rainbutterfly/cve_corpus huggingface dataset:
CVE-2015-4201 
The Gateway General Packet Radio Service Support Node (GGSN) component on Cisco ASR 5000 devices with software 17.2.0.59184 and 18.0.L0.59219 allows remote attackers to cause a denial of service (Session Manager restart) via an invalid TCP/IP header, aka Bug ID CSCut68058.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-20T10:00:00.000Z
CVE-2015-4202 
Cisco IOS 12.2SCH on uBR10000 router Cable Modem Termination Systems (CMTS) does not properly restrict access to the IP Detail Record (IPDR) service, which allows remote attackers to obtain potentially sensitive MAC address and network-utilization information via crafted IPDR packets, aka Bug ID CSCua39203.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-20T14:00:00.000Z
CVE-2015-4203 
Race condition in Cisco IOS 12.2SCH in the Performance Routing Engine (PRE) module on uBR10000 devices, when NetFlow and an MPLS IPv6 VPN are configured, allows remote attackers to cause a denial of service (PXF process crash) by sending malformed MPLS 6VPE packets quickly, aka Bug ID CSCud83396.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-23T14:00:00.000Z
CVE-2015-4204 
Memory leak in Cisco IOS 12.2 in the Performance Routing Engine (PRE) module on uBR10000 devices allows remote authenticated users to cause a denial of service (memory consumption or PXF process crash) by sending docsIfMCmtsMib SNMP requests quickly, aka Bug ID CSCue65051.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-23T10:00:00.000Z
CVE-2015-4205 
Cisco IOS XR 5.3.1 on ASR 9000 devices allows remote attackers to cause a denial of service (NPU chip reset or line-card reload) by sending crafted IEEE 802.3x flow-control PAUSE frames on the local network, aka Bug ID CSCut19959.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-23T14:00:00.000Z
CVE-2015-4206 
Cisco Unified Communications Manager (UCM) 8.0 through 8.6 allows remote attackers to bypass an XSS protection mechanism via a crafted parameter, aka Bug ID CSCuu15266.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-15T02:00:00.000Z
CVE-2015-4207 
Cisco WebEx Meeting Center places a meeting's access number in a URL, which allows remote attackers to obtain sensitive information and bypass intended attendance restrictions by visiting a meeting-registration page, aka Bug ID CSCus62147.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-23T14:00:00.000Z
CVE-2015-4208 
Cisco WebEx Meeting Center does not properly restrict the content of URLs in GET requests, which allows remote attackers to obtain sensitive information or conduct SQL injection attacks via vectors involving read access to a request, aka Bug ID CSCup88398.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-24T10:00:00.000Z
CVE-2015-4209 
Cisco WebEx Meeting Center does not properly determine authorization for reading a host calendar, which allows remote attackers to obtain sensitive information by obtaining a list of all meetings and then sending a calendar request for each one, aka Bug ID CSCur23913.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-23T14:00:00.000Z
CVE-2015-4210 
Cross-site scripting (XSS) vulnerability in Cisco WebEx Meeting Center allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCur03806.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-23T14:00:00.000Z
CVE-2015-4211 
Cisco AnyConnect Secure Mobility Client 3.1(60) on Windows does not properly validate pathnames, which allows local users to gain privileges via a crafted INF file, aka Bug ID CSCus65862.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-24T10:00:00.000Z
CVE-2015-4212 
Cisco WebEx Meeting Center allows remote attackers to obtain sensitive information via unspecified vectors, as demonstrated by discovering credentials, aka Bug ID CSCut17466.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-24T10:00:00.000Z
CVE-2015-4213 
Cisco NX-OS 1.1(1g) on Nexus 9000 devices allows remote authenticated users to discover cleartext passwords by leveraging the existence of a decryption mechanism, aka Bug ID CSCuu84391.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-24T10:00:00.000Z
CVE-2015-4214 
Cisco Unified MeetingPlace 8.6(1.2) and 8.6(1.9) allows remote authenticated users to discover cleartext passwords by reading HTML source code, aka Bug ID CSCuu33050.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-24T10:00:00.000Z
CVE-2015-4215 
Cisco Wireless LAN Controller (WLC) devices with software 7.5(102.0) and 7.6(1.62) allow remote attackers to cause a denial of service (device crash) by triggering an exception during attempted forwarding of unspecified IPv6 packets to a non-IPv6 device, aka Bug ID CSCuj01046.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-24T10:00:00.000Z
CVE-2015-4216 
The remote-support feature on Cisco Web Security Virtual Appliance (WSAv), Email Security Virtual Appliance (ESAv), and Security Management Virtual Appliance (SMAv) devices before 2015-06-25 uses the same default SSH root authorized key across different customers' installations, which makes it easier for remote attackers to bypass authentication by leveraging knowledge of a private key from another installation, aka Bug IDs CSCuu95988, CSCuu95994, and CSCuu96630.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-26T10:00:00.000Z
