:00.000Z
CVE-2015-0701 
Cisco UCS Central Software before 1.3(1a) allows remote attackers to execute arbitrary commands via a crafted HTTP request, aka Bug ID CSCut46961.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-07T01:00:00.000Z
CVE-2015-0702 
Unrestricted file upload vulnerability in the Custom Prompts upload implementation in Cisco Unified MeetingPlace 8.6(1.9) allows remote authenticated users to execute arbitrary code by using the languageShortName parameter to upload a file that provides shell access, aka Bug ID CSCus95712.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-21T00:00:00.000Z
CVE-2015-0703 
Cross-site scripting (XSS) vulnerability in the administrative web interface in Cisco Unified MeetingPlace 8.6(1.9) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCus95857.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-21T00:00:00.000Z
CVE-2015-0704 
Multiple cross-site request forgery (CSRF) vulnerabilities in API features in Cisco Unified MeetingPlace 8.6(1.9) allow remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCus95884.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-22T01:00:00.000Z
CVE-2015-0705 
Cross-site request forgery (CSRF) vulnerability in the SOAP API endpoints of the web-services directory in Cisco Unified MeetingPlace 8.6(1.9) allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts, aka Bug ID CSCus97494.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-22T01:00:00.000Z
CVE-2015-0706 
Open redirect vulnerability in Cisco FireSIGHT System Software 5.3.1.1, 5.3.1.2, and 6.0.0 in FireSIGHT Management Center allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted HTTP header, aka Bug IDs CSCut06060, CSCut06056, and CSCus98966.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-23T01:00:00.000Z
CVE-2015-0707 
Cross-site scripting (XSS) vulnerability in Cisco FireSIGHT System Software 5.3.1.1 and 6.0.0 in FireSIGHT Management Center allows remote authenticated users to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCus85425.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-23T01:00:00.000Z
CVE-2015-0708 
Cisco IOS 15.4S, 15.4SN, and 15.5S and IOS XE 3.13S and 3.14S allow remote attackers to cause a denial of service (device crash) by including an IA_NA option in a DHCPv6 Solicit message on the local network, aka Bug ID CSCur29956.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-29T01:00:00.000Z
CVE-2015-0709 
Cisco IOS 15.5S and IOS XE allow remote authenticated users to cause a denial of service (device crash) by leveraging knowledge of the RADIUS secret and sending crafted RADIUS packets, aka Bug ID CSCur21348.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-29T01:00:00.000Z
CVE-2015-0710 
The Overlay Transport Virtualization (OTV) implementation in Cisco IOS XE 3.10S allows remote attackers to cause a denial of service (device reload) via a series of packets that are considered oversized and trigger improper fragmentation handling, aka Bug IDs CSCup37676 and CSCup30335.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-29T01:00:00.000Z
CVE-2015-0711 
The hamgr service in the IPv6 Proxy Mobile (PM) implementation in Cisco StarOS 18.1.0.59776 on ASR 5000 devices allows remote attackers to cause a denial of service (service reload and call-processing outage) via malformed PM packets, aka Bug ID CSCut94711.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-29T01:00:00.000Z
CVE-2015-0712 
The session-manager service in Cisco StarOS 12.0, 12.2(300), 14.0, and 14.0(600) on ASR 5000 devices allows remote attackers to cause a denial of service (service reload and packet loss) via malformed HTTP packets, aka Bug ID CSCud14217.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-01T10:00:00.000Z
CVE-2015-0713 
The web framework in Cisco TelePresence Advanced Media Gateway Series Software before 1.1(1.40), Cisco TelePresence IP Gateway Series Software, Cisco TelePresence IP VCR Series Software before 3.0(1.27), Cisco TelePresence ISDN Gateway Software before 2.2(1.94), Cisco TelePresence MCU Software before 4.4(3.54) and 4.5 before 4.5(1.45), Cisco TelePresence MSE Supervisor Software before 2.3(1.38), Cisco TelePresence Serial Gateway Series Software before 1.0(1.42), Cisco TelePresence Server Software for Hardware before 3.1(1.98), and Cisco TelePresence Server Software for Virtual Machine before 4.1(1.79) allows remote authenticated users to execute arbitrary commands with root privileges via unspecified vectors, aka Bug IDs CSCul55968, CSCur08993, CSCur15803, CSCur15807, CSCur15825, CSCur15832, CSCur15842, CSCur15850, and CSCur15855.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-25T00:00:00.000Z
