rainbutterfly/cve_corpus huggingface dataset:
CVE-2013-5465 
IBM Maximo Asset Management 7.x before 7.1.1.7 LAFIX.20140319-0837, 7.1.1.11 before IFIX.20140323-0749, 7.1.1.12 before IFIX.20140321-1336, 7.5.x before 7.5.0.3 IFIX027, and 7.5.0.4 before IFIX011; SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2; and Tivoli IT Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB) 7.x before 7.1.1.7 LAFIX.20140319-0837, 7.1.1.11 before IFIX.20140207-1801, and 7.1.1.12 before IFIX.20140218-1510 do not properly restrict file types during uploads, which allows remote authenticated users to have an unspecified impact via an invalid type.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-26T16:00:00.000Z
CVE-2013-5466 
The XSLT library in IBM DB2 and DB2 Connect 9.5 through 10.5, and the DB2 pureScale Feature 9.8 for Enterprise Server Edition, allows remote authenticated users to cause a denial of service via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-12-18T11:00:00.000Z
CVE-2013-5467 
Monitoring Agent for UNIX Logs 6.2.0 through FP03, 6.2.1 through FP04, 6.2.2 through FP09, and 6.2.3 through FP04 and Monitoring Server (ms) and Shared Libraries (ax) 6.2.0 through FP03, 6.2.1 through FP04, 6.2.2 through FP08, 6.2.3 through FP01, and 6.3.0 through FP01 in IBM Tivoli Monitoring (ITM) on UNIX allow local users to gain privileges via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-08-29T10:00:00.000Z
CVE-2013-5468 
IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 through 4.9.0, and ACSWeb in AlgoWebApps 5.0.0, does not encrypt login requests, which allows remote attackers to obtain sensitive information by sniffing the network.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-05T11:00:00.000Z
CVE-2013-5469 
The TCP implementation in Cisco IOS does not properly implement the transitions from the ESTABLISHED state to the CLOSED state, which allows remote attackers to cause a denial of service (flood of ACK packets) via a crafted series of ACK and FIN packets, aka Bug ID CSCtz14399.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-30T20:00:00.000Z
CVE-2013-5470 
Cisco Secure Access Control System (ACS) does not properly handle requests to read from the TACACS+ socket, which allows remote attackers to cause a denial of service (process crash) via malformed TCP packets, aka Bug ID CSCuh12488.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-04T01:00:00.000Z
CVE-2013-5471 
Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Global Site Selector (GSS) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuh42164.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-05T01:00:00.000Z
CVE-2013-5472 
The NTP implementation in Cisco IOS 12.0 through 12.4 and 15.0 through 15.1, and IOS XE 2.1 through 3.3, does not properly handle encapsulation of multicast NTP packets within MSDP SA messages, which allows remote attackers to cause a denial of service (device reload) by leveraging an MSDP peer relationship, aka Bug ID CSCuc81226.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-27T10:00:00.000Z
CVE-2013-5473 
Memory leak in Cisco IOS 12.2, 15.1, and 15.2; IOS XE 3.4.2S through 3.4.5S; and IOS XE 3.6.xS before 3.6.1S allows remote attackers to cause a denial of service (memory consumption or device reload) via malformed IKEv1 packets, aka Bug ID CSCtx66011.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-27T10:00:00.000Z
CVE-2013-5474 
Race condition in the IPv6 virtual fragmentation reassembly (VFR) implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.3 allows remote attackers to cause a denial of service (device reload or hang) via fragmented IPv6 packets, aka Bug ID CSCud64812.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-27T10:00:00.000Z
CVE-2013-5475 
Cisco IOS 12.2 through 12.4 and 15.0 through 15.3, and IOS XE 2.1 through 3.9, allows remote attackers to cause a denial of service (device reload) via crafted DHCP packets that are processed locally by a (1) server or (2) relay agent, aka Bug ID CSCug31561.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-27T10:00:00.000Z
CVE-2013-5476 