CVE-2015-4217 
The remote-support feature on Cisco Web Security Virtual Appliance (WSAv), Email Security Virtual Appliance (ESAv), and Security Management Virtual Appliance (SMAv) devices before 2015-06-25 uses the same default SSH host keys across different customers' installations, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of a private key from another installation, aka Bug IDs CSCus29681, CSCuu95676, and CSCuu96601.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-26T10:00:00.000Z
CVE-2015-4218 
The web-based user interface in Cisco Jabber through 9.6(3) and 9.7 through 9.7(5) on Windows allows remote attackers to obtain sensitive information via a crafted value in a GET request, aka Bug IDs CSCuu65622 and CSCuu70858.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-24T10:00:00.000Z
CVE-2015-4219 
Cisco Secure Access Control System before 5.4(0.46.2) and 5.5 before 5.5(0.46) and Cisco Identity Services Engine 1.0(4.573) do not properly implement access control for support bundles, which allows remote authenticated users to obtain sensitive information via brute-force attempts to send valid credentials, aka Bug IDs CSCue00833 and CSCub40331.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-24T10:00:00.000Z
CVE-2015-4220 
Cross-site scripting (XSS) vulnerability in Cisco Unified Presence Server 9.1(1) allows remote attackers to inject arbitrary web script or HTML via an unspecified value, aka Bug ID CSCuq03773.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-25T16:00:00.000Z
CVE-2015-4221 
Cisco Unified Communications Manager IM and Presence Service 9.1(1) does not properly restrict access to encrypted passwords, which allows remote attackers to determine cleartext passwords, and consequently execute arbitrary commands, by visiting an unspecified web page and then conducting a decryption attack, aka Bug ID CSCuq46194.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-26T10:00:00.000Z
CVE-2015-4222 
SQL injection vulnerability in Cisco Unified Communications Manager IM and Presence Service 9.1(1) allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuq46325.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-26T10:00:00.000Z
CVE-2015-4223 
Cisco IOS XR 5.1.3 allows remote attackers to cause a denial of service (process reload) via crafted MPLS Label Distribution Protocol (LDP) packets, aka Bug ID CSCuu77478.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-25T16:00:00.000Z
CVE-2015-4224 
Cisco Wireless LAN Controller (WLC) devices with software 7.0(240.0) allow local users to execute arbitrary OS commands in a privileged context via crafted CLI commands, aka Bug ID CSCuj39474.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-26T10:00:00.000Z
CVE-2015-4225 
Cisco Application Policy Infrastructure Controller (APIC) 1.0(1.110a) and 1.0(1e) on Nexus 9000 devices does not properly implement RBAC health scoring, which allows remote authenticated users to obtain sensitive information via unspecified vectors, aka Bug ID CSCuq77485.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-27T10:00:00.000Z
CVE-2015-4226 
The packet-storing feature on Cisco 9900 phones with firmware 9.3(2) does not properly support the RTP protocol, which allows remote attackers to cause a denial of service (device hang) by sending malformed RTP packets after a call is answered, aka Bug ID CSCur39976.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-30T15:00:00.000Z
CVE-2015-4227 
Memory leak in Cisco Headend System Release allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors, aka Bug ID CSCus91838.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-30T10:00:00.000Z
CVE-2015-4228 
Cisco Digital Content Manager (DCM) 15.0.0 might allow remote ad servers to cause a denial of service (reboot) via malformed ad messages, aka Bug ID CSCur13999.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-02T14:42:00.000Z
CVE-2015-4229 
The web framework in Cisco Unified Communications Domain Manager 8.1(4)ER1 allows remote attackers to obtain sensitive information by visiting a bvsmweb URL, aka Bug ID CSCuq22589.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-30T10:00:00.000Z
CVE-2015-4230 
Memory leak in Cisco Headend System Release allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors, aka Bug ID CSCus91854.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-06T14:00:00.000Z
CVE-2015-4231 
The Python interpreter in Cisco NX-OS 6.2(8a) on Nexus 7000 devices allows local users to bypass intended access restrictions and delete an arbitrary VDC's files by leveraging administrative privileges in one VDC, aka Bug ID CSCur08416.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-03T10:00:00.000Z
CVE-2015-4232 
Cisco NX-OS 6.2(10) on Nexus and MDS 9000 devices allows local users to execute arbitrary OS commands by entering crafted tar parameters in the CLI, aka Bug ID CSCus44856.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-03T10:00:00.000Z
CVE-2015-4233 
