rainbutterfly/cve_corpus huggingface dataset:
CVE-2015-0633 
The Integrated Management Controller (IMC) in Cisco Unified Computing System (UCS) 1.4(7h) and earlier on C-Series servers allows remote attackers to bypass intended access restrictions by sending crafted DHCP response packets on the local network, aka Bug ID CSCuf52876.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-26T01:00:00.000Z
CVE-2015-0634 
Cross-site scripting (XSS) vulnerability in the administrative interface in Cisco WebEx Meetings Server 2.5 and 2.5.0.997 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuq86310.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-15T01:00:00.000Z
CVE-2015-0635 
The Autonomic Networking Infrastructure (ANI) implementation in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.10.xS through 3.13.xS before 3.13.1S allows remote attackers to spoof Autonomic Networking Registration Authority (ANRA) responses, and consequently bypass intended device and node access restrictions or cause a denial of service (disrupted domain access), via crafted AN messages, aka Bug ID CSCup62191.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-03-26T10:00:00.000Z
CVE-2015-0636 
The Autonomic Networking Infrastructure (ANI) implementation in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.10.xS through 3.13.xS before 3.13.1S allows remote attackers to cause a denial of service (disrupted domain access) via spoofed AN messages that reset a finite state machine, aka Bug ID CSCup62293.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-03-26T10:00:00.000Z
CVE-2015-0637 
The Autonomic Networking Infrastructure (ANI) implementation in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.10.xS through 3.13.xS before 3.13.1S allows remote attackers to cause a denial of service (device reload) via spoofed AN messages, aka Bug ID CSCup62315.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-03-26T10:00:00.000Z
CVE-2015-0638 
Cisco IOS 12.2, 12.4, 15.0, 15.2, and 15.3, when a VRF interface is configured, allows remote attackers to cause a denial of service (interface queue wedge) via crafted ICMPv4 packets, aka Bug ID CSCsi02145.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-03-26T10:00:00.000Z
CVE-2015-0639 
The Common Flow Table (CFT) feature in Cisco IOS XE 3.6 and 3.7 before 3.7.1S, 3.8 before 3.8.0S, 3.9 before 3.9.0S, 3.10 before 3.10.0S, 3.11 before 3.11.0S, 3.12 before 3.12.0S, 3.13 before 3.13.0S, 3.14 before 3.14.0S, and 3.15 before 3.15.0S, when MMON or NBAR is enabled, allows remote attackers to cause a denial of service (device reload) via malformed IPv6 packets with IPv4 UDP encapsulation, aka Bug ID CSCua79665.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-03-26T10:00:00.000Z
CVE-2015-0640 
The high-speed logging (HSL) feature in Cisco IOS XE 2.x and 3.x before 3.10.4S, 3.11 before 3.11.3S, 3.12 before 3.12.1S, 3.13 before 3.13.0S, 3.14 before 3.14.0S, and 3.15 before 3.15.0S allows remote attackers to cause a denial of service (device reload) via large IP packets that require NAT and HSL processing after fragmentation, aka Bug ID CSCuo25741.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-03-26T10:00:00.000Z
CVE-2015-0641 
Cisco IOS XE 2.x and 3.x before 3.9.0S, 3.10 before 3.10.0S, 3.11 before 3.11.0S, 3.12 before 3.12.0S, 3.13 before 3.13.0S, 3.14 before 3.14.0S, and 3.15 before 3.15.0S allows remote attackers to cause a denial of service (device reload) via crafted IPv6 packets, aka Bug ID CSCub68073.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-03-26T10:00:00.000Z
CVE-2015-0642 
Cisco IOS 12.2, 12.4, 15.0, 15.1, 15.2, 15.3, and 15.4 and IOS XE 2.5.x, 2.6.x, 3.1.xS through 3.12.xS before 3.12.3S, 3.2.xE through 3.7.xE before 3.7.1E, 3.3.xSG, 3.4.xSG, and 3.13.xS before 3.13.2S allow remote attackers to cause a denial of service (device reload) by sending malformed IKEv2 packets over (1) IPv4 or (2) IPv6, aka Bug ID CSCum36951.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-03-26T10:00:00.000Z
CVE-2015-0643 
Cisco IOS 12.2, 12.4, 15.0, 15.1, 15.2, 15.3, and 15.4 and IOS XE 2.5.x, 2.6.x, 3.1.xS through 3.12.xS before 3.12.3S, 3.2.xE through 3.7.xE before 3.7.1E, 3.3.xSG, 3.4.xSG, and 3.13.xS before 3.13.2S allow remote attackers to cause a denial of service (memory consumption and device reload) by sending malformed IKEv2 packets over (1) IPv4 or (2) IPv6, aka Bug ID CSCuo75572.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-03-26T10:00:00.000Z