The Zone-Based Firewall (ZFW) feature in Cisco IOS 15.1 through 15.2, when content filtering or HTTP ALG inspection is enabled, allows remote attackers to cause a denial of service (device reload or hang) via crafted IPv4 HTTP traffic, aka Bug ID CSCtx56174.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-27T10:00:00.000Z
CVE-2013-5477 
The T1/E1 driver-queue functionality in Cisco IOS 12.2 and 15.0 through 15.3, when an HDLC32 driver is used, allows remote attackers to cause a denial of service (interface queue wedge) via bursty network traffic, aka Bug ID CSCub67465.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-27T10:00:00.000Z
CVE-2013-5478 
Cisco IOS 15.0 through 15.3 and IOS XE 3.2 through 3.8, when a VRF interface exists, allows remote attackers to cause a denial of service (interface queue wedge) via crafted UDP RSVP packets, aka Bug ID CSCuf17023.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-27T10:00:00.000Z
CVE-2013-5479 
The DNS-over-TCP implementation in Cisco IOS 12.2 and 15.0 through 15.3, when NAT is used, allows remote attackers to cause a denial of service (device reload) via a crafted IPv4 DNS TCP stream, aka Bug ID CSCtn53730.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-27T10:00:00.000Z
CVE-2013-5480 
The DNS-over-TCP implementation in Cisco IOS 12.2 and 15.0 through 15.3, when NAT is used, allows remote attackers to cause a denial of service (device reload) via a crafted IPv4 DNS TCP stream, aka Bug ID CSCuf28733.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-27T10:00:00.000Z
CVE-2013-5481 
The PPTP implementation in Cisco IOS 12.2 and 15.0 through 15.3, when NAT is used, allows remote attackers to cause a denial of service (device reload) via crafted TCP port-1723 packets, aka Bug ID CSCtq14817.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-27T10:00:00.000Z
CVE-2013-5482 
Cisco Prime LAN Management Solution (LMS) does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web site, related to a "cross-frame scripting (XFS)" issue, aka Bug ID CSCug77823.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-13T10:00:00.000Z
CVE-2013-5483 
Cross-site scripting (XSS) vulnerability in bookmarklet.jsp in Cisco SocialMiner allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCuh73868.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-08T01:00:00.000Z
CVE-2013-5486 
Directory traversal vulnerability in processImageSave.jsp in DCNM-SAN Server in Cisco Prime Data Center Network Manager (DCNM) before 6.2(1) allows remote attackers to write arbitrary files via the chartid parameter, aka Bug IDs CSCue77035 and CSCue77036.  NOTE: this can be leveraged to execute arbitrary commands by using the JBoss autodeploy functionality.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-23T10:00:00.000Z
CVE-2013-5487 
DCNM-SAN Server in Cisco Prime Data Center Network Manager (DCNM) before 6.2(1) allows remote attackers to read arbitrary files via unspecified vectors, aka Bug ID CSCue77029.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-23T10:00:00.000Z
CVE-2013-5488 
Cisco Common Services, as used in Cisco Prime LAN Management Solution (LMS), Cisco Security Manager, Cisco Unified Service Monitor, and Cisco Unified Operations Manager, does not properly interact with the ActiveMQ component, which allows remote attackers to cause a denial of service (memory consumption) via simultaneous TCP sessions, aka Bug IDs CSCuh54766, CSCuh01267, CSCuh95976, and CSCuh95969.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-12T01:00:00.000Z
CVE-2013-5489 
The gadget implementation in Cisco SocialMiner does not properly restrict the content of GET requests, which allows remote attackers to obtain sensitive information by reading (1) web-server access logs, (2) web-server Referer logs, or (3) the browser history, aka Bug ID CSCuh74125.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-13T10:00:00.000Z
CVE-2013-5490 
Cisco Prime Data Center Network Manager (DCNM) before 6.2(1) allows remote attackers to read arbitrary text files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka Bug ID CSCud80148.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-23T10:00:00.000Z
CVE-2013-5492 