CVE-2015-0714 
Multiple cross-site scripting (XSS) vulnerabilities in Cisco Finesse Server 10.0(1), 10.5(1), 10.6(1), and 11.0(1) allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCut53595.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-02T14:00:00.000Z
CVE-2015-0715 
SQL injection vulnerability in the administrative web interface in Cisco Unified Communications Manager 11.0(0.98000.225) allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug IDs CSCut33447 and CSCut33608.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-07T01:00:00.000Z
CVE-2015-0716 
Cross-site request forgery (CSRF) vulnerability in the CUCReports page in Cisco Unity Connection 11.0(0.98000.225) and 11.0(0.98000.332) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCut33659.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-07T01:00:00.000Z
CVE-2015-0717 
Cisco Unified Communications Manager 10.0(1.10000.12) allows local users to gain privileges via a command string in an unspecified parameter, aka Bug ID CSCut19546.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-16T14:00:00.000Z
CVE-2015-0718 
Cisco NX-OS 4.0 through 6.1 on Nexus 1000V 3000, 4000, 5000, 6000, and 7000 devices and Unified Computing System (UCS) platforms allows remote attackers to cause a denial of service (TCP stack reload) by sending crafted TCP packets to a device that has a TIME_WAIT TCP session, aka Bug ID CSCub70579.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-03-03T22:00:00.000Z
CVE-2015-0721 
Cisco NX-OS 4.0 through 7.3 on Multilayer Director and Nexus 1000V, 2000, 3000, 3500, 4000, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allows remote authenticated users to bypass intended AAA restrictions and obtain privileged CLI access via crafted parameters in an SSH connection negotiation, aka Bug IDs CSCum35502, CSCuw78669, CSCuw79754, and CSCux88492.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-06T10:00:00.000Z
CVE-2015-0722 
The network drivers in Cisco TelePresence T, Cisco TelePresence TE, and Cisco TelePresence TC before 7.3.2 allow remote attackers to cause a denial of service (process restart or device reload) via a flood of crafted IP packets, aka Bug ID CSCuj68952.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-25T00:00:00.000Z
CVE-2015-0723 
The wireless web-authentication subsystem on Cisco Wireless LAN Controller (WLC) devices 7.5.x and 7.6.x before 7.6.120 allows remote attackers to cause a denial of service (process crash and device restart) via a crafted value, aka Bug ID CSCum03269.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-16T14:00:00.000Z
CVE-2015-0724 
Multiple cross-site scripting (XSS) vulnerabilities in dncs 7.0.0.12 in Cisco Headend Digital Broadband Delivery System allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in a (1) GET or (2) POST request, aka Bug ID CSCur25604.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-15T01:00:00.000Z
CVE-2015-0725 
Cisco Videoscape Distribution Suite Service Broker (aka VDS-SB), when a VDSM configuration on UCS is used, and Videoscape Distribution Suite for Internet Streaming (aka VDS-IS or CDS-IS) before 3.3.1 R7 and 4.x before 4.0.0 R4 allow remote attackers to cause a denial of service (device reload) via a crafted HTTP request, aka Bug IDs CSCus79834 and CSCuu63409.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-16T21:00:00.000Z
CVE-2015-0726 
The web administration interface on Cisco Wireless LAN Controller (WLC) devices before 7.0.241, 7.1.x through 7.4.x before 7.4.122, and 7.5.x and 7.6.x before 7.6.120 allows remote authenticated users to cause a denial of service (device crash) via unspecified parameters, aka Bug IDs CSCum65159 and CSCum65252.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-16T14:00:00.000Z
CVE-2015-0727 
Cross-site scripting (XSS) vulnerability in the HTTP module in Cisco Security Manager (CSM) 4.7(0)SP1(1) allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCut27789.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-15T01:00:00.000Z
CVE-2015-0728 
Cross-site scripting (XSS) vulnerability in Cisco Access Control Server (ACS) 5.5(0.1) allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuu11002.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-15T01:00:00.000Z
CVE-2015-0729 