SQL injection vulnerability in Cisco Unified MeetingPlace 8.6(1.2) allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuu54037.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-02T10:00:00.000Z
CVE-2015-4234 
Cisco NX-OS 6.0(2) and 6.2(2) on Nexus devices has an improper OS configuration, which allows local users to obtain root access via unspecified input to the Python interpreter, aka Bug IDs CSCun02887, CSCur00115, and CSCur00127.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-03T10:00:00.000Z
CVE-2015-4235 
Cisco Application Policy Infrastructure Controller (APIC) devices with software before 1.0(3o) and 1.1 before 1.1(1j) and Nexus 9000 ACI devices with software before 11.0(4o) and 11.1 before 11.1(1j) do not properly restrict access to the APIC filesystem, which allows remote authenticated users to obtain root privileges via unspecified use of the APIC cluster-management configuration feature, aka Bug IDs CSCuu72094 and CSCuv11991.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-24T14:00:00.000Z
CVE-2015-4236 
Cisco AsyncOS on Email Security Appliance (ESA) devices with software 8.5.6-073, 8.5.6-074, and 9.0.0-461, when clustering is enabled, allows remote attackers to cause a denial of service (clustering and SSH outage) via a packet flood, aka Bug IDs CSCur13704 and CSCuq05636.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-10T19:00:00.000Z
CVE-2015-4237 
The CLI parser in Cisco NX-OS 4.1(2)E1(1), 6.2(11b), 6.2(12), 7.2(0)ZZ(99.1), 7.2(0)ZZ(99.3), and 9.1(1)SV1(3.1.8) on Nexus devices allows local users to execute arbitrary OS commands via crafted characters in a filename, aka Bug IDs CSCuv08491, CSCuv08443, CSCuv08480, CSCuv08448, CSCuu99291, CSCuv08434, and CSCuv08436.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-03T10:00:00.000Z
CVE-2015-4238 
The SNMP implementation in Cisco Adaptive Security Appliance (ASA) Software 8.4(7) and 8.6(1.2) allows remote authenticated users to cause a denial of service (device reload) by sending many SNMP requests during a time of high network traffic, aka Bug ID CSCul02601.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-02T14:42:00.000Z
CVE-2015-4239 
Cisco Adaptive Security Appliance (ASA) Software 9.3(2.243) and 100.13(0.21) allows remote attackers to cause a denial of service (device reload) by sending crafted OSPFv2 packets on the local network, aka Bug ID CSCus84220.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-03T10:00:00.000Z
CVE-2015-4240 
Cisco IP Communicator 8.6(4) allows remote attackers to cause a denial of service (service outage) via an unspecified URL in a GET request, aka Bug ID CSCuu37656.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-08T14:00:00.000Z
CVE-2015-4241 
Cisco Adaptive Security Appliance (ASA) Software 9.3(2) allows remote attackers to cause a denial of service (system reload) by sending crafted OSPFv2 packets on the local network, aka Bug ID CSCut52679.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-08T14:00:00.000Z
CVE-2015-4242 
Cross-site request forgery (CSRF) vulnerability in Cisco FireSIGHT System Software 5.4.1.2 and 6.0.0 in FireSIGHT Management Center allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu94721.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-08T14:00:00.000Z
CVE-2015-4243 
The PPPoE establishment implementation in Cisco IOS XE 3.5.0S on ASR 1000 devices allows remote attackers to cause a denial of service (device reload) by sending malformed PPPoE Active Discovery Request (PADR) packets on the local network, aka Bug ID CSCty94202.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-08T14:00:00.000Z
CVE-2015-4244 
The boot implementation on Cisco ASR 5000 and 5500 devices with software 14.0 allows local users to execute arbitrary Linux commands by leveraging administrative privileges for storage of these commands in a Compact Flash (CF) file, aka Bug ID CSCuu75278.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-10T10:00:00.000Z
CVE-2015-4252 
Cross-site request forgery (CSRF) vulnerability on Cisco TelePresence ISDN Gateway devices with software 2.2(1.106) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90724.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-10T00:00:00.000Z
CVE-2015-4253 
Cross-site request forgery (CSRF) vulnerability on Cisco TelePresence Serial Gateway devices with software 1.0(1.42) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90728.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-10T00:00:00.000Z
CVE-2015-4254 
Cross-site request forgery (CSRF) vulnerability on Cisco TelePresence Advanced Media Gateway devices with software 1.1(1.40) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90732.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-10T17:00:00.000Z
CVE-2015-4255 
Cross-site request forgery (CSRF) vulnerability on Cisco TelePresence IP Gateway devices with software 2.0(3.34) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90734.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-10T00:00:00.000Z
CVE-2015-4256 
Cross-site request forgery (CSRF) vulnerability on Cisco TelePresence IP VCR devices with software 3.0(1.27) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90736.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-10T00:00:00.000Z