administration.jsp in Cisco SocialMiner allows remote attackers to obtain sensitive information by sniffing the network for HTTP client-server traffic, aka Bug ID CSCuh76780.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-13T10:00:00.000Z
CVE-2013-5493 
The diagnostic module in the firmware on Cisco Virtualization Experience Client 6000 devices allows local users to bypass intended access restrictions and execute arbitrary commands via unspecified vectors, aka Bug ID CSCug68407.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-13T10:00:00.000Z
CVE-2013-5494 
Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Unified MeetingPlace Solution, as used in Unified MeetingPlace Web Conferencing and Unified MeetingPlace, allows remote attackers to hijack the authentication of arbitrary users, aka Bug IDs CSCui45209 and CSCui44674.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-16T01:00:00.000Z
CVE-2013-5495 
Cross-site scripting (XSS) vulnerability in the web framework in the Application Server in Cisco Unified MeetingPlace allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCui44681.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-16T01:00:00.000Z
CVE-2013-5496 
Open Network Environment Platform (ONEP) in Cisco NX-OS allows remote authenticated users to cause a denial of service (network-element reload) via a crafted packet, aka Bug ID CSCui51551.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-16T01:00:00.000Z
CVE-2013-5497 
The authentication manager process in the web framework in Cisco Intrusion Prevention System (IPS) does not properly handle user tokens, which allows remote attackers to cause a denial of service (intermittent MainApp hang) via a crafted management-interface connection request, aka Bug ID CSCuf20148.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-19T18:00:00.000Z
CVE-2013-5498 
The PPTP-ALG component in CRS Carrier Grade Services Engine (CGSE) and ASR 9000 Integrated Service Module (ISM) in Cisco IOS XR allows remote attackers to cause a denial of service (module reset) via crafted packet streams, aka Bug ID CSCue91963.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-27T20:00:00.000Z
CVE-2013-5499 
The remember feature in the DHCP server in Cisco IOS allows remote attackers to cause a denial of service (device reload) by acquiring a lease and then sending a DHCPRELEASE message, aka Bug ID CSCuh46822.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-10T10:00:00.000Z
CVE-2013-5500 
Multiple cross-site scripting (XSS) vulnerabilities in the oraadmin service page in Cisco MediaSense allow remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug IDs CSCuj23320, CSCuj23324, CSCuj23333, and CSCuj23338.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-20T16:00:00.000Z
CVE-2013-5501 
Cross-site scripting (XSS) vulnerability in the oraservice page in Cisco MediaSense allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCuj23328.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-20T16:00:00.000Z
CVE-2013-5502 
The web interface in Cisco MediaSense does not properly protect the client-server communication channel, which allows remote attackers to obtain sensitive query string or cookie information via unspecified vectors, aka Bug ID CSCuj23344.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-23T10:00:00.000Z
CVE-2013-5503 
The UDP process in Cisco IOS XR 4.3.1 does not free packet memory upon detecting full packet queues, which allows remote attackers to cause a denial of service (memory consumption) via UDP packets to listening ports, aka Bug ID CSCue69413.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-02T22:00:00.000Z
CVE-2013-5504 
Cross-site scripting (XSS) vulnerability in the Mobile Device Management (MDM) portal in Cisco Identity Services Engine (ISE) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCui30266.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-30T10:00:00.000Z
CVE-2013-5505 
Cross-site scripting (XSS) vulnerability in an administration page in Cisco Identity Services Engine (ISE) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCui30275.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-30T10:00:00.000Z
CVE-2013-5506 
