rainbutterfly/cve_corpus huggingface dataset:
CVE-2014-0617 
Juniper Junos 10.4S before 10.4S15, 10.4R before 10.4R16, 11.4 before 11.4R9, and 12.1R before 12.1R7 on SRX Series service gateways allows remote attackers to cause a denial of service (flowd crash) via a crafted IP packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-14T18:00:00.000Z
CVE-2014-0618 
Juniper Junos before 10.4 before 10.4R16, 11.4 before 11.4R8, 12.1R before 12.1R7, 12.1X44 before 12.1X44-D20, and 12.1X45 before 12.1X45-D10 on SRX Series service gateways, when used as a UAC enforcer and captive portal is enabled, allows remote attackers to cause a denial of service (flowd crash) via a crafted HTTP message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-11T02:00:00.000Z
CVE-2014-0619 
Untrusted search path vulnerability in Hamster Free ZIP Archiver 2.0.1.7 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the current working directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-10-23T14:00:00.000Z
CVE-2014-0620 
Multiple cross-site scripting (XSS) vulnerabilities in Technicolor (formerly Thomson) TC7200 STD6.01.12 allow remote attackers to inject arbitrary web script or HTML via the (1) ADDNewDomain parameter to parental/website-filters.asp or (2) VmTracerouteHost parameter to goform/status/diagnostics-route.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-08T15:00:00.000Z
CVE-2014-0621 
Multiple cross-site request forgery (CSRF) vulnerabilities in Technicolor (formerly Thomson) TC7200 STD6.01.12 allow remote attackers to hijack the authentication of administrators for requests that (1) perform a factory reset via a request to goform/system/factory, (2) disable advanced options via a request to goform/advanced/options, (3) remove ip-filters via the IpFilterAddressDelete1 parameter to goform/advanced/ip-filters, or (4) remove firewall settings via the cbFirewall parameter to goform/advanced/firewall.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-08T15:00:00.000Z
CVE-2014-0622 
The web service in EMC Documentum Foundation Services (DFS) 6.5 through 6.7 before 6.7 SP1 P22, 6.7 SP2 before P08, 7.0 before P12, and 7.1 before P01 does not properly implement content uploading, which allows remote authenticated users to bypass intended content access restrictions via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-06T22:00:00.000Z
CVE-2014-0623 
Cross-site scripting (XSS) vulnerability in the Self-Service Console in EMC RSA Authentication Manager 7.1 before SP4 P32 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to a "cross frame scripting" issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-27T10:00:00.000Z
CVE-2014-0624 
EMC RSA Data Loss Prevention (DLP) 9.x before 9.6-SP2 does not properly manage sessions, which allows remote authenticated users to gain privileges and bypass intended content-reading restrictions via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-06T11:00:00.000Z
CVE-2014-0625 
The SSLSocket implementation in the (1) JSAFE and (2) JSSE APIs in EMC RSA BSAFE SSL-J 5.x before 5.1.3 and 6.x before 6.0.2 allows remote attackers to cause a denial of service (memory consumption) by triggering application-data processing during the TLS handshake, a time at which the data is internally buffered.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-18T00:00:00.000Z
CVE-2014-0626 
The (1) JSAFE and (2) JSSE APIs in EMC RSA BSAFE SSL-J 5.x before 5.1.3 and 6.x before 6.0.2 make it easier for remote attackers to bypass intended cryptographic protection mechanisms by triggering application-data processing during the TLS handshake, a time at which the data is both unencrypted and unauthenticated.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-18T00:00:00.000Z
CVE-2014-0627 
The SSLEngine API implementation in EMC RSA BSAFE SSL-J 5.x before 5.1.3 and 6.x before 6.0.2 allows remote attackers to trigger the selection of a weak cipher suite by using the wrap method during a certain incomplete-handshake state.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-18T00:00:00.000Z
CVE-2014-0628 
The server in EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.5 does not properly process certificate chains, which allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-25T01:00:00.000Z
CVE-2014-0629 
EMC Documentum TaskSpace (TSP) 6.7SP1 before P25 and 6.7SP2 before P11 does not properly handle the interaction between the dm_world group and the dm_superusers_dynamic group, which allows remote authenticated users to obtain sensitive information and gain privileges in opportunistic circumstances by leveraging an incorrect group-addition implementation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-06T11:00:00.000Z
CVE-2014-0630 
EMC Documentum TaskSpace (TSP) 6.7SP1 before P25 and 6.7SP2 before P11 allows remote authenticated users to read arbitrary files via a modified imaging-service URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-06T11:00:00.000Z
CVE-2014-0632 
Directory traversal vulnerability in EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 allows remote authenticated users to execute arbitrary code via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-28T19:00:00.000Z
CVE-2014-0633 
The GUI in EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 does not properly validate session-timeout values, which might make it easier for remote attackers to execute arbitrary code by leveraging an unattended workstation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-28T19:00:00.000Z
CVE-2014-0634 
EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 does not include the HTTPOnly flag in a Set-Cookie header for an unspecified cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-28T19:00:00.000Z
CVE-2014-0635 
Session fixation vulnerability in EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 allows remote attackers to hijack web sessions via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-28T19:00:00.000Z
CVE-2014-0636 
EMC RSA BSAFE Micro Edition Suite (MES) 3.2.x before 3.2.6 and 4.0.x before 4.0.5 does not properly validate X.509 certificate chains, which allows man-in-the-middle attackers to spoof SSL servers via a crafted certificate chain.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-11T19:00:00.000Z
CVE-2014-0637 
Cross-site scripting (XSS) vulnerability in the back-office case-management application in RSA Adaptive Authentication (On-Premise) 6.x and 7.x before 7.1 SP0 P2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-04T15:00:00.000Z
CVE-2014-0638 
Cross-site scripting (XSS) vulnerability in RSA Adaptive Authentication (On-Premise) 6.x and 7.x before 7.1 SP0 P2 allows remote attackers to inject arbitrary web script or HTML via vectors involving FRAME elements, related to a "cross-frame scripting" issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-04T15:00:00.000Z
CVE-2014-0639 
Multiple cross-site scripting (XSS) vulnerabilities in EMC RSA Archer 5.x before GRC 5.4 SP1 P3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-25T22:00:00.000Z
CVE-2014-0640 
EMC RSA Archer GRC Platform 5.x before 5.5 SP1 allows remote authenticated users to bypass intended restrictions on resource access via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-08-20T10:00:00.000Z
CVE-2014-0641 
Cross-site request forgery (CSRF) vulnerability in EMC RSA Archer GRC Platform 5.x before 5.5 SP1 allows remote attackers to hijack the authentication of arbitrary users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-08-20T10:00:00.000Z
CVE-2014-0642 
EMC Documentum Content Server before 6.7 SP1 P26, 6.7 SP2 before P13, 7.0 before P13, and 7.1 before P02 allows remote authenticated users to bypass intended access restrictions and read metadata from certain folders via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-15T23:00:00.000Z
CVE-2014-0643 
EMC RSA NetWitness before 9.8.5.19 and RSA Security Analytics before 10.2.4 and 10.3.x before 10.3.2, when Kerberos PAM is enabled, do not require a password, which allows remote attackers to bypass authentication by leveraging knowledge of a valid account name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-16T10:00:00.000Z
CVE-2014-0644 
EMC Cloud Tiering Appliance (CTA) 10 through SP1 allows remote attackers to read arbitrary files via an api/login request containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, as demonstrated by reading the /etc/shadow file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-17T01:00:00.000Z
CVE-2014-0645 
EMC Cloud Tiering Appliance (CTA) 9.x through 10 SP1 and File Management Appliance (FMA) 7.x store DES password hashes for the root, super, and admin accounts, which makes it easier for context-dependent attackers to obtain sensitive information via a brute-force attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-17T01:00:00.000Z
CVE-2014-0646 
The runtime WS component in the server in EMC RSA Access Manager 6.1.3 before 6.1.3.39, 6.1.4 before 6.1.4.22, 6.2.0 before 6.2.0.11, and 6.2.1 before 6.2.1.03, when INFO logging is enabled, allows local users to discover cleartext passwords by reading log files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-01T17:00:00.000Z
CVE-2014-0647 
The Starbucks 2.6.1 application for iOS stores sensitive information in plaintext in the Crashlytics log file (/Library/Caches/com.crashlytics.data/com.starbucks.mystarbucks/session.clslog), which allows attackers to discover usernames, passwords, and e-mail addresses via an application that reads session.clslog.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-28T00:00:00.000Z
CVE-2014-0648 
The RMI interface in Cisco Secure Access Control System (ACS) 5.x before 5.5 does not properly enforce authentication and authorization requirements, which allows remote attackers to obtain administrative access via a request to this interface, aka Bug ID CSCud75187.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-16T19:00:00.000Z
CVE-2014-0649 
The RMI interface in Cisco Secure Access Control System (ACS) 5.x before 5.5 does not properly enforce authorization requirements, which allows remote authenticated users to obtain superadmin access via a request to this interface, aka Bug ID CSCud75180.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-16T19:00:00.000Z
CVE-2014-0650 
