rainbutterfly/cve_corpus huggingface dataset:
CVE-2016-1270 
The rpd daemon in Juniper Junos OS before 12.1X44-D60, 12.1X46 before 12.1X46-D45, 12.1X47 before 12.1X47-D30, 12.3 before 12.3R9, 12.3X48 before 12.3X48-D20, 13.2 before 13.2R7, 13.2X51 before 13.2X51-D40, 13.3 before 13.3R6, 14.1 before 14.1R4, and 14.2 before 14.2R2, when configured with BGP-based L2VPN or VPLS, allows remote attackers to cause a denial of service (daemon restart) via a crafted L2VPN family BGP update.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-04-15T14:00:00.000Z
CVE-2016-1271 
Juniper Junos OS before 12.1X46-D45, 12.1X47 before 12.1X47-D30, 12.3 before 12.3R11, 12.3X48 before 12.3X48-D25, 13.2 before 13.2R8, 13.3 before 13.3R7, 14.1 before 14.1R6, 14.2 before 14.2R4, 15.1 before 15.1R1 or 15.1F2, and 15.1X49 before 15.1X49-D15 allow local users to gain privileges via crafted combinations of CLI commands and arguments, a different vulnerability than CVE-2015-3003, CVE-2014-3816, and CVE-2014-0615.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-04-15T14:00:00.000Z
CVE-2016-1273 
Juniper Junos OS before 13.2X51-D40, 14.x before 14.1X53-D30, and 15.x before 15.1X53-D20 on QFX5100 and QFX10002 switches do not have sufficient entropy, which makes it easier for remote attackers to defeat cryptographic encryption and authentication protection mechanisms via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-04-15T14:00:00.000Z
CVE-2016-1274 
Juniper Junos OS 14.1X53 before 14.1X53-D30 on QFX Series switches allows remote attackers to cause a denial of service (PFE panic) via a high rate of unspecified VXLAN packets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-04-15T14:00:00.000Z
CVE-2016-1275 
Juniper Junos OS before 13.3R9, 14.1R6 before 14.1R6-S1, and 14.1 before 14.1R7, when configured with VPLS routing-instances, allows remote attackers to obtain sensitive mbuf information by injecting a flood of Ethernet frames with IPv6 MAC addresses directly into a connected interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-09T14:00:00.000Z
CVE-2016-1276 
Juniper Junos OS before 12.1X46-D50, 12.1X47 before 12.1X47-D23, 12.3X48 before 12.3X48-D25, and 15.1X49 before 15.1X49-D40 on a High-End SRX-Series chassis system with one or more Application Layer Gateways (ALGs) enabled allow remote attackers to cause a denial of service (CPU consumption, fab link failure, or flip-flop failovers) via vectors related to in-transit traffic matching ALG rules.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-05T15:00:00.000Z
CVE-2016-1277 
Juniper Junos OS before 12.1X46-D50, 12.1X47 before 12.1X47-D40, 12.3X48 before 12.3X48-D30, 13.3 before 13.3R9, 14.1 before 14.1R8, 14.1X53 before 14.1X53-D40, 14.2 before 14.2R6, 15.1 before 15.1F6 or 15.1R3, and 15.1X49 before 15.1X49-D40, when configured with a GRE or IPIP tunnel, allow remote attackers to cause a denial of service (kernel panic) via a crafted ICMP packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-09T14:00:00.000Z
CVE-2016-1278 
Juniper Junos OS before 12.1X46-D50 on SRX Series devices reverts to "safe mode" authentication and allows root CLI logins without a password after a failed upgrade to 12.1X46, which might allow local users to gain privileges by leveraging use of the "request system software" command with the "partition" option.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-05T15:00:00.000Z
CVE-2016-1279 
J-Web in Juniper Junos OS before 12.1X46-D45, 12.1X46-D50, 12.1X47 before 12.1X47-D35, 12.3 before 12.3R12, 12.3X48 before 12.3X48-D25, 13.3 before 13.3R10, 13.3R9 before 13.3R9-S1, 14.1 before 14.1R7, 14.1X53 before 14.1X53-D35, 14.2 before 14.2R6, 15.1 before 15.1A2 or 15.1F4, 15.1X49 before 15.1X49-D30, and 15.1R before 15.1R3 might allow remote attackers to obtain sensitive information and consequently gain administrative privileges via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-09T14:00:00.000Z
CVE-2016-1280 