CVE-2015-0644 
AppNav in Cisco IOS XE 3.8 through 3.10 before 3.10.3S, 3.11 before 3.11.3S, 3.12 before 3.12.1S, 3.13 before 3.13.0S, 3.14 before 3.14.0S, and 3.15 before 3.15.0S allows remote attackers to execute arbitrary code or cause a denial of service (device reload) via a crafted TCP packet, aka Bug ID CSCuo53622.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-03-26T10:00:00.000Z
CVE-2015-0645 
The Layer 4 Redirect (L4R) feature in Cisco IOS XE 2.x and 3.x before 3.10.4S, 3.11 before 3.11.3S, 3.12 before 3.12.2S, 3.13 before 3.13.1S, 3.14 before 3.14.0S, and 3.15 before 3.15.0S allows remote attackers to cause a denial of service (device reload) via malformed (1) IPv4 or (2) IPv6 packets, aka Bug ID CSCuq59131.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-03-26T10:00:00.000Z
CVE-2015-0646 
Memory leak in the TCP input module in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.3.xXO, 3.5.xE, 3.6.xE, 3.8.xS through 3.10.xS before 3.10.5S, and 3.11.xS and 3.12.xS before 3.12.3S allows remote attackers to cause a denial of service (memory consumption or device reload) by sending crafted TCP packets over (1) IPv4 or (2) IPv6, aka Bug ID CSCum94811.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-03-26T10:00:00.000Z
CVE-2015-0647 
Cisco IOS 12.2, 12.4, 15.0, 15.2, and 15.3 allows remote attackers to cause a denial of service (device reload) via malformed Common Industrial Protocol (CIP) UDP packets, aka Bug ID CSCum98371.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-03-26T10:00:00.000Z
CVE-2015-0648 
Memory leak in Cisco IOS 12.2, 12.4, 15.0, 15.2, and 15.3 allows remote attackers to cause a denial of service (memory consumption) via crafted Common Industrial Protocol (CIP) TCP packets, aka Bug ID CSCun49658.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-03-26T10:00:00.000Z
CVE-2015-0649 
Cisco IOS 12.2, 12.4, 15.0, 15.2, and 15.3 allows remote attackers to cause a denial of service (device reload) via malformed Common Industrial Protocol (CIP) TCP packets, aka Bug ID CSCun63514.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-03-26T10:00:00.000Z
CVE-2015-0650 
The Service Discovery Gateway (aka mDNS Gateway) in Cisco IOS 12.2, 12.4, 15.0, 15.1, 15.2, 15.3, and 15.4 and IOS XE 3.9.xS and 3.10.xS before 3.10.4S, 3.11.xS before 3.11.3S, 3.12.xS before 3.12.2S, and 3.13.xS before 3.13.1S allows remote attackers to cause a denial of service (device reload) by sending malformed mDNS UDP packets over (1) IPv4 or (2) IPv6, aka Bug ID CSCup70579.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-03-26T10:00:00.000Z
CVE-2015-0651 
Cross-site request forgery (CSRF) vulnerability in the web GUI in Cisco Application Networking Manager (ANM), and Device Manager (DM) on Cisco 4710 Application Control Engine (ACE) appliances, allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuo99753.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-27T02:00:00.000Z
CVE-2015-0652 
The Session Description Protocol (SDP) implementation in Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway before X8.2 and Cisco TelePresence Conductor before XC2.4 allows remote attackers to cause a denial of service (mishandled exception and device reload) via a crafted media description, aka Bug IDs CSCus96593 and CSCun73192.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-03-13T01:00:00.000Z
CVE-2015-0653 
The management interface in Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway before X7.2.4, X8 before X8.1.2, and X8.2 before X8.2.2 and Cisco TelePresence Conductor before X2.3.1 and XC2.4 before XC2.4.1 allows remote attackers to bypass authentication via crafted login parameters, aka Bug IDs CSCur02680 and CSCur05556.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-03-13T01:00:00.000Z
CVE-2015-0654 
Race condition in the TLS implementation in MainApp in the management interface in Cisco Intrusion Prevention System (IPS) Software before 7.3(3)E4 allows remote attackers to cause a denial of service (process hang) by establishing many HTTPS sessions, aka Bug ID CSCuq40652.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-03-13T01:00:00.000Z
CVE-2015-0655 
Cross-site scripting (XSS) vulnerability in Unified Web Interaction Manager in Cisco Unified Web and E-Mail Interaction Manager allows remote attackers to inject arbitrary web script or HTML via vectors related to a POST request, aka Bug ID CSCus74184.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-28T02:00:00.000Z
CVE-2015-0656 
Cross-site scripting (XSS) vulnerability in the login page in Cisco Network Analysis Module (NAM) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCum81269.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-03-04T02:00:00.000Z
CVE-2015-0657 
Cisco IOS XR allows remote attackers to cause a denial of service (RSVP process reload) via a malformed RSVP packet, aka Bug ID CSCur69192.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-03-06T02:00:00.000Z
CVE-2015-0658 
The DHCP implementation in the PowerOn Auto Provisioning (POAP) feature in Cisco NX-OS does not properly restrict the initialization process, which allows remote attackers to execute arbitrary commands as root by sending crafted response packets on the local network, aka Bug ID CSCur14589.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-03-28T01:00:00.000Z
CVE-2015-0659 
The Autonomic Networking Infrastructure (ANI) implementation in Cisco IOS allows remote attackers to trigger self-referential adjacencies via a crafted Autonomic Networking (AN) message, aka Bug ID CSCup62157.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-03-06T02:00:00.000Z
CVE-2015-0660 
Cisco Virtual TelePresence Server Software does not properly restrict use of the serial port, which allows local users to execute arbitrary OS commands as root by leveraging vSphere controller administrative privileges, aka Bug ID CSCus61123.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-03-14T01:00:00.000Z
CVE-2015-0661 
The SNMPv2 implementation in Cisco IOS XR allows remote authenticated users to cause a denial of service (snmpd daemon reload) via a malformed SNMP packet, aka Bug ID CSCur25858.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-03-06T02:00:00.000Z
CVE-2015-0662 
Cisco AnyConnect Secure Mobility Client 4.0(.00051) and earlier allows local users to gain privileges via crafted IPC messages that trigger use of root privileges for a software-package installation, aka Bug ID CSCus79385.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-03-17T01:00:00.000Z
CVE-2015-0663 
Cisco AnyConnect Secure Mobility Client 4.0(.00051) and earlier does not properly implement access control for IPC messages, which allows local users to write to arbitrary files via crafted messages, aka Bug ID CSCus79392.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-03-17T01:00:00.000Z
CVE-2015-0664 
The IPC channel in Cisco AnyConnect Secure Mobility Client 4.0(.00051) and earlier allows local users to write to arbitrary userspace memory locations, and consequently gain privileges, via crafted messages, aka Bug ID CSCus79195.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-03-18T23:00:00.000Z
CVE-2015-0665 
The Hostscan module in Cisco AnyConnect Secure Mobility Client 4.0(.00051) and earlier allows local users to write to arbitrary files via crafted IPC messages, aka Bug ID CSCus79173.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-03-17T01:00:00.000Z
CVE-2015-0666 
Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) before 7.1(1) allows remote attackers to read arbitrary files via a crafted pathname, aka Bug ID CSCus00241.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-03T10:00:00.000Z
CVE-2015-0667 
The Management Interface on Cisco Content Services Switch (CSS) 11500 devices 8.20.4.02 and earlier allows remote attackers to bypass intended restrictions on local-network device access via crafted SSH packets, aka Bug ID CSCut14855.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-03-18T23:00:00.000Z
CVE-2015-0668 
Cross-site scripting (XSS) vulnerability in the administration portal in Cisco WebEx Meetings Server 2.5 and 2.5.99.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCuq66737.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-03-20T01:00:00.000Z
CVE-2015-0669 
The Autonomic Networking Infrastructure (ANI) implementation in Cisco IOS 15.4S and 15.4(3)S allows remote attackers to modify configuration settings or cause a denial of service (partial service outage) by sending crafted Autonomic Networking (AN) messages on an intranet network, aka Bug ID CSCup62167.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-03-21T01:00:00.000Z
CVE-2015-0670 
The default configuration of Cisco Small Business IP phones SPA 300 7.5.5 and SPA 500 7.5.5 does not properly support authentication, which allows remote attackers to read audio-stream data or originate telephone calls via a crafted XML request, aka Bug ID CSCuo52482.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-03-21T01:00:00.000Z
CVE-2015-0671 
The DNS implementation in Cisco Videoscape Distribution Suite for Internet Streaming (VDS-IS) 3.2(1) allows remote attackers to cause a denial of service (CPU consumption and network-resource consumption) via crafted packets, aka Bug ID CSCun15911.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-03-20T01:00:00.000Z
CVE-2015-0672 
The DHCPv4 server in Cisco IOS XR 5.2.2 on ASR 9000 devices allows remote attackers to cause a denial of service (service outage) via a flood of crafted DHCP packets, aka Bug ID CSCup67822.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-03-26T10:00:00.000Z
CVE-2015-0673 
Cisco Mobility Services Engine (MSE) 8.0(110.0) allows remote authenticated users to discover the passwords of arbitrary users by (1) reading log files or (2) using an unspecified GUI feature, aka Bug ID CSCut24792.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-03-26T10:00:00.000Z
CVE-2015-0674 
Cross-site scripting (XSS) vulnerability in the Alert Service of Cisco Cloud Web Security base revision allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-25T18:00:00.000Z
CVE-2015-0675 
The failover ipsec implementation in Cisco Adaptive Security Appliance (ASA) Software 9.1 before 9.1(6), 9.2 before 9.2(3.3), and 9.3 before 9.3(3) does not properly validate failover communication messages, which allows remote attackers to reconfigure an ASA device, and consequently obtain administrative control, by sending crafted UDP packets over the local network to the failover interface, aka Bug ID CSCur21069.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-13T01:00:00.000Z
CVE-2015-0676 
The DNS implementation in Cisco Adaptive Security Appliance (ASA) Software 7.2 before 7.2(5.16), 8.2 before 8.2(5.57), 8.3 before 8.3(2.44), 8.4 before 8.4(7.28), 8.5 before 8.5(1.24), 8.6 before 8.6(1.17), 8.7 before 8.7(1.16), 9.0 before 9.0(4.33), 9.1 before 9.1(6.1), 9.2 before 9.2(3.4), and 9.3 before 9.3(3) allows man-in-the-middle attackers to cause a denial of service (memory consumption or device outage) by triggering outbound DNS queries and then sending crafted responses to these queries, aka Bug ID CSCuq77655.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-13T01:00:00.000Z
CVE-2015-0677 
The XML parser in Cisco Adaptive Security Appliance (ASA) Software 8.4 before 8.4(7.28), 8.6 before 8.6(1.17), 9.0 before 9.0(4.33), 9.1 before 9.1(6), 9.2 before 9.2(3.4), and 9.3 before 9.3(3), when Clientless SSL VPN, AnyConnect SSL VPN, or AnyConnect IKEv2 VPN is used, allows remote attackers to cause a denial of service (VPN outage or device reload) via a crafted XML document, aka Bug ID CSCus95290.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-13T01:00:00.000Z
CVE-2015-0678 
The virtualization layer in Cisco ASA FirePOWER Software before 5.3.1.2 and 5.4.x before 5.4.0.1 and ASA Context-Aware (CX) Software before 9.3.2.1-9 allows remote attackers to cause a denial of service (device reload) by rapidly sending crafted packets to the management interface, aka Bug IDs CSCus11007 and CSCun56954.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-11T01:00:00.000Z
CVE-2015-0679 
The web-authentication functionality on Cisco Wireless LAN Controller (WLC) devices 7.3(103.8) and 7.4(110.0) allows remote attackers to cause a denial of service (device reload) via a malformed password, aka Bug ID CSCui57980.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-03-28T01:00:00.000Z
CVE-2015-0680 
Cisco Unified Call Manager (CM) 9.1(2.1000.28) does not properly restrict resource requests, which allows remote authenticated users to read arbitrary files via unspecified vectors, aka Bug ID CSCuq44439.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-03-28T01:00:00.000Z
CVE-2015-0681 
The TFTP server in Cisco IOS 12.2(44)SQ1, 12.2(33)XN1, 12.4(25e)JAM1, 12.4(25e)JAO5m, 12.4(23)JY, 15.0(2)ED1, 15.0(2)EY3, 15.1(3)SVF4a, and 15.2(2)JB1 and IOS XE 2.5.x, 2.6.x, 3.1.xS, 3.2.xS, 3.3.xS, 3.4.xS, and 3.5.xS before 3.6.0S; 3.1.xSG, 3.2.xSG, and 3.3.xSG before 3.4.0SG; 3.2.xSE before 3.3.0SE; 3.2.xXO before 3.3.0XO; 3.2.xSQ; 3.3.xSQ; and 3.4.xSQ allows remote attackers to cause a denial of service (device hang or reload) via multiple requests that trigger improper memory management, aka Bug ID CSCts66733.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-24T16:00:00.000Z
CVE-2015-0682 
Cisco Unified Communications Domain Manager 8.1(4) allows remote authenticated users to execute arbitrary code by visiting a "deprecated page," aka Bug ID CSCup90168.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-03T10:00:00.000Z
CVE-2015-0683 
Cisco Unified Communications Domain Manager 8.1(4) allows remote authenticated users to obtain sensitive information via a file-inclusion attack, aka Bug ID CSCup94744.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-03T10:00:00.000Z
CVE-2015-0684 
SQL injection vulnerability in the Image Management component in Cisco Unified Communications Domain Manager 8.1(4) allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuq52515.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-03T10:00:00.000Z
CVE-2015-0685 
Cisco IOS XE before 3.7.5S on ASR 1000 devices does not properly handle route adjacencies, which allows remote attackers to cause a denial of service (device hang) via crafted IP packets, aka Bug ID CSCub31873.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-03T01:00:00.000Z
CVE-2015-0686 
The SNMP implementation in Cisco NX-OS 6.1(2)I2(3) on Nexus 9000 devices, when a Reset High Availability (HA) policy is configured, allows remote authenticated users to cause a denial of service (device reload) via unspecified vectors, aka Bug ID CSCuq92240.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-03T01:00:00.000Z
CVE-2015-0687 
The SNMP implementation in Cisco IOS 15.1(2)SG4 on Catalyst 4500 devices, when single-switch Virtual Switching System (VSS) is configured, allows remote authenticated users to cause a denial of service (device crash) by performing SNMP polling, aka Bug ID CSCuq04574.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-03T01:00:00.000Z
CVE-2015-0688 
Cisco IOS XE 3.10.2S on an ASR 1000 device with an Embedded Services Processor (ESP) module, when NAT is enabled, allows remote attackers to cause a denial of service (module crash) via malformed H.323 packets, aka Bug ID CSCup21070.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-04T01:00:00.000Z
CVE-2015-0689 
Cisco Cloud Web Security before 3.0.1.7 allows remote attackers to bypass intended filtering protection mechanisms by leveraging improper handling of HTTP methods, aka Bug ID CSCut69743.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-19T15:00:00.000Z
CVE-2015-0690 
Cross-site scripting (XSS) vulnerability in the HTML help system on Cisco Wireless LAN Controller (WLC) devices before 8.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCun95178.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-07T01:00:00.000Z
CVE-2015-0691 
A certain Cisco JAR file, as distributed in Cache Cleaner in Cisco Secure Desktop (CSD), allows remote attackers to execute arbitrary commands via a crafted web site, aka Bug ID CSCup83001.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-17T01:00:00.000Z
CVE-2015-0692 
Cisco Web Security Appliance (WSA) devices with software 8.5.0-ise-147 do not properly restrict use of the pickle Python module during certain tunnel-status checks, which allows local users to execute arbitrary Python code and gain privileges via crafted serialized objects, aka Bug ID CSCut39230.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-11T01:00:00.000Z
CVE-2015-0693 
Cisco Web Security Appliance (WSA) devices with software 8.5.0-ise-147 do not properly restrict use of the pickle Python module during certain tunnel-status checks, which allows local users to execute arbitrary Python code and gain privileges via a crafted pickle file, aka Bug ID CSCut39259.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-15T10:00:00.000Z