The web interface in Cisco Secure Access Control System (ACS) 5.x before 5.4 Patch 3 allows remote attackers to execute arbitrary operating-system commands via a request to this interface, aka Bug ID CSCue65962.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-16T19:00:00.000Z
CVE-2014-0651 
The administrative interface in Cisco Context Directory Agent (CDA) does not properly enforce authorization requirements, which allows remote authenticated users to obtain administrative access by hijacking a session, aka Bug ID CSCuj45347.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-08T21:00:00.000Z
CVE-2014-0652 
Cross-site scripting (XSS) vulnerability in the Mappings page in Cisco Context Directory Agent (CDA) allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuj45358.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-08T21:00:00.000Z
CVE-2014-0653 
The Identity Firewall (IDFW) functionality in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to trigger authentication-state modifications via a crafted NetBIOS logout probe response, aka Bug ID CSCuj45340.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-08T21:00:00.000Z
CVE-2014-0654 
Cisco Context Directory Agent (CDA) allows remote attackers to modify the cache via a replay attack involving crafted RADIUS accounting messages, aka Bug ID CSCuj45383.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-08T21:00:00.000Z
CVE-2014-0655 
The Identity Firewall (IDFW) functionality in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to change the user-cache contents via a replay attack involving crafted RADIUS Change of Authorization (CoA) messages, aka Bug ID CSCuj45332.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-08T21:00:00.000Z
CVE-2014-0656 
Cisco Context Directory Agent (CDA) allows remote authenticated users to trigger the omission of certain user-interface data via crafted field values, aka Bug ID CSCuj45353.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-08T21:00:00.000Z
CVE-2014-0657 
The administration portal in Cisco Unified Communications Manager (Unified CM) 9.1(1) and earlier does not properly handle role restrictions, which allows remote authenticated users to bypass role-based access control via multiple visits to a forbidden portal URL, aka Bug ID CSCuj83540.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-08T21:00:00.000Z
CVE-2014-0658 
Cisco 9900 Unified IP phones allow remote attackers to cause a denial of service (unregistration) via a crafted SIP header, aka Bug ID CSCul24898.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-10T16:00:00.000Z
CVE-2014-0659 
The Cisco WAP4410N access point with firmware through 2.0.6.1, WRVS4400N router with firmware 1.x through 1.1.13 and 2.x through 2.0.2.1, and RVS4000 router with firmware through 2.0.3.2 allow remote attackers to read credential and configuration data, and execute arbitrary commands, via requests to the test interface on TCP port 32764, aka Bug IDs CSCum37566, CSCum43693, CSCum43700, and CSCum43685.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-12T15:00:00.000Z
CVE-2014-0660 
Cisco TelePresence ISDN Gateway with software before 2.2(1.92) allows remote attackers to cause a denial of service (D-channel call outage) via a crafted Q.931 STATUS message, aka Bug ID CSCui50360.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-22T21:00:00.000Z
CVE-2014-0661 
The System Status Collection Daemon (SSCD) in Cisco TelePresence System 500-37, 1000, 1300-65, and 3xxx before 1.10.2(42), and 500-32, 1300-47, TX1310 65, and TX9xxx before 6.0.4(11), allows remote attackers to execute arbitrary commands or cause a denial of service (stack memory corruption) via a crafted XML-RPC message, aka Bug ID CSCui32796.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-22T21:00:00.000Z
CVE-2014-0662 
The SIP module in Cisco TelePresence Video Communication Server (VCS) before 8.1 allows remote attackers to cause a denial of service (process failure) via a crafted SDP message, aka Bug ID CSCue97632.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-22T21:00:00.000Z
CVE-2014-0663 
Cross-site scripting (XSS) vulnerability in the web framework in Cisco Secure Access Control System (ACS) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCum03625.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-10T16:00:00.000Z
CVE-2014-0664 
The server in Cisco Unity Connection allows remote authenticated users to cause a denial of service (CPU consumption) via unspecified IMAP commands, aka Bug ID CSCul49976.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-10T16:00:00.000Z
CVE-2014-0665 
The RBAC implementation in Cisco Identity Services Engine (ISE) Software does not properly verify privileges for support-bundle downloads, which allows remote authenticated users to obtain sensitive information via a download action, as demonstrated by obtaining read access to the user database, aka Bug ID CSCul83904.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-15T15:00:00.000Z
CVE-2014-0666 