PKId in Juniper Junos OS before 12.1X44-D52, 12.1X46 before 12.1X46-D37, 12.1X47 before 12.1X47-D30, 12.3 before 12.3R12, 12.3X48 before 12.3X48-D20, 13.3 before 13.3R10, 14.1 before 14.1R8, 14.1X53 before 14.1X53-D40, 14.2 before 14.2R7, 15.1 before 15.1R4, 15.1X49 before 15.1X49-D20, 15.1X53 before 15.1X53-D60, and 16.1 before 16.1R1 allow remote attackers to bypass an intended certificate validation mechanism via a self-signed certificate with an Issuer name that matches a valid CA certificate enrolled in Junos.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-09T14:00:00.000Z
CVE-2016-1281 
Untrusted search path vulnerability in the installer for TrueCrypt 7.2 and 7.1a, VeraCrypt before 1.17-BETA, and possibly other products allows local users to execute arbitrary code with administrator privileges and conduct DLL hijacking attacks via a Trojan horse DLL in the "application directory", as demonstrated with the USP10.dll, RichEd20.dll, NTMarta.dll and SRClient.dll DLLs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-23T21:00:00.000Z
CVE-2016-1283 
The pcre_compile2 function in pcre_compile.c in PCRE 8.38 mishandles the /((?:F?+(?:^(?(R)a+\"){99}-))(?J)(?'R'(?'R'<((?'RR'(?'R'\){97)?J)?J)(?'R'(?'R'\){99|(:(?|(?'R')(\k'R')|((?'R')))H'R'R)(H'R))))))/ pattern and related patterns with named subgroups, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-03T00:00:00.000Z
CVE-2016-1284 
rdataset.c in ISC BIND 9 Supported Preview Edition 9.9.8-S before 9.9.8-S5, when nxdomain-redirect is enabled, allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via crafted flag values in a query.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-02-04T11:00:00.000Z
CVE-2016-1285 
named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME records when parsing fetch reply messages, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed packet to the rndc (aka control channel) interface, related to alist.c and sexpr.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-03-09T23:00:00.000Z
CVE-2016-1286 
named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted signature record for a DNAME record, related to db.c and resolver.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-03-09T23:00:00.000Z
CVE-2016-1287 
Buffer overflow in the IKEv1 and IKEv2 implementations in Cisco ASA Software before 8.4(7.30), 8.7 before 8.7(1.18), 9.0 before 9.0(4.38), 9.1 before 9.1(7), 9.2 before 9.2(4.5), 9.3 before 9.3(3.7), 9.4 before 9.4(2.4), and 9.5 before 9.5(2.2) on ASA 5500 devices, ASA 5500-X devices, ASA Services Module for Cisco Catalyst 6500 and Cisco 7600 devices, ASA 1000V devices, Adaptive Security Virtual Appliance (aka ASAv), Firepower 9300 ASA Security Module, and ISA 3000 devices allows remote attackers to execute arbitrary code or cause a denial of service (device reload) via crafted UDP packets, aka Bug IDs CSCux29978 and CSCux42019.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-02-11T18:00:00.000Z
CVE-2016-1288 
The HTTPS Proxy feature in Cisco AsyncOS before 8.5.3-051 and 9.x before 9.0.0-485 on Web Security Appliance (WSA) devices allows remote attackers to cause a denial of service (service outage) by leveraging certain intranet connectivity and sending a malformed HTTPS request, aka Bug ID CSCuu24840.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-03-03T22:00:00.000Z
CVE-2016-1289 
The API in Cisco Prime Infrastructure 1.2 through 3.0 and Evolved Programmable Network Manager (EPNM) 1.2 allows remote attackers to execute arbitrary code or obtain sensitive management information via a crafted HTTP request, as demonstrated by discovering managed-device credentials, aka Bug ID CSCuy10231.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-02T14:00:00.000Z
CVE-2016-1290 
The web API in Cisco Prime Infrastructure 1.2.0 through 2.2(2) and Cisco Evolved Programmable Network Manager (EPNM) 1.2 allows remote authenticated users to bypass intended RBAC restrictions and gain privileges via an HTTP request that is inconsistent with a pattern filter, aka Bug ID CSCuy10227.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-04-06T23:00:00.000Z
CVE-2016-1291 
Cisco Prime Infrastructure 1.2.0 through 2.2(2) and Cisco Evolved Programmable Network Manager (EPNM) 1.2 allow remote attackers to execute arbitrary code via crafted deserialized data in an HTTP POST request, aka Bug ID CSCuw03192.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-04-06T23:00:00.000Z
CVE-2016-1293 
Multiple cross-site scripting (XSS) vulnerabilities in the Management Center in Cisco FireSIGHT System Software 6.0.0 and 6.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCux40414.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-16T02:00:00.000Z
CVE-2016-1294 
Cross-site scripting (XSS) vulnerability in the Management Center in Cisco FireSIGHT System Software 6.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted cookie, aka Bug ID CSCuw89094.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-16T02:00:00.000Z
CVE-2016-1295 
Cisco Adaptive Security Appliance (ASA) Software 8.4 allows remote attackers to obtain sensitive information via an AnyConnect authentication attempt, aka Bug ID CSCuo65775.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-16T02:00:00.000Z
CVE-2016-1296 
The proxy engine on Cisco Web Security Appliance (WSA) devices with software 8.5.3-055, 9.1.0-000, and 9.5.0-235 allows remote attackers to bypass intended proxy restrictions via a malformed HTTP method, aka Bug ID CSCux00848.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-20T02:00:00.000Z
CVE-2016-1297 
The Device Manager GUI in Cisco Application Control Engine (ACE) 4710 A5 before A5(3.1) allows remote authenticated users to bypass intended RBAC restrictions and execute arbitrary CLI commands with admin privileges via an unspecified parameter in a POST request, aka Bug ID CSCul84801.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-02-26T02:00:00.000Z
CVE-2016-1298 
Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unified Contact Center Express 10.0(1), 10.5(1), 10.6(1), and 11.0(1) allow remote attackers to inject arbitrary web script or HTML via vectors related to permalinks, aka Bug ID CSCux92033.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-26T02:00:00.000Z
CVE-2016-1299 
The web-management GUI implementation on Cisco Small Business SG300 devices 1.4.1.x allows remote attackers to cause a denial of service (HTTPS outage) via crafted HTTPS requests, aka Bug ID CSCuw87174.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-27T22:00:00.000Z
CVE-2016-1300 
Cross-site scripting (XSS) vulnerability in Cisco Unity Connection (UC) 10.5(2.3009) allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCux82582.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-27T22:00:00.000Z
CVE-2016-1301 
The RBAC implementation in Cisco ASA-CX Content-Aware Security software before 9.3.1.1(112) and Cisco Prime Security Manager (PRSM) software before 9.3.1.1(112) allows remote authenticated users to change arbitrary passwords via a crafted HTTP request, aka Bug ID CSCuo94842.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-02-07T11:00:00.000Z
CVE-2016-1302 
Cisco Application Policy Infrastructure Controller (APIC) devices with software before 1.0(3h) and 1.1 before 1.1(1j) and Nexus 9000 ACI Mode switches with software before 11.0(3h) and 11.1 before 11.1(1j) allow remote authenticated users to bypass intended RBAC restrictions via crafted REST requests, aka Bug ID CSCut12998.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-02-07T11:00:00.000Z
CVE-2016-1303 
The web GUI on Cisco Small Business 500 devices 1.2.0.92 allows remote attackers to cause a denial of service via a crafted HTTP request, aka Bug ID CSCul65330.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-30T11:00:00.000Z
CVE-2016-1304 
Cross-site scripting (XSS) vulnerability in Cisco Unity Connection 10.5(2.3009) allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCux82596.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-30T11:00:00.000Z
CVE-2016-1305 
Cross-site scripting (XSS) vulnerability in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.1 allows remote attackers to inject arbitrary web script or HTML via vectors involving HTML entities, aka Bug ID CSCux15511.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-02-07T11:00:00.000Z
CVE-2016-1306 
Multiple cross-site scripting (XSS) vulnerabilities in Cisco Fog Director 1.0(0) allow remote attackers to inject arbitrary web script or HTML via a crafted parameter, aka Bug ID CSCux80466.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-02-06T02:00:00.000Z