CVE-2015-4257 
Cross-site request forgery (CSRF) vulnerability on Cisco TelePresence MCU 4500 devices with software 4.5(1.55) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90710.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-10T00:00:00.000Z
CVE-2015-4258 
Cross-site request forgery (CSRF) vulnerability on Cisco TelePresence MSE 8000 devices allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90444.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-10T00:00:00.000Z
CVE-2015-4259 
The Integrated Management Controller on Cisco Unified Computing System (UCS) C servers with software 1.5(3) and 1.6(0.16) has a default SSL certificate, which makes it easier for man-in-the-middle attackers to bypass cryptographic protection mechanisms by leveraging knowledge of a private key, aka Bug IDs CSCum56133 and CSCum56177.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-10T15:00:00.000Z
CVE-2015-4260 
Cross-site scripting (XSS) vulnerability in Cisco Hosted Collaboration Solution 10.6(1) allows remote attackers to inject arbitrary web script or HTML via a crafted value in a URL, aka Bug ID CSCuu14862.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-10T10:00:00.000Z
CVE-2015-4262 
The password-change feature in Cisco Unified MeetingPlace Web Conferencing before 8.5(5) MR3 and 8.6 before 8.6(2) does not check the session ID or require entry of the current password, which allows remote attackers to reset arbitrary passwords via a crafted HTTP request, aka Bug ID CSCuu51839.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-24T14:00:00.000Z
CVE-2015-4263 
The Control and Provisioning functionality in Cisco Mobility Services Engine (MSE) 10.0(0.1) allows remote authenticated users to obtain sensitive information by reading log files, aka Bug ID CSCut36851.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-10T19:00:00.000Z
CVE-2015-4265 
Cisco Unified Computing System (UCS) B Blade Server Software 2.2.x before 2.2.6 allows local users to cause a denial of service (host OS or BMC hang) by sending crafted packets over the Inter-IC (I2C) bus, aka Bug ID CSCuq77241.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-12T10:00:00.000Z
CVE-2015-4266 
The web interface in Cisco Identity Services Engine (ISE) 1.1(4.1), 1.3(106.146), and 1.3(120.135) does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web site, related to a "cross-frame scripting (XFS)" issue, aka Bug ID CSCut04556.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-16T19:00:00.000Z
CVE-2015-4267 
Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Identity Services Engine (ISE) 1.2(0.793), 1.3(0.876), 1.4(0.109), 2.0(0.147), and 2.0(0.169) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCus09940.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-15T18:00:00.000Z
CVE-2015-4268 
Multiple cross-site scripting (XSS) vulnerabilities in the Infra Admin UI in Cisco Identity Services Engine (ISE) 1.2(1.198) and 1.3(0.876) allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in a (1) GET or (2) POST request, aka Bug ID CSCus16052.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-14T17:00:00.000Z
CVE-2015-4269 
The Tomcat throttling feature in Cisco Unified Communications Manager 10.5(1.99995.9) allows remote authenticated users to cause a denial of service (management outage) by sending many requests, aka Bug ID CSCuu99709.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-14T14:00:00.000Z
CVE-2015-4270 
Multiple cross-site scripting (XSS) vulnerabilities in Cisco FireSIGHT System Software 5.3.1.5 and 6.0.0 allow remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug IDs CSCuv22557, CSCuv22583, CSCuv22632, CSCuv22641, CSCuv22650, CSCuv22662, CSCuv22697, and CSCuv22702.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-14T17:00:00.000Z
CVE-2015-4271 
Cisco TelePresence TC before 7.3.4 on Integrator C devices allows remote attackers to bypass authentication via vectors involving multiple request parameters, aka Bug ID CSCuv00604.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-15T18:00:00.000Z
CVE-2015-4272 
Multiple cross-site scripting (XSS) vulnerabilities in the ccmivr page in Cisco Unified Communications Manager (formerly CallManager) 10.5(2.10000.5) allow remote attackers to inject arbitrary web script or HTML via a crafted parameter, aka Bug ID CSCut19580.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-14T14:00:00.000Z
CVE-2015-4273 
The Packet Data Network Gateway (aka PGW) component on Cisco ASR 5000 devices with software 15.0(912), 15.0(935), and 15.0(938) allows remote attackers to cause a denial of service (Session Manager outage) via malformed fields in an IP packet, aka Bug ID CSCut38476.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-15T14:00:00.000Z
CVE-2015-4274 
Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Unified Intelligence Center 10.0(1) and 10.6(1) allows remote attackers to hijack the authentication of arbitrary users, aka Bug IDs CSCuu94862 and CSCuu97936.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-16T19:00:00.000Z