rainbutterfly/cve_corpus huggingface dataset:
CVE-2015-0563 
epan/dissectors/packet-smtp.c in the SMTP dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 uses an incorrect length value for certain string-append operations, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-10T02:00:00.000Z
CVE-2015-0564 
Buffer underflow in the ssl_decrypt_record function in epan/dissectors/packet-ssl-utils.c in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 allows remote attackers to cause a denial of service (application crash) via a crafted packet that is improperly handled during decryption of an SSL session.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-10T02:00:00.000Z
CVE-2015-0565 
NaCl in 2015 allowed the CLFLUSH instruction, making rowhammer attacks possible.
Problem types: description: rowhammer
Affected products: vendor: NaCl
product: NaCL
Published: 2020-02-25T19:57:46.000Z
CVE-2015-0568 
Use-after-free vulnerability in the msm_set_crop function in drivers/media/video/msm/msm_camera.c in the MSM-Camera driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to gain privileges or cause a denial of service (memory corruption) via an application that makes a crafted ioctl call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-07T21:00:00.000Z
CVE-2015-0569 
Heap-based buffer overflow in the private wireless extensions IOCTL implementation in wlan_hdd_wext.c in the WLAN (aka Wi-Fi) driver for the Linux kernel 3.x and 4.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to gain privileges via a crafted application that establishes a packet filter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-09T10:00:00.000Z
CVE-2015-0570 
Stack-based buffer overflow in the SET_WPS_IE IOCTL implementation in wlan_hdd_hostapd.c in the WLAN (aka Wi-Fi) driver for the Linux kernel 3.x and 4.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to gain privileges via a crafted application that uses a long WPS IE element.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-09T10:00:00.000Z
CVE-2015-0571 
The WLAN (aka Wi-Fi) driver for the Linux kernel 3.x and 4.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not verify authorization for private SET IOCTL calls, which allows attackers to gain privileges via a crafted application, related to wlan_hdd_hostapd.c and wlan_hdd_wext.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-09T10:00:00.000Z
CVE-2015-0572 
Multiple race conditions in drivers/char/adsprpc.c and drivers/char/adsprpc_compat.c in the ADSPRPC driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allow attackers to cause a denial of service (zero-value write) or possibly have unspecified other impact via a COMPAT_FASTRPC_IOCTL_INVOKE_FD ioctl call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-10T10:00:00.000Z
CVE-2015-0573 
drivers/media/platform/msm/broadcast/tsc.c in the TSC driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to cause a denial of service (invalid pointer dereference) or possibly have unspecified other impact via a crafted application that makes a TSC_GET_CARD_STATUS ioctl call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-07T21:00:00.000Z
CVE-2015-0574 
In all Qualcomm products with Android releases from CAF using the Linux kernel, the validation of filesystem access was insufficient.
Problem types: description: Improper Access Control in UIM
Affected products: vendor: Qualcomm, Inc.
product: Snapdragon Mobile, Snapdragon Wear
Published: 2017-08-18T18:00:00.000Z
CVE-2015-0575 
In all Qualcomm products with Android releases from CAF using the Linux kernel, insecure ciphersuites were included in the default configuration.
Problem types: description: Configuration Vulnerability in SSL
Affected products: vendor: Qualcomm, Inc.
product: All Qualcomm products
Published: 2017-08-18T18:00:00.000Z
CVE-2015-0576 
In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in HSDPA.
Problem types: description: Buffer Copy without Checking Size of Input in WCDMA
Affected products: vendor: Qualcomm, Inc.