CVE-2016-1307 
The Openfire server in Cisco Finesse Desktop 10.5(1) and 11.0(1) and Unified Contact Center Express 10.6(1) has a hardcoded account, which makes it easier for remote attackers to obtain access via an XMPP session, aka Bug ID CSCuw79085.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-02-07T11:00:00.000Z
CVE-2016-1308 
SQL injection vulnerability in Cisco Unified Communications Manager 10.5(2.13900.9) allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCux99227.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-02-07T11:00:00.000Z
CVE-2016-1309 
Multiple cross-site scripting (XSS) vulnerabilities in Cisco WebEx Meetings Server 2.5.1.5 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCuy01843.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-02-07T11:00:00.000Z
CVE-2016-1310 
Cross-site scripting (XSS) vulnerability in Cisco Unity Connection 11.5(0.199) allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuy09033.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-02-06T02:00:00.000Z
CVE-2016-1311 
Cross-site scripting (XSS) vulnerability in the management interface in Cisco Jabber Guest Server 10.6(8) allows remote attackers to inject arbitrary web script or HTML via the host tag parameter, aka Bug ID CSCuy08224.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-02-06T02:00:00.000Z
CVE-2016-1312 
The HTTPS inspection engine in the Content Security and Control Security Services Module (CSC-SSM) 6.6 before 6.6.1164.0 for Cisco ASA 5500 devices allows remote attackers to cause a denial of service (memory consumption or device reload) via a flood of HTTPS packets, aka Bug ID CSCue76147.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-03-09T20:00:00.000Z
CVE-2016-1313 
Cisco UCS Invicta C3124SA Appliance 4.3.1 through 5.0.1, UCS Invicta Scaling System and Appliance, and Whiptail Racerunner improperly store a default SSH private key, which allows remote attackers to obtain root access via unspecified vectors, aka Bug ID CSCun71294.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-04-06T23:00:00.000Z
CVE-2016-1314 
Cross-site scripting (XSS) vulnerability in Cisco Unified Communications Domain Manager (CDM) 8.1(1) allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCux80760.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-03-28T23:00:00.000Z
CVE-2016-1315 
The proxy engine in Cisco Advanced Malware Protection (AMP), when used with Email Security Appliance (ESA) 9.5.0-201, 9.6.0-051, and 9.7.0-125, allows remote attackers to bypass intended content restrictions via a malformed e-mail message containing an encoded file, aka Bug ID CSCux45338.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-02-12T01:00:00.000Z
CVE-2016-1316 
Cisco TelePresence Video Communication Server (VCS) X8.1 through X8.7, as used in conjunction with Jabber Guest, allows remote attackers to obtain sensitive call-statistics information via a direct request to an unspecified URL, aka Bug ID CSCux73362.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-02-09T02:00:00.000Z
CVE-2016-1317 
Cisco Unified Communications Manager 11.5(0.98000.480) allows remote authenticated users to obtain sensitive database table-name and entity-name information via a direct request to an unspecified URL, aka Bug ID CSCuy11098.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-02-09T02:00:00.000Z
CVE-2016-1318 
Cross-site scripting (XSS) vulnerability in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.1 allows remote attackers to inject arbitrary web script or HTML via crafted markup data, aka Bug ID CSCux15489.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-02-09T02:00:00.000Z
CVE-2016-1319 
Cisco Unified Communications Manager (aka CallManager) 9.1(2.10000.28), 10.5(2.10000.5), 10.5(2.12901.1), and 11.0(1.10000.10); Unified Communications Manager IM & Presence Service 10.5(2); Unified Contact Center Express 11.0(1); and Unity Connection 10.5(2) store a cleartext encryption key, which allows local users to obtain sensitive information via unspecified vectors, aka Bug ID CSCuv85958.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-02-09T02:00:00.000Z