The authorization functionality in Cisco Firewall Services Module (FWSM) 3.1.x and 3.2.x before 3.2(25) and 4.x before 4.1(13), when multiple-context mode is enabled, allows local users to read or modify any context's configuration via unspecified commands, aka Bug ID CSCue46080.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-13T10:00:00.000Z
CVE-2013-5507 
The IPsec implementation in Cisco Adaptive Security Appliance (ASA) Software 9.1 before 9.1(1.7), when an IPsec VPN tunnel is enabled, allows remote attackers to cause a denial of service (device reload) via a (1) ICMP or (2) ICMPv6 packet that is improperly handled during decryption, aka Bug ID CSCue18975.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-13T10:00:00.000Z
CVE-2013-5508 
The SQL*Net inspection engine in Cisco Adaptive Security Appliance (ASA) Software 7.x before 7.2(5.12), 8.x before 8.2(5.44), 8.3.x before 8.3(2.39), 8.4.x before 8.4(6), 8.5.x before 8.5(1.18), 8.6.x before 8.6(1.12), 8.7.x before 8.7(1.6), 9.0.x before 9.0(2.10), and 9.1.x before 9.1(2) and Firewall Services Module (FWSM) 3.1.x and 3.2.x before 3.2(27) and 4.x before 4.1(14) allows remote attackers to cause a denial of service (device reload) via crafted segmented Transparent Network Substrate (TNS) packets, aka Bug ID CSCub98434.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-13T10:00:00.000Z
CVE-2013-5509 
The SSL implementation in Cisco Adaptive Security Appliance (ASA) Software 9.0 before 9.0(2.6) and 9.1 before 9.1(2) allows remote attackers to bypass authentication, and obtain VPN access or administrative access, via a crafted X.509 client certificate, aka Bug ID CSCuf52468.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-13T10:00:00.000Z
CVE-2013-5510 
The remote-access VPN implementation in Cisco Adaptive Security Appliance (ASA) Software 7.x before 7.2(5.12), 8.x before 8.2(5.46), 8.3.x before 8.3(2.39), 8.4.x before 8.4(6), 8.6.x before 8.6(1.12), 9.0.x before 9.0(3.1), and 9.1.x before 9.1(2.5), when an override-account-disable option is enabled, does not properly parse AAA LDAP responses, which allows remote attackers to bypass authentication via a VPN connection attempt, aka Bug ID CSCug83401.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-13T10:00:00.000Z
CVE-2013-5511 
The Adaptive Security Device Management (ASDM) remote-management feature in Cisco Adaptive Security Appliance (ASA) Software 8.2.x before 8.2(5.46), 8.3.x before 8.3(2.39), 8.4.x before 8.4(6), 8.5.x before 8.5(1.18), 8.6.x before 8.6(1.12), 8.7.x before 8.7(1.7), 9.0.x before 9.0(3.1), and 9.1.x before 9.1(2.6) does not properly implement the authentication-certificate option, which allows remote attackers to bypass authentication via a TCP session to an ASDM interface, aka Bug ID CSCuh44815.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-13T10:00:00.000Z
CVE-2013-5512 
Race condition in the HTTP Deep Packet Inspection (DPI) feature in Cisco Adaptive Security Appliance (ASA) Software 8.2.x before 8.2(5.46), 8.3.x before 8.3(2.39), 8.4.x before 8.4(5.5), 8.5.x before 8.5(1.18), 8.6.x before 8.6(1.12), 8.7.x before 8.7(1.4), 9.0.x before 9.0(1.4), and 9.1.x before 9.1(1.2), in certain conditions involving the spoof-server option or ActiveX or Java response inspection, allows remote attackers to cause a denial of service (device reload) via a crafted HTTP response, aka Bug ID CSCud37992.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-13T10:00:00.000Z
CVE-2013-5513 
Cisco Adaptive Security Appliance (ASA) Software 8.2.x before 8.2(5.46), 8.3.x before 8.3(2.39), 8.4.x before 8.4(7), 8.5.x before 8.5(1.18), 8.6.x before 8.6(1.12), 8.7.x before 8.7(1.7), 9.0.x before 9.0(3.3), and 9.1.x before 9.1(1.8), when the DNS ALPI engine is enabled for TCP, allows remote attackers to cause a denial of service (device reload) via crafted TCP DNS packets, aka Bug ID CSCug03975.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-13T10:00:00.000Z
CVE-2013-5515 
The Clientless SSL VPN feature in Cisco Adaptive Security Appliance (ASA) Software 8.x before 8.2(5.44), 8.3.x before 8.3(2.39), 8.4.x before 8.4(5.7), 8.6.x before 8.6(1.12), 9.0.x before 9.0(2.6), and 9.1.x before 9.1(1.7) allows remote attackers to cause a denial of service (device reload) via crafted HTTPS requests, aka Bug ID CSCua22709.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-13T10:00:00.000Z
CVE-2013-5516 
The Media Snapshot implementation on Cisco TelePresence Multipoint Switch (CTMS) devices allows remote authenticated users to cause a denial of service (device reload) by sending many Media Snapshot requests at the time of a meeting termination, aka Bug ID CSCuh44796.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-01T00:00:00.000Z
CVE-2013-5517 
SQL injection vulnerability in the web framework in Cisco Unified Communications Domain Manager allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCuh96567.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-02T22:00:00.000Z
CVE-2013-5519 
Cross-site scripting (XSS) vulnerability in the management interface on Cisco Wireless LAN Controller (WLC) devices allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuf77810.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-03T10:00:00.000Z
CVE-2013-5521 
Cisco Identity Services Engine does not properly restrict the creation of guest accounts, which allows remote attackers to cause a denial of service (exhaustion of the account supply) via a series of requests within one session, aka Bug ID CSCue94287.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-25T01:00:00.000Z
CVE-2013-5522 
Cisco IOS on Catalyst 3750X switches has default Service Module credentials, which makes it easier for local users to gain privileges via a Service Module login, aka Bug ID CSCue92286.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-25T01:00:00.000Z
CVE-2013-5523 
The Sponsor Portal in Cisco Identity Services Engine (ISE) 1.2 and earlier does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web site, related to a "cross-frame scripting (XFS)" issue, aka Bug ID CSCui82666.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-10T10:00:00.000Z
CVE-2013-5524 
Cross-site scripting (XSS) vulnerability in the troubleshooting page in Cisco Identity Services Engine (ISE) 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCug77655.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-10T10:00:00.000Z
CVE-2013-5525 
SQL injection vulnerability in the web framework in Cisco Identity Services Engine (ISE) 1.2 and earlier allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCug90502.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-10T10:00:00.000Z
CVE-2013-5526 
Cisco 9900 fourth-generation IP phones do not properly perform SDP negotiation, which allows remote attackers to cause a denial of service (device reboot) via crafted SDP packets, aka Bug ID CSCuf06698.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-10T10:00:00.000Z
CVE-2013-5527 
The OSPF functionality in Cisco IOS and IOS XE allows remote attackers to cause a denial of service (device reload) via crafted options in an LSA type 11 packet, aka Bug ID CSCui21030.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-10T10:00:00.000Z
CVE-2013-5528 
Directory traversal vulnerability in the Tomcat administrative web interface in Cisco Unified Communications Manager allows remote authenticated users to read arbitrary files via directory traversal sequences in an unspecified input string, aka Bug ID CSCui78815.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-11T01:00:00.000Z
CVE-2013-5529 
The deployment module in the server in Cisco WebEx Meeting Center does not properly validate the passphrase, which allows remote attackers to launch a deployment or cause a denial of service (deployment interruption) via a direct request, aka Bug ID CSCuf52200.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-16T10:00:00.000Z
CVE-2013-5530 
The web framework in Cisco Identity Services Engine (ISE) 1.0 and 1.1.0 before 1.1.0.665-5, 1.1.1 before 1.1.1.268-7, 1.1.2 before 1.1.2.145-10, 1.1.3 before 1.1.3.124-7, 1.1.4 before 1.1.4.218-7, and 1.2 before 1.2.0.899-2 allows remote authenticated users to execute arbitrary commands via a crafted session on TCP port 443, aka Bug ID CSCuh81511.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-25T01:00:00.000Z