rainbutterfly/cve_corpus huggingface dataset:
CVE-2015-6311 
Cisco Wireless LAN Controller (WLC) devices with software 7.0(240.0), 7.3(101.0), and 7.4(1.19) allow remote attackers to cause a denial of service (device outage) by sending malformed 802.11i management data to a managed access point, aka Bug ID CSCub65236.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-08T20:00:00.000Z
CVE-2015-6312 
Cisco TelePresence Server 3.1 on 7010, Mobility Services Engine (MSE) 8710, Multiparty Media 310 and 320, and Virtual Machine (VM) devices allows remote attackers to cause a denial of service (device reload) via malformed STUN packets, aka Bug ID CSCuv01348.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-04-06T23:00:00.000Z
CVE-2015-6313 
Cisco TelePresence Server 4.1(2.29) through 4.2(4.17) on 7010; Mobility Services Engine (MSE) 8710; Multiparty Media 310, 320, and 820; and Virtual Machine (VM) devices allows remote attackers to cause a denial of service (memory consumption or device reload) via crafted HTTP requests that are not followed by an unspecified negotiation, aka Bug ID CSCuv47565.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-04-06T23:00:00.000Z
CVE-2015-6314 
Cisco Wireless LAN Controller (WLC) devices with software 7.6.x, 8.0 before 8.0.121.0, and 8.1 before 8.1.131.0 allow remote attackers to change configuration settings via unspecified vectors, aka Bug ID CSCuw06153.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-15T02:00:00.000Z
CVE-2015-6315 
Cisco Aironet 1850 access points with software 8.1(112.4) allow local users to gain privileges via crafted CLI commands, aka Bug ID CSCuv79694.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-13T00:00:00.000Z
CVE-2015-6316 
The default configuration of sshd_config in Cisco Mobility Services Engine (MSE) through 8.0.120.7 allows logins by the oracle account, which makes it easier for remote attackers to obtain access by entering this account's hardcoded password in an SSH session, aka Bug ID CSCuv40501.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-06T11:00:00.000Z
CVE-2015-6317 
Cisco Identity Services Engine (ISE) before 2.0 allows remote authenticated users to bypass intended web-resource access restrictions via a direct request, aka Bug ID CSCuu45926.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-23T02:00:00.000Z
CVE-2015-6318 
Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.1 and X8.5.2 allows local users to write to arbitrary files via an unspecified symlink attack, aka Bug ID CSCuv11969.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-12T10:00:00.000Z
CVE-2015-6319 
SQL injection vulnerability in the web-based management interface on Cisco RV220W devices allows remote attackers to execute arbitrary SQL commands via a crafted header in an HTTP request, aka Bug ID CSCuv29574.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-27T22:00:00.000Z
CVE-2015-6320 
The IP ingress packet handler on Cisco Aironet 1800 devices with software 8.1(112.3) and 8.1(112.4) allows remote attackers to cause a denial of service via a crafted header in an IP packet, aka Bug ID CSCuv63138.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-15T02:00:00.000Z
CVE-2015-6321 
Cisco AsyncOS before 8.5.7-042, 9.x before 9.1.0-032, 9.1.x before 9.1.1-023, and 9.5.x and 9.6.x before 9.6.0-042 on Email Security Appliance (ESA) devices; before 9.1.0-032, 9.1.1 before 9.1.1-005, and 9.5.x before 9.5.0-025 on Content Security Management Appliance (SMA) devices; and before 7.7.0-725 and 8.x before 8.0.8-113 on Web Security Appliance (WSA) devices allows remote attackers to cause a denial of service (memory consumption) via a flood of TCP packets, aka Bug IDs CSCus79774, CSCus79777, and CSCzv95795.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-06T02:00:00.000Z
CVE-2015-6322 
The IPC channel in Cisco AnyConnect Secure Mobility Client 2.0.0343 through 4.1(8) allows local users to bypass intended access restrictions and move arbitrary files by leveraging the lack of source-path validation, aka Bug ID CSCuv48563.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-12T10:00:00.000Z
CVE-2015-6323 
The Admin portal in Cisco Identity Services Engine (ISE) 1.1.x, 1.2.0 before patch 17, 1.2.1 before patch 8, 1.3 before patch 5, and 1.4 before patch 4 allows remote attackers to obtain administrative access via unspecified vectors, aka Bug ID CSCuw34253.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-15T02:00:00.000Z
CVE-2015-6324 
The DHCPv6 relay implementation in Cisco Adaptive Security Appliance (ASA) software 9.0 before 9.0(4.37), 9.1 before 9.1(6.6), 9.2 before 9.2(4), 9.3 before 9.3(3.5), and 9.4 before 9.4(2) allows remote attackers to cause a denial of service (device reload) via crafted DHCPv6 packets, aka Bug IDs CSCus56252 and CSCus57142.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-25T01:00:00.000Z
CVE-2015-6325 