CVE-2016-1320 
The CLI in Cisco Prime Collaboration 9.0 and 11.0 allows local users to execute arbitrary OS commands as root by leveraging administrator privileges, aka Bug ID CSCux69286.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-02-12T01:00:00.000Z
CVE-2016-1321 
Cisco Universal Small Cell devices with firmware R2.12 through R3.5 contain an image-decryption key in flash memory, which allows remote attackers to bypass a certain certificate-validation feature and obtain sensitive firmware-image and IP address data via a request to an unspecified Cisco server, aka Bug ID CSCut98082.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-02-15T23:00:00.000Z
CVE-2016-1322 
The REST interface in Cisco Spark 2015-07-04 allows remote attackers to bypass intended access restrictions and create arbitrary user accounts via unspecified web requests, aka Bug ID CSCuv72584.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-02-12T01:00:00.000Z
CVE-2016-1323 
The REST interface in Cisco Spark 2015-06 allows remote authenticated users to obtain sensitive information via a request for an unspecified file, aka Bug ID CSCuv84048.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-02-12T01:00:00.000Z
CVE-2016-1324 
The REST interface in Cisco Spark 2015-06 allows remote attackers to cause a denial of service (resource outage) by accessing an administrative page, aka Bug ID CSCuv84125.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-02-12T01:00:00.000Z
CVE-2016-1325 
The administration interface on Cisco DPC3939B and DPC3941 devices allows remote attackers to obtain sensitive information via a crafted HTTP request, aka Bug ID CSCus49506.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-03-09T20:00:00.000Z
CVE-2016-1326 
The administration interface on Cisco DPQ3925 devices with firmware r1 allows remote attackers to cause a denial of service (device restart) via a crafted HTTP request, aka Bug ID CSCup48105.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-03-09T20:00:00.000Z
CVE-2016-1327 
Buffer overflow in the web server on Cisco DPC2203 and EPC2203 devices with firmware r1_customer_image allows remote attackers to execute arbitrary code via a crafted HTTP request, aka Bug ID CSCuv05935.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-03-09T20:00:00.000Z
CVE-2016-1328 
goform/WClientMACList on Cisco EPC3928 devices allows remote attackers to cause a denial of service (device crash) via a long h_sortWireless parameter, related to a "Gateway Client List Denial of Service" issue, aka Bug ID CSCux24948.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-03T21:00:00.000Z
CVE-2016-1329 
Cisco NX-OS 6.0(2)U6(1) through 6.0(2)U6(5) on Nexus 3000 devices and 6.0(2)A6(1) through 6.0(2)A6(5) and 6.0(2)A7(1) on Nexus 3500 devices has hardcoded credentials, which allows remote attackers to obtain root privileges via a (1) TELNET or (2) SSH session, aka Bug ID CSCuy25800.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-03-03T11:00:00.000Z
CVE-2016-1330 
Cisco IOS 15.2(4)E on Industrial Ethernet 2000 devices allows remote attackers to cause a denial of service (device reload) via crafted Cisco Discovery Protocol (CDP) packets, aka Bug ID CSCuy27746.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-02-15T23:00:00.000Z
CVE-2016-1331 
Multiple cross-site scripting (XSS) vulnerabilities in Cisco Emergency Responder 11.5(0.99833.5) allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCuy10766.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-02-15T23:00:00.000Z
CVE-2016-1333 
Cisco IOS 15.5(3)M and 15.6(1)T0a on Cisco 1000 Connected Grid routers allows remote authenticated users to cause a denial of service (device reload) via an SNMP request for unspecified BRIDGE MIB OIDs, aka Bug ID CSCux89878.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-02-17T16:00:00.000Z
CVE-2016-1334 
Cisco Small Business 500 Wireless Access Point devices with firmware 1.0.4.4 allow remote attackers to set the system time via a crafted POST request, aka Bug ID CSCuy01457.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-02-17T16:00:00.000Z