product: Snapdragon Mobile, Snapdragon Wear
Published: 2017-08-18T18:00:00.000Z
CVE-2015-0577 
Multiple cross-site scripting (XSS) vulnerabilities in the IronPort Spam Quarantine (ISQ) page in Cisco AsyncOS, as used on the Cisco Email Security Appliance (ESA) and Content Security Management Appliance (SMA), allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug IDs CSCus22925 and CSCup08113.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-14T19:00:00.000Z
CVE-2015-0578 
Cisco Adaptive Security Appliance (ASA) Software, when a DHCPv6 relay is configured, allows remote attackers to cause a denial of service (device reload) via crafted DHCP packets on the local network, aka Bug ID CSCur45455.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-14T19:00:00.000Z
CVE-2015-0579 
Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway allow remote attackers to cause a denial of service (memory and CPU consumption, and partial outage) via crafted SIP packets, aka Bug ID CSCur12473.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-14T19:00:00.000Z
CVE-2015-0580 
Multiple SQL injection vulnerabilities in the ACS View reporting interface pages in Cisco Secure Access Control System (ACS) before 5.5 patch 7 allow remote authenticated administrators to execute arbitrary SQL commands via crafted HTTPS requests, aka Bug ID CSCuq79027.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-12T01:00:00.000Z
CVE-2015-0581 
The XML parser in Cisco Prime Service Catalog before 10.1 allows remote authenticated users to read arbitrary files or cause a denial of service (CPU and memory consumption) via an external entity declaration in conjunction with an entity reference, as demonstrated by reading private keys, related to an XML External Entity (XXE) issue, aka Bug ID CSCup92880.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-28T22:00:00.000Z
CVE-2015-0582 
The High Availability (HA) subsystem in Cisco NX-OS on MDS 9000 devices allows remote attackers to cause a denial of service via crafted traffic, aka Bug ID CSCuo09129.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-10T02:00:00.000Z
CVE-2015-0583 
Cisco WebEx Meeting Center does not properly restrict the content of URLs, which allows remote attackers to obtain sensitive information via vectors related to file: URIs, aka Bug ID CSCus18281.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-14T19:00:00.000Z
CVE-2015-0584 
The image-upgrade implementation on Cisco Desktop Collaboration Experience (aka Collaboration Desk Experience or DX) DX650 endpoints allows local users to execute arbitrary OS commands via an unspecified parameter, aka Bug ID CSCus38947.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-20T02:00:00.000Z
CVE-2015-0586 
The Network-Based Application Recognition (NBAR) protocol implementation in Cisco IOS 15.3(100)M and earlier on Cisco 2900 Integrated Services Router (aka Cisco Internet Router) devices allows remote attackers to cause a denial of service (NBAR process hang) via IPv4 packets, aka Bug ID CSCuo73682.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-28T22:00:00.000Z
CVE-2015-0588 
Cross-site request forgery (CSRF) vulnerability in Cisco Unified Communications Domain Manager (UCDM) 10 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuo77055.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-15T22:00:00.000Z
CVE-2015-0589 
The administrative web interface in Cisco WebEx Meetings Server 1.0 through 1.5 allows remote authenticated users to execute arbitrary OS commands with root privileges via unspecified fields, aka Bug ID CSCuj40460.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-07T15:00:00.000Z
CVE-2015-0590 
Cisco WebEx Meeting Center allows remote attackers to activate disabled meeting attributes, and consequently obtain sensitive information, by providing crafted parameters during a meeting-join action, aka Bug ID CSCuo34165.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-17T11:00:00.000Z
CVE-2015-0591 
Cisco Unified Communications Domain Manager (UCDM) 10 allows remote attackers to cause a denial of service (daemon hang and GUI outage) via a flood of malformed TCP packets, aka Bug ID CSCur44177.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-15T22:00:00.000Z
CVE-2015-0592 
The Zone-Based Firewall implementation in Cisco IOS 15.4(2)T3 and earlier allows remote attackers to cause a denial of service (device reload) via crafted network traffic that triggers incorrect kernel-timer handling, aka Bug ID CSCuh25672.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-12T01:00:00.000Z
CVE-2015-0593 
The Zone-Based Firewall implementation in Cisco IOS 12.4(122)T and earlier does not properly manage session-object structures, which allows remote attackers to cause a denial of service (device reload) via crafted network traffic, aka Bug ID CSCul65003.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-13T02:00:00.000Z
CVE-2015-0594 
Multiple cross-site scripting (XSS) vulnerabilities in the help pages in Cisco Common Services, as used in Cisco Prime LAN Management Solution (LMS) and Cisco Security Manager, allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug IDs CSCuq54654 and CSCun18263.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-27T02:00:00.000Z
CVE-2015-0595 
The XMLAPI in Cisco WebEx Meetings Server 1.5(.1.131) and earlier allows remote attackers to obtain sensitive information by reading return messages from crafted GET requests, aka Bug ID CSCuj67079.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-02T01:00:00.000Z
CVE-2015-0596 
Cross-site request forgery (CSRF) vulnerability in Cisco WebEx Meetings Server 1.5(.1.131) and earlier allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuj67163.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-02T01:00:00.000Z
CVE-2015-0597 
The Forgot Password feature in Cisco WebEx Meetings Server 1.5(.1.131) and earlier allows remote attackers to enumerate administrative accounts via crafted packets, aka Bug IDs CSCuj67166 and CSCuj67159.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-02T01:00:00.000Z
CVE-2015-0598 
The RADIUS implementation in Cisco IOS and IOS XE allows remote attackers to cause a denial of service (device reload) via crafted IPv6 Attributes in Access-Accept packets, aka Bug IDs CSCur84322 and CSCur27693.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-03-06T02:00:00.000Z
CVE-2015-0599 
The web interface in Cisco Integrated Management Controller in Cisco Unified Computing System (UCS) on C-Series Rack Servers does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web site, related to a "cross-frame scripting (XFS)" issue, aka Bug ID CSCuf50138.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-03T22:00:00.000Z
CVE-2015-0600 
The mobility extension on Cisco Unified IP 9900 phones with firmware 9.4(.1) and earlier allows remote attackers to cause a denial of service (logoff) via crafted packets, aka Bug ID CSCuq12139.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-07T15:00:00.000Z
CVE-2015-0601 
Cisco Unified IP 9900 phones with firmware 9.4(.1) and earlier allow local users to cause a denial of service (device reload) via crafted commands, aka Bug ID CSCup92790.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-07T02:00:00.000Z
CVE-2015-0602 
The mobility extension on Cisco Unified IP 9900 phones with firmware 9.4(.1) and earlier allows remote attackers to obtain sensitive information by sniffing the network, aka Bug ID CSCuq12117.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-07T15:00:00.000Z
CVE-2015-0603 
Cisco Unified IP 9900 phones with firmware 9.4(.1) and earlier use weak permissions for unspecified files, which allows local users to cause a denial of service (persistent hang or reboot) by writing to a phone's filesystem, aka Bug ID CSCup90474.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-07T02:00:00.000Z
CVE-2015-0604 
The web framework on Cisco Unified IP 9900 phones with firmware 9.4(.1) and earlier allows remote attackers to upload files to arbitrary locations on a phone's filesystem via crafted HTTP requests, aka Bug ID CSCup90424.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-07T02:00:00.000Z
CVE-2015-0605 
The uuencode inspection engine in Cisco AsyncOS on Cisco Email Security Appliance (ESA) devices 8.5 and earlier allows remote attackers to bypass intended content restrictions via a crafted e-mail attachment with uuencode encoding, aka Bug ID CSCzv54343.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-07T02:00:00.000Z
CVE-2015-0606 
The IOS Shell in Cisco IOS allows local users to cause a denial of service (device crash) via unspecified commands, aka Bug ID CSCur59696.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-12T01:00:00.000Z
CVE-2015-0607 
The Authentication Proxy feature in Cisco IOS does not properly handle invalid AAA return codes from RADIUS and TACACS+ servers, which allows remote attackers to bypass authentication in opportunistic circumstances via a connection attempt that triggers an invalid code, as demonstrated by a connection attempt with a blank password, aka Bug IDs CSCuo09400 and CSCun16016.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-03-06T02:00:00.000Z
CVE-2015-0608 
Race condition in the Measurement, Aggregation, and Correlation Engine (MACE) implementation in Cisco IOS 15.4(2)T3 and earlier allows remote attackers to cause a denial of service (device reload) via crafted network traffic that triggers improper handling of the timing of process switching and Cisco Express Forwarding (CEF) switching, aka Bug ID CSCul48736.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-12T01:00:00.000Z
CVE-2015-0609 
Race condition in the Common Classification Engine (CCE) in the Measurement, Aggregation, and Correlation Engine (MACE) implementation in Cisco IOS 15.4(2)T3 and earlier allows remote attackers to cause a denial of service (device reload) via crafted network traffic that triggers improper handling of the timing of process switching and Cisco Express Forwarding (CEF) switching, aka Bug ID CSCuj96752.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-16T00:00:00.000Z
CVE-2015-0610 
Race condition in the object-group ACL feature in Cisco IOS 15.5(2)T and earlier allows remote attackers to bypass intended access restrictions via crafted network traffic that triggers improper handling of the timing of process switching and Cisco Express Forwarding (CEF) switching, aka Bug ID CSCun21071.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-12T01:00:00.000Z
CVE-2015-0611 
The administrative web-management portal in Cisco IX 8 (.0.1) and earlier on Cisco TelePresence IX5000 devices does not properly restrict the device-recovery account's access, which allows remote authenticated users to obtain HelpDesk-equivalent privileges by leveraging device-recovery authentication, aka Bug ID CSCus74174.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-12T01:00:00.000Z
CVE-2015-0612 
The Connection Conversation Manager (aka CuCsMgr) process in Cisco Unity Connection 8.5 before 8.5(1)SU6, 8.6 before 8.6(2a)SU4, and 9.x before 9.1(2)SU2, when SIP trunk integration is enabled, allows remote attackers to cause a denial of service (SIP outage) via a crafted UDP packet, aka Bug ID CSCuh25062.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-03T18:00:00.000Z
CVE-2015-0613 
The Connection Conversation Manager (aka CuCsMgr) process in Cisco Unity Connection 8.5 before 8.5(1)SU7, 8.6 before 8.6(2a)SU4, 9.x before 9.1(2)SU2, and 10.0 before 10.0(1)SU1, when SIP trunk integration is enabled, allows remote attackers to cause a denial of service (core dump and restart) via crafted SIP INVITE messages, aka Bug ID CSCul20444.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-03T18:00:00.000Z
CVE-2015-0614 
The Connection Conversation Manager (aka CuCsMgr) process in Cisco Unity Connection 8.5 before 8.5(1)SU7, 8.6 before 8.6(2a)SU4, 9.x before 9.1(2)SU2, and 10.0 before 10.0(1)SU1, when SIP trunk integration is enabled, allows remote attackers to cause a denial of service (core dump and restart) via crafted SIP INVITE messages, aka Bug ID CSCul26267.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-03T18:00:00.000Z
CVE-2015-0615 
The call-handling implementation in Cisco Unity Connection 8.5 before 8.5(1)SU7, 8.6 before 8.6(2a)SU4, 9.x before 9.1(2)SU2, and 10.0 before 10.0(1)SU1, when SIP trunk integration is enabled, allows remote attackers to cause a denial of service (port consumption) by improperly terminating SIP sessions, aka Bug ID CSCul28089.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-03T18:00:00.000Z
CVE-2015-0616 
The Connection Conversation Manager (aka CuCsMgr) process in Cisco Unity Connection 8.5 before 8.5(1)SU7, 8.6 before 8.6(2a)SU4, and 9.x before 9.1(2)SU2, when SIP trunk integration is enabled, allows remote attackers to cause a denial of service (core dump and restart) by improperly terminating SIP TCP connections, aka Bug ID CSCul69819.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-03T18:00:00.000Z
CVE-2015-0617 
Cisco ASR 5500 System Architecture Evolution (SAE) Gateway devices allow remote attackers to cause a denial of service (CPU consumption and SNMP outage) via malformed SNMP packets, aka Bug ID CSCur13393.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-18T02:00:00.000Z
CVE-2015-0618 
Cisco IOS XR 5.0.1 and 5.2.1 on Network Convergence System (NCS) 6000 devices and 5.1.3 and 5.1.4 on Carrier Routing System X (CRS-X) devices allows remote attackers to cause a denial of service (line-card reload) via malformed IPv6 packets with extension headers, aka Bug ID CSCuq95241.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-21T11:00:00.000Z
CVE-2015-0619 
Memory leak in the embedded web server in the WebVPN subsystem in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to cause a denial of service (memory consumption and SSL outage) via multiple crafted HTTP requests, aka Bug ID CSCue05458.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-12T01:00:00.000Z
CVE-2015-0620 
The XML parser in Cisco TelePresence Management Suite (TMS) 14.3(.2) and earlier does not properly handle external entities, which allows remote authenticated users to cause a denial of service via POST requests, aka Bug ID CSCus51494.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-18T02:00:00.000Z
CVE-2015-0621 
Cisco TelePresence MCU devices with software 4.5(1.45) allow remote attackers to cause a denial of service (device reload) via an unspecified series of TCP packets, aka Bug ID CSCur50347.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-18T02:00:00.000Z
CVE-2015-0622 
The Wireless Intrusion Detection (aka WIDS) functionality on Cisco Wireless LAN Controller (WLC) devices allows remote attackers to cause a denial of service (device outage) via crafted packets that are improperly handled during rendering of the Signature Events Summary page, aka Bug ID CSCus46861.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-19T00:00:00.000Z
CVE-2015-0623 
Cross-site scripting (XSS) vulnerability in the Administrator report page on Cisco Web Security Appliance (WSA) devices allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCus40627.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-19T00:00:00.000Z
CVE-2015-0624 
The web framework in Cisco AsyncOS on Email Security Appliance (ESA), Content Security Management Appliance (SMA), and Web Security Appliance (WSA) devices allows remote attackers to trigger redirects via a crafted HTTP header, aka Bug IDs CSCur44412, CSCur44415, CSCur89630, CSCur89636, CSCur89633, and CSCur89639.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-21T11:00:00.000Z
CVE-2015-0626 
The SOAP interface in Cisco Hosted Collaboration Solution (HCS) allows remote attackers to obtain access to system-management tools via crafted Challenge SOAP calls, aka Bug ID CSCuc38114.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-19T00:00:00.000Z
CVE-2015-0628 
The proxy engine on Cisco Web Security Appliance (WSA) devices allows remote attackers to bypass intended proxying restrictions via a malformed HTTP method, aka Bug ID CSCus79174.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-20T02:00:00.000Z
CVE-2015-0631 
Race condition in the SSL implementation on Cisco Intrusion Prevention System (IPS) devices allows remote attackers to cause a denial of service by making many management-interface HTTPS connections during the key-regeneration phase of an upgrade, aka Bug ID CSCui25688.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-21T11:00:00.000Z
CVE-2015-0632 
Race condition in the Neighbor Discovery (ND) protocol implementation in Cisco IOS and IOS XE allows remote attackers to cause a denial of service via a flood of Router Solicitation messages on the local network, aka Bug ID CSCuo67770.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-27T02:00:00.000Z