Cisco Adaptive Security Appliance (ASA) software 7.2 and 8.2 before 8.2(5.58), 8.3 and 8.4 before 8.4(7.29), 8.5 through 8.7 before 8.7(1.17), 9.0 before 9.0(4.37), 9.1 before 9.1(6.4), 9.2 before 9.2(4), 9.3 before 9.3(3.1), and 9.4 before 9.4(1.1) allows remote attackers to cause a denial of service (device reload) via a crafted DNS response, aka Bug ID CSCut03495.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-25T01:00:00.000Z
CVE-2015-6326 
Cisco Adaptive Security Appliance (ASA) software 7.2 and 8.2 before 8.2(5.58), 8.3 and 8.4 before 8.4(7.29), 8.5 through 8.7 before 8.7(1.17), 9.0 before 9.0(4.37), 9.1 before 9.1(6.6), 9.2 before 9.2(4), 9.3 before 9.3(3.5), and 9.4 before 9.4(1.5) allows remote attackers to cause a denial of service (device reload) via a crafted DNS response, aka Bug ID CSCuu07799.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-25T01:00:00.000Z
CVE-2015-6327 
The IKEv1 implementation in Cisco Adaptive Security Appliance (ASA) software 7.2 and 8.2 before 8.2(5.58), 8.3 and 8.4 before 8.4(7.29), 8.5 through 8.7 before 8.7(1.17), 9.0 before 9.0(4.37), 9.1 before 9.1(6.8), 9.2 before 9.2(4), and 9.3 before 9.3(3) allows remote attackers to cause a denial of service (device reload) via crafted ISAKMP UDP packets, aka Bug ID CSCus94026.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-25T01:00:00.000Z
CVE-2015-6328 
The web framework in Cisco Prime Collaboration Assurance (PCA) 10.5(1) allows remote authenticated users to bypass intended access restrictions and read arbitrary files via a crafted URL, aka Bug ID CSCus88380.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-13T00:00:00.000Z
CVE-2015-6329 
SQL injection vulnerability in Cisco Prime Collaboration Provisioning 10.6 and 11.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCut64074.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-12T10:00:00.000Z
CVE-2015-6330 
Cross-site request forgery (CSRF) vulnerability in Cisco Prime Collaboration Assurance 10.5(1) and 10.6 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCus62712.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-18T11:00:00.000Z
CVE-2015-6331 
SQL injection vulnerability in the web framework in Cisco Prime Collaboration Assurance 10.5(1) allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCus39887.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-12T10:00:00.000Z
CVE-2015-6332 
Cisco Prime Infrastructure 2.2 allows remote attackers to cause a denial of service (daemon hang) by sending many SSL renegotiation requests, aka Bug ID CSCuv56830.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-13T00:00:00.000Z
CVE-2015-6333 
Cisco Application Policy Infrastructure Controller (APIC) 1.1j allows local users to gain privileges via vectors involving addition of an SSH key, aka Bug ID CSCuw46076.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-16T01:00:00.000Z
CVE-2015-6334 
Cisco ASR 5000 and 5500 devices with software 18.0.0.57828 and 19.0.M0.61045 allow remote attackers to cause a denial of service (vpnmgr process restart) via a crafted header in a TACACS packet, aka Bug ID CSCuw01984.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-16T01:00:00.000Z
CVE-2015-6335 
The policy implementation in Cisco FireSIGHT Management Center 5.3.1.7, 5.4.0.4, and 6.0.0 for VMware allows remote authenticated administrators to bypass intended policy restrictions and execute Linux commands as root via unspecified vectors, aka Bug ID CSCuw12839.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-25T01:00:00.000Z
CVE-2015-6336 
Cisco Aironet 1800 devices with software 7.2, 7.3, 7.4, 8.1(112.3), 8.1(112.4), and 8.1(15.14) have a default account, which makes it easier for remote attackers to obtain access via unspecified vectors, aka Bug ID CSCuw58062.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-15T02:00:00.000Z
CVE-2015-6337 
Cross-site scripting (XSS) vulnerability in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.0.10 allows remote attackers to inject arbitrary web script or HTML via a crafted hostname in an SNMP response, aka Bug ID CSCuw47238.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-26T02:00:00.000Z
CVE-2015-6340 
The Proxy Mobile IPv6 (PMIPv6) component in the CDMA implementation on Cisco ASR 5000 devices with software 19.0.M0.60737 allows remote attackers to cause a denial of service (hamgr process restart) via a crafted header in a PMIPv6 packet, aka Bug ID CSCuv63280.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-27T01:00:00.000Z
CVE-2015-6341 
The Web Management GUI on Cisco Wireless LAN Controller (WLC) devices with software 7.4(140.0) and 8.0(120.0) allows remote attackers to cause a denial of service (client disconnection) via unspecified vectors, aka Bug ID CSCuw10610.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-25T01:00:00.000Z
CVE-2015-6343 
The SIP implementation in Cisco IOS 15.5(3)M on Cisco Unified Border Element (CUBE) devices allows remote attackers to cause a denial of service via crafted SIP messages, aka Bug ID CSCuv79202.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-31T01:00:00.000Z
CVE-2015-6344 
The web-based GUI in Cisco Adaptive Security Appliance (ASA) CX Context-Aware Security 9.3(4.1.11) allows remote authenticated users to bypass intended access restrictions and obtain sensitive user information via an unspecified HTTP request, aka Bug ID CSCuv74105.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-30T10:00:00.000Z
CVE-2015-6345 
SQL injection vulnerability in the Solution Engine in Cisco Secure Access Control Server (ACS) 5.7(0.15) allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCuw24700.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-30T10:00:00.000Z
CVE-2015-6346 
Cross-site scripting (XSS) vulnerability in Cisco Secure Access Control Server (ACS) 5.7(0.15) allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-30T10:00:00.000Z
CVE-2015-6347 
The Solution Engine in Cisco Secure Access Control Server (ACS) 5.7(0.15) allows remote authenticated users to bypass intended RBAC restrictions, and create a dashboard or portlet, by visiting an unspecified web page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-30T10:00:00.000Z
CVE-2015-6348 
The report-generation web interface in the Solution Engine in Cisco Secure Access Control Server (ACS) 5.7(0.15) allows remote authenticated users to bypass intended RBAC restrictions, and read report or status information, by visiting an unspecified web page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-30T10:00:00.000Z
CVE-2015-6349 
Cross-site scripting (XSS) vulnerability in the web interface in the Solution Engine in Cisco Secure Access Control Server (ACS) 5.7(0.15) allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-30T10:00:00.000Z
CVE-2015-6350 
SQL injection vulnerability in the web framework in Cisco Prime Service Catalog 11.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuw50843.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-30T10:00:00.000Z
CVE-2015-6351 
Cisco ASR 5500 System Architecture Evolution (SAE) Gateway devices with software 19.1.0.61559 and 19.2.0 allow remote attackers to cause a denial of service (BGP process restart) via a crafted header in a BGP packet, aka Bug ID CSCuw65781.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-30T10:00:00.000Z
CVE-2015-6352 
Cisco Unified Communications Domain Manager before 10.6(1) provides different error messages for pathname access attempts depending on whether the pathname exists, which allows remote attackers to map a filesystem via a series of requests, aka Bug ID CSCut67891.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-30T10:00:00.000Z
CVE-2015-6353 
Multiple cross-site scripting (XSS) vulnerabilities in Cisco FireSight Management Center (MC) 5.3.1.5 and 5.4.x through 5.4.1.3 allow remote authenticated users to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCuu28922.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-31T01:00:00.000Z
CVE-2015-6354 
Multiple cross-site scripting (XSS) vulnerabilities in Cisco FireSight Management Center (MC) 5.4.1.3 and 6.0 allow remote authenticated users to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCuv73338.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-31T01:00:00.000Z
CVE-2015-6355 
The web interface in Cisco Unified Computing System (UCS) 2.2(5b)A on blade servers allows remote attackers to obtain potentially sensitive version information by visiting an unspecified URL, aka Bug ID CSCuw87226.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-04T02:00:00.000Z
CVE-2015-6356 
Cross-site scripting (XSS) vulnerability in the WeChat page in Cisco Social Miner 10.0(1) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCuw60212.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-04T02:00:00.000Z
CVE-2015-6357 
The rule-update feature in Cisco FireSIGHT Management Center (MC) 5.2 through 5.4.0.1 does not verify the X.509 certificate of the support.sourcefire.com SSL server, which allows man-in-the-middle attackers to spoof this server and provide an invalid package, and consequently execute arbitrary code, via a crafted certificate, aka Bug ID CSCuw06444.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-18T11:00:00.000Z
CVE-2015-6358 
Multiple Cisco embedded devices use hardcoded X.509 certificates and SSH host keys embedded in the firmware, which allows remote attackers to defeat cryptographic protection mechanisms and conduct man-in-the-middle attacks by leveraging knowledge of these certificates and keys from another installation, aka Bug IDs CSCuw46610, CSCuw46620, CSCuw46637, CSCuw46654, CSCuw46665, CSCuw46672, CSCuw46677, CSCuw46682, CSCuw46705, CSCuw46716, CSCuw46979, CSCuw47005, CSCuw47028, CSCuw47040, CSCuw47048, CSCuw47061, CSCuw90860, CSCuw90869, CSCuw90875, CSCuw90881, CSCuw90899, and CSCuw90913.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-12T15:00:00.000Z
CVE-2015-6359 
The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Cisco IOS 15.3(3)S0.1 on ASR devices mishandles internal tables, which allows remote attackers to cause a denial of service (memory consumption or device crash) via a flood of crafted ND messages, aka Bug ID CSCup28217.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-15T02:00:00.000Z
CVE-2015-6360 
The encryption-processing feature in Cisco libSRTP before 1.5.3 allows remote attackers to cause a denial of service via crafted fields in SRTP packets, aka Bug ID CSCux00686.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-04-21T10:00:00.000Z
CVE-2015-6361 
The administrative web interface on Cisco DPC3939 (XB3) devices with firmware 121109aCMCST allows remote authenticated users to execute arbitrary commands via unspecified fields, aka Bug ID CSCuw86170.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-13T02:00:00.000Z
CVE-2015-6362 
The web GUI in Cisco Connected Grid Network Management System (CG-NMS) 3.0(0.35) and 3.0(0.54) allows remote authenticated users to bypass intended access restrictions and modify the configuration by leveraging the Monitor-Only role, aka Bug ID CSCuw42640.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-10T02:00:00.000Z
CVE-2015-6363 
Multiple cross-site scripting (XSS) vulnerabilities in the web framework in Cisco FireSIGHT Management Center (MC) 5.4.1.4 and 6.0.1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCuw88396.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-12T02:00:00.000Z
CVE-2015-6364 
Cisco Content Delivery System Manager Software 3.2 on Videoscape Distribution Suite Service Manager allows remote attackers to obtain sensitive information via crafted URLs in REST API requests, aka Bug ID CSCuv86960.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-14T02:00:00.000Z
CVE-2015-6365 
Cisco IOS 15.2(04)M and 15.4(03)M lets physical-interface ACLs supersede virtual PPP interface ACLs, which allows remote authenticated users to bypass intended network-traffic restrictions in opportunistic circumstances by using PPP, aka Bug ID CSCur61303.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-14T02:00:00.000Z
CVE-2015-6366 
Cisco IOS 15.2(04)M6 and 15.4(03)S lets physical-interface ACLs supersede tunnel-interface ACLs, which allows remote attackers to bypass intended network-traffic restrictions in opportunistic circumstances by using a tunnel, aka Bug ID CSCur01042.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-13T02:00:00.000Z
CVE-2015-6367 
Cisco Aironet 1800 devices with software 8.1(131.0) allow remote attackers to cause a denial of service (CPU consumption) by improperly establishing many SSHv2 connections, aka Bug ID CSCux13374.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-14T02:00:00.000Z
CVE-2015-6368 
Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices allows remote attackers to read files via a crafted HTTP request, aka Bug ID CSCux10608.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-19T02:00:00.000Z
CVE-2015-6369 
The USB driver in Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices allows physically proximate attackers to cause a denial of service via a crafted USB device that triggers invalid USB commands, aka Bug ID CSCux10531.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-19T02:00:00.000Z
CVE-2015-6370 
The Management I/O (MIO) component in Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices allows local users to execute arbitrary OS commands as root via crafted CLI input, aka Bug ID CSCux10578.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-19T02:00:00.000Z
CVE-2015-6371 
Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices allows remote authenticated users to read arbitrary files via crafted parameters to unspecified scripts, aka Bug ID CSCux10621.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-19T02:00:00.000Z
CVE-2015-6372 
Cross-site scripting (XSS) vulnerability in the web-based management interface in Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCux10614.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-18T15:00:00.000Z
CVE-2015-6373 
Cross-site request forgery (CSRF) vulnerability in Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCux10611.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-18T15:00:00.000Z
CVE-2015-6374 
The web interface in Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web site, aka Bug ID CSCux10604.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-19T02:00:00.000Z
CVE-2015-6375 
The debug-logging (aka debug cns) feature in Cisco Networking Services (CNS) for IOS 15.2(2)E3 allows local users to obtain sensitive information by reading an unspecified file, aka Bug ID CSCux18010.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-21T11:00:00.000Z
CVE-2015-6376 
Cross-site request forgery (CSRF) vulnerability in Cisco TelePresence Video Communication Server (VCS) X8.5.1 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuv72412.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-21T11:00:00.000Z
CVE-2015-6377 
Cisco Virtual Topology System (VTS) 2.0(0) and 2.0(1) allows remote attackers to cause a denial of service (CPU and memory consumption, and TCP port outage) via a flood of crafted TCP packets, aka Bug ID CSCux13379.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-24T02:00:00.000Z
CVE-2015-6378 
Cross-site request forgery (CSRF) vulnerability on Cisco DPQ3925 devices with EDVA 5.5.2 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuv05943.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-14T02:00:00.000Z