Cross-site scripting (XSS) vulnerability in Cisco Secure Access Control Server Solution Engine (ACSE) 5.5(0.1) allows remote attackers to inject arbitrary web script or HTML via a file-inclusion attack, aka Bug ID CSCuu11005.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-16T14:00:00.000Z
CVE-2015-0730 
The SMB module in Cisco Wide Area Application Services (WAAS) 6.0(1) allows remote attackers to cause a denial of service (module reload) via an invalid field in a Negotiate Protocol request, aka Bug ID CSCuo75645.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-16T14:00:00.000Z
CVE-2015-0731 
The ISDN implementation in Cisco IOS 15.3S allows remote attackers to cause a denial of service (device reload) via malformed Q931 SETUP messages, aka Bug ID CSCut37890.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-16T01:00:00.000Z
CVE-2015-0732 
Cross-site scripting (XSS) vulnerability in Cisco AsyncOS on the Web Security Appliance (WSA) 9.0.0-193; Email Security Appliance (ESA) 8.5.6-113, 9.1.0-032, 9.1.1-000, and 9.6.0-000; and Content Security Management Appliance (SMA) 9.1.0-033 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug IDs CSCuu37430, CSCuu37420, CSCut71981, and CSCuv50167.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-29T01:00:00.000Z
CVE-2015-0733 
CRLF injection vulnerability in the HTTP Header Handler in Digital Broadband Delivery System in Cisco Headend System Release allows remote attackers to inject arbitrary HTTP headers, and conduct HTTP response splitting attacks or cross-site scripting (XSS) attacks, via a crafted request, aka Bug ID CSCur25580.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-30T14:00:00.000Z
CVE-2015-0734 
Multiple cross-site scripting (XSS) vulnerabilities on the Cisco Email Security Appliance (ESA) 8.5.6-106 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in a (1) GET or (2) POST request, aka Bug ID CSCut87743.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-15T01:00:00.000Z
CVE-2015-0735 
Cross-site request forgery (CSRF) vulnerability in Cisco Unified Customer Voice Portal (CVP) 10.5(1) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCut93970.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-17T01:00:00.000Z
CVE-2015-0736 
Cross-site request forgery (CSRF) vulnerability in Cisco MediaSense 10.5(1) and earlier allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu16728.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-16T01:00:00.000Z
CVE-2015-0737 
Multiple cross-site scripting (XSS) vulnerabilities in Cisco FireSIGHT System Software 5.3.1.1 allow remote attackers to inject arbitrary web script or HTML via a crafted (1) GET or (2) POST parameter, aka Bug ID CSCuu11099.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-12T10:00:00.000Z
CVE-2015-0738 
Cross-site scripting (XSS) vulnerability in the Web Tracking Report page on Cisco Web Security Appliance (WSA) devices 8.5.0-497 allows remote attackers to inject arbitrary web script or HTML via an unspecified field, aka Bug ID CSCuu16008.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-17T01:00:00.000Z
CVE-2015-0739 
The Lights-Out Management (LOM) implementation in Cisco FireSIGHT System Software 5.3.0 on Sourcefire 3D Sensor devices allows remote authenticated users to perform arbitrary Baseboard Management Controller (BMC) file uploads via unspecified vectors, aka Bug ID CSCus87938.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-19T01:00:00.000Z
CVE-2015-0740 
Cross-site request forgery (CSRF) vulnerability in Cisco Unified Intelligence Center 10.6(1) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCus28826.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-20T00:00:00.000Z
CVE-2015-0741 
Multiple cross-site request forgery (CSRF) vulnerabilities in Cisco Prime Central for Hosted Collaboration Solution (PC4HCS) 10.6(1) and earlier allow remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCut04596.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-21T10:00:00.000Z
CVE-2015-0742 
The Protocol Independent Multicast (PIM) application in Cisco Adaptive Security Appliance (ASA) Software 9.2(0.0), 9.2(0.104), 9.2(3.1), 9.2(3.4), 9.3(1.105), 9.3(2.100), 9.4(0.115), 100.13(0.21), 100.13(20.3), 100.13(21.9), and 100.14(1.1) does not properly implement multicast-forwarding registration, which allows remote attackers to cause a denial of service (forwarding outage) via a crafted multicast packet, aka Bug ID CSCus74398.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-21T10:00:00.000Z
CVE-2015-0743 
Cisco Headend System Release allows remote attackers to cause a denial of service (DHCP and TFTP outage) via a flood of crafted UDP traffic, aka Bug ID CSCus04097.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-30T14:00:00.000Z
CVE-2015-0744 
Cisco DTA Control System (DTACS) 4.0.0.9 and Cisco Headend System Release allow remote attackers to cause a denial of service (CPU and memory consumption, and TCP service outage) via (1) a SYN flood or (2) another type of TCP traffic flood, aka Bug IDs CSCus50642, CSCus50662, CSCus50625, CSCus50657, and CSCus68315.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-30T14:00:00.000Z
CVE-2015-0745 
Cisco Headend System Release allows remote attackers to read temporary script files or archive files, and consequently obtain sensitive information, via a crafted header in an HTTP request, aka Bug ID CSCus44909.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-30T14:00:00.000Z
CVE-2015-0746 
The REST API in Cisco Access Control Server (ACS) 5.5(0.46.2) allows remote attackers to cause a denial of service (API outage) by sending many requests, aka Bug ID CSCut62022.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-22T00:00:00.000Z
CVE-2015-0747 
Cisco Conductor for Videoscape 3.0 and Cisco Headend System Release allow remote attackers to inject arbitrary cookies via a crafted HTTP request, aka Bug ID CSCuh25408.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-30T14:00:00.000Z
CVE-2015-0749 Cisco Unified Communications Manager Cross-Site Scripting Vulnerability
A vulnerability in Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack on the affected software. The vulnerabilities is due to improper input validation of certain parameters passed to the affected software. An attacker could exploit this vulnerability by convincing a user to follow a malicious link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected site or allow the attacker to access sensitive browser-based information.
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
Affected products: vendor: Cisco
product: Cisco Unified Communications Manager
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 4.3
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
version: 3.1
Published: 2020-02-19T02:55:13.277Z
CVE-2015-0750 
The administrative web interface in Cisco Hosted Collaboration Solution (HCS) 10.6(1) and earlier allows remote authenticated users to execute arbitrary commands via crafted input to unspecified fields, aka Bug ID CSCut02786.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-23T01:00:00.000Z
CVE-2015-0751 
Cisco IP Phone 7861, when firmware from Cisco Unified Communications Manager 10.3(1) is used, allows remote attackers to cause a denial of service via crafted packets, aka Bug ID CSCus81800.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-29T15:00:00.000Z
CVE-2015-0752 
Cross-site scripting (XSS) vulnerability in Cisco TelePresence Video Communication Server (VCS) X8.5.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCut27635.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-29T15:00:00.000Z
CVE-2015-0753 
SQL injection vulnerability in Cisco Unified Email Interaction Manager (EIM) and Unified Web Interaction Manager (WIM) 9.0(2) allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuu30028.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-29T15:00:00.000Z
CVE-2015-0754 
Cisco Finesse 10.5(1) allows remote authenticated users to obtain sensitive information or cause a denial of service (CPU and memory consumption) via a crafted XML document, aka Bug ID CSCut95810.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-29T15:00:00.000Z
CVE-2015-0755 
The Posture module for Cisco Identity Services Engine (ISE), as distributed in Cisco AnyConnect Secure Mobility Client 4.0(64), allows local users to gain privileges via unspecified commands, aka Bug ID CSCut05797.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-29T15:00:00.000Z
CVE-2015-0756 
Cisco Wireless LAN Controller (WLC) devices with software 7.4(1.1) allow remote attackers to cause a denial of service (wireless-networking outage) via crafted TCP traffic on the local network, aka Bug ID CSCug67104.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-29T15:00:00.000Z
CVE-2015-0757 
The web framework in Cisco Identity Services Engine (ISE) 1.2(1.901) and 1.3(0.722) does not properly implement session handlers, which allows remote attackers to obtain sensitive information by reading web pages, as demonstrated by MnT reports, aka Bug ID CSCuq23140.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-29T15:00:00.000Z