Directory traversal vulnerability in the Send Screen Capture implementation in Cisco Jabber 9.2(.1) and earlier on Windows allows remote attackers to upload arbitrary types of files, and consequently execute arbitrary code, via modified packets, aka Bug ID CSCug48056.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-16T19:00:00.000Z
CVE-2014-0667 
The RMI interface in Cisco Secure Access Control System (ACS) does not properly enforce authorization requirements, which allows remote authenticated users to read arbitrary files via a request to this interface, aka Bug ID CSCud75169.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-16T19:00:00.000Z
CVE-2014-0668 
Cross-site scripting (XSS) vulnerability in the portal in Cisco Secure Access Control System (ACS) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCue65949.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-20T02:00:00.000Z
CVE-2014-0669 
The Wireless Session Protocol (WSP) feature in the Gateway GPRS Support Node (GGSN) component on Cisco ASR 5000 series devices allows remote attackers to bypass intended Top-Up payment restrictions via unspecified WSP packets, aka Bug ID CSCuh28371.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-22T02:00:00.000Z
CVE-2014-0670 
Cross-site scripting (XSS) vulnerability in the Search and Play interface in Cisco MediaSense allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCum16686.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-22T02:00:00.000Z
CVE-2014-0671 
Open redirect vulnerability in Cisco MediaSense allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via an unspecified parameter, aka Bug ID CSCum16749.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-22T02:00:00.000Z
CVE-2014-0672 
The Search and Play interface in Cisco MediaSense does not properly enforce authorization requirements, which allows remote authenticated users to download arbitrary recordings via a request to this interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-22T02:00:00.000Z
CVE-2014-0673 
Multiple cross-site scripting (XSS) vulnerabilities in the web interface on Cisco Video Surveillance 5000 HD IP Dome cameras allow remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug IDs CSCud10943 and CSCud10950.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-25T22:00:00.000Z
CVE-2014-0674 
Cisco Video Surveillance Operations Manager (VSOM) does not require authentication for MySQL database connections, which allows remote attackers to obtain sensitive information, modify data, or cause a denial of service by leveraging network connectivity from a client system with a crafted host name, aka Bug ID CSCud10992.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-24T02:00:00.000Z
CVE-2014-0675 
The Expressway component in Cisco TelePresence Video Communication Server (VCS) uses the same default X.509 certificate across different customers' installations, which makes it easier for remote attackers to conduct man-in-the-middle attacks against SSL sessions by leveraging the certificate's trust relationship, aka Bug ID CSCue07471.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-23T02:00:00.000Z
CVE-2014-0676 
Cisco NX-OS allows local users to bypass intended TACACS+ command restrictions via a series of multiple commands, aka Bug ID CSCum47367.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-22T21:00:00.000Z
CVE-2014-0677 
The Label Distribution Protocol (LDP) functionality in Cisco NX-OS allows remote attackers to cause a denial of service (temporary LDP session outage) via LDP discovery traffic containing malformed Hello messages, aka Bug ID CSCul88851.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-22T21:00:00.000Z
CVE-2014-0678 
The portal interface in Cisco Secure Access Control System (ACS) does not properly manage sessions, which allows remote authenticated users to hijack sessions and gain privileges via unspecified vectors, aka Bug ID CSCue65951.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-25T22:00:00.000Z
CVE-2014-0679 
Cisco Prime Infrastructure 1.2 and 1.3 before 1.3.0.20-2, 1.4 before 1.4.0.45-2, and 2.0 before 2.0.0.0.294-2 allows remote authenticated users to execute arbitrary commands with root privileges via an unspecified URL, aka Bug ID CSCum71308.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-27T20:00:00.000Z
CVE-2014-0680 
Cross-site scripting (XSS) vulnerability in the HTTP control interface in the NAC Web Agent component in Cisco Identity Services Engine (ISE) allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCui15038.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-29T16:00:00.000Z
CVE-2014-0681 
Cross-site scripting (XSS) vulnerability in Cisco Identity Services Engine (ISE) 1.2 patch 2 and earlier allows remote attackers to inject arbitrary web script or HTML via a report containing a crafted URL that is not properly handled during generation of report-output pages, aka Bug ID CSCui15064.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-29T16:00:00.000Z
CVE-2014-0682 
Cisco WebEx Meetings Server allows remote authenticated users to bypass authorization checks and (1) join arbitrary meetings, or (2) terminate a meeting without having a host role, via a crafted URL, aka Bug ID CSCuj42346.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-29T16:00:00.000Z