rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-6663 
A vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause autonomic nodes of an affected system to reload, resulting in a denial of service (DoS) condition. More Information: CSCvd88936. Known Affected Releases: Denali-16.2.1 Denali-16.3.1.
Problem types: description: Denial of Service Vulnerability
Affected products: vendor: n/a
product: Cisco IOS and IOS XE
Published: 2017-08-07T06:00:00.000Z
CVE-2017-6664 
A vulnerability in the Autonomic Networking feature of Cisco IOS XE Software could allow an unauthenticated, remote, autonomic node to access the Autonomic Networking infrastructure of an affected system, after the certificate for the autonomic node has been revoked. This vulnerability affected devices that are running Release 16.x of Cisco IOS XE Software and are configured to use Autonomic Networking. This vulnerability does not affect devices that are running an earlier release of Cisco IOS XE Software or devices that are not configured to use Autonomic Networking. More Information: CSCvd22328. Known Affected Releases: 15.5(1)S3.1 Denali-16.2.1.
Problem types: description: Certificate Revocation Vulnerability
Affected products: vendor: n/a
product: Cisco IOS XE
Published: 2017-08-07T06:00:00.000Z
CVE-2017-6665 
A vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to reset the Autonomic Control Plane (ACP) of an affected system and view ACP packets that are transferred in clear text within an affected system, an Information Disclosure Vulnerability. More Information: CSCvd51214. Known Affected Releases: Denali-16.2.1 Denali-16.3.1.
Problem types: description: Information Disclosure Vulnerability
Affected products: vendor: n/a
product: Cisco IOS and IOS XE
Published: 2017-08-07T06:00:00.000Z
CVE-2017-6666 
A vulnerability in the forwarding component of Cisco IOS XR Software for Cisco Network Convergence System (NCS) 5500 Series Routers could allow an authenticated, local attacker to cause the router to stop forwarding data traffic across Traffic Engineering (TE) tunnels, resulting in a denial of service (DoS) condition. More Information: CSCvd16665. Known Affected Releases: 6.2.11.BASE. Known Fixed Releases: 6.1.3 6.1.2 6.3.1.8i.BASE 6.2.11.8i.BASE 6.2.2.9i.BASE 6.1.32.11i.BASE 6.1.31.10i.BASE 6.1.4.3i.BASE.
Problem types: description: Denial of Service Vulnerability
Affected products: vendor: n/a
product: Cisco Network Convergence System 5500 Series Routers
Published: 2017-06-13T06:00:00.000Z
CVE-2017-6667 
A vulnerability in the update process for the dynamic JAR file of the Cisco Context Service software development kit (SDK) could allow an unauthenticated, remote attacker to execute arbitrary code on the affected device with the privileges of the web server. More Information: CSCvb66730. Known Affected Releases: 2.0.
Problem types: description: Arbitrary Code Execution Vulnerability
Affected products: vendor: n/a
product: Cisco Context Service SDK
Published: 2017-06-13T06:00:00.000Z
CVE-2017-6668 
Vulnerabilities in the web-based GUI of Cisco Unified Communications Domain Manager (CUCDM) could allow an authenticated, remote attacker to impact the confidentiality of the system by executing arbitrary SQL queries, aka SQL Injection. More Information: CSCvc52784 CSCvc97648. Known Affected Releases: 8.1(7)ER1.
Problem types: description: SQL Injection Vulnerabilities
Affected products: vendor: n/a
product: Cisco Unified Communications Domain Manager
Published: 2017-06-13T06:00:00.000Z
CVE-2017-6669 
Multiple buffer overflow vulnerabilities exist in the Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) files. An attacker could exploit these vulnerabilities by providing a user with a malicious ARF file via email or URL and convincing the user to launch the file. Exploitation of these vulnerabilities could cause an affected player to crash and, in some cases, could allow arbitrary code execution on the system of a targeted user. The Cisco WebEx Network Recording Player is an application that is used to play back WebEx meeting recordings that have been recorded on the computer of an online meeting attendee. The player can be automatically installed when the user accesses a recording file that is hosted on a WebEx server. The following client builds are affected by this vulnerability: Cisco WebEx Business Suite (WBS29) client builds prior to T29.13.130, Cisco WebEx Business Suite (WBS30) client builds prior to T30.17, Cisco WebEx Business Suite (WBS31) client builds prior to T31.10. Cisco Bug IDs: CSCvc47758 CSCvc51227 CSCvc51242.
Problem types: cwe_id: CWE-119
description: CWE-119
Affected products: vendor: n/a
product: Cisco WebEx Network Recording Player
Published: 2017-06-26T07:00:00.000Z
CVE-2017-6670 
A vulnerability in the web-based GUI of Cisco Unified Communications Domain Manager could allow an unauthenticated, remote attacker to redirect a user to a malicious web page, aka an Open Redirect issue. More Information: CSCvc54813. Known Affected Releases: 8.1(7)ER1.
Problem types: description: Open Redirect Vulnerability
Affected products: vendor: n/a
product: Cisco Unified Communications Domain Manager
Published: 2017-06-13T06:00:00.000Z
CVE-2017-6671 
A vulnerability in the email message scanning of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass configured filters on the device, as demonstrated by the Attachment Filter. More Information: CSCvd34632. Known Affected Releases: 10.0.1-087 9.7.1-066. Known Fixed Releases: 10.0.2-020 9.8.1-015.
Problem types: description: Attachment Filter Bypass Vulnerability
Affected products: vendor: n/a
product: Cisco Email Security Appliance
Published: 2017-06-13T06:00:00.000Z
CVE-2017-6672 
A vulnerability in certain filtering mechanisms of access control lists (ACLs) for Cisco ASR 5000 Series Aggregation Services Routers through 21.x could allow an unauthenticated, remote attacker to bypass ACL rules that have been configured for an affected device. More Information: CSCvb99022 CSCvc16964 CSCvc37351 CSCvc54843 CSCvc63444 CSCvc77815 CSCvc88658 CSCve08955 CSCve14141 CSCve33870.
Problem types: description: Access Control List Security Bypass Vulnerability
Affected products: vendor: n/a
product: Cisco ASR 5000 Series Aggregation Services Routers
Published: 2017-07-25T19:00:00.000Z
CVE-2017-6673 
A vulnerability in Cisco Firepower Management Center could allow an authenticated, remote attacker to obtain user information. An attacker could use this information to perform reconnaissance. More Information: CSCvc10894. Known Affected Releases: 6.1.0.2 6.2.0. Known Fixed Releases: 6.2.0.
Problem types: description: Information Disclosure Vulnerability
Affected products: vendor: n/a
product: Cisco Firepower Management Center
Published: 2017-06-13T06:00:00.000Z
CVE-2017-6674 
A vulnerability in the feature-license management functionality of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass URL filters that have been configured for an affected device. More Information: CSCvb16413. Known Affected Releases: 6.0.1 6.1.0 6.2.0 6.2.1. Known Fixed Releases: 6.2.1 6.2.0.1 6.1.0.2.
Problem types: description: URL Filtering Bypass Vulnerability
Affected products: vendor: n/a
product: Cisco Firepower System Software
Published: 2017-06-13T06:00:00.000Z
CVE-2017-6675 
A vulnerability in the web interface of Cisco Industrial Network Director could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against an affected system. More Information: CSCvd25405. Known Affected Releases: 1.1(0.176).
Problem types: description: Cross-Site Scripting Vulnerability
Affected products: vendor: n/a
product: Cisco Industrial Network Director
Published: 2017-06-13T06:00:00.000Z
CVE-2017-6678 
A vulnerability in the ingress UDP packet processing functionality of Cisco Virtualized Packet Core-Distributed Instance (VPC-DI) Software 19.2 through 21.0 could allow an unauthenticated, remote attacker to cause both control function (CF) instances on an affected system to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient handling of user-supplied data by the affected software. An attacker could exploit this vulnerability by sending crafted UDP packets to the distributed instance (DI) network addresses of both CF instances on an affected system. A successful exploit could allow the attacker to cause an unhandled error condition on the affected system, which would cause the CF instances to reload and consequently cause the entire VPC to reload, resulting in the disconnection of all subscribers and a DoS condition on the affected system. This vulnerability can be exploited via IPv4 traffic only. Cisco Bug IDs: CSCvc01665 CSCvc35565.
Problem types: cwe_id: CWE-399
description: CWE-399
Affected products: vendor: n/a
product: Cisco Virtualized Packet Core-Distributed Instance
Published: 2017-06-26T07:00:00.000Z
CVE-2017-6679 
The Cisco Umbrella Virtual Appliance Version 2.0.3 and prior contained an undocumented encrypted remote support tunnel (SSH) which auto initiated from the customer's appliance to Cisco's SSH Hubs in the Umbrella datacenters. These tunnels were primarily leveraged for remote support and allowed for authorized/authenticated personnel from the Cisco Umbrella team to access the appliance remotely and obtain full control without explicit customer approval. To address this vulnerability, the Umbrella Virtual Appliance version 2.1.0 now requires explicit customer approval before an SSH tunnel from the VA to the Cisco terminating server can be established.
Problem types: description: undocumented encrypted remote support tunnel
Affected products: vendor: n/a
product: Cisco Umbrella Virtual Appliance Version 2.0.3 and prior
Published: 2017-12-01T00:00:00.000Z
CVE-2017-6680 
A vulnerability in the AutoVNF logging function of Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to create arbitrary directories on the affected system. More Information: CSCvc76652. Known Affected Releases: 21.0.0.
Problem types: description: Arbitrary Direction Creation Vulnerability
Affected products: vendor: n/a
product: Cisco Ultra Services Framework
Published: 2017-06-13T06:00:00.000Z
CVE-2017-6681 
A vulnerability in the AutoVNF VNFStagingView class of Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to execute a relative path traversal attack, enabling an attacker to read sensitive files on the system. More Information: CSCvc76662. Known Affected Releases: 21.0.0.
Problem types: description: Information Disclosure Vulnerability
Affected products: vendor: n/a
product: Cisco Ultra Services Framework
Published: 2017-06-13T06:00:00.000Z
CVE-2017-6682 
A vulnerability in the ConfD CLI of Cisco Elastic Services Controllers could allow an authenticated, remote attacker to run arbitrary commands as the Linux tomcat user on an affected system. More Information: CSCvc76620. Known Affected Releases: 2.2(9.76).
Problem types: description: Arbitrary Command Execution Vulnerability
Affected products: vendor: n/a
product: Cisco Elastic Services Controller
Published: 2017-06-13T06:00:00.000Z
CVE-2017-6683 
A vulnerability in the esc_listener.py script of Cisco Elastic Services Controllers could allow an authenticated, remote attacker to execute arbitrary commands as the tomcat user on an affected system, aka an Authentication Request Processing Arbitrary Command Execution Vulnerability. More Information: CSCvc76642. Known Affected Releases: 2.2(9.76).
Problem types: description: Arbitrary Command Execution Vulnerability
Affected products: vendor: n/a
product: Cisco Elastic Services Controller
Published: 2017-06-13T06:00:00.000Z
CVE-2017-6684 
A vulnerability in Cisco Elastic Services Controllers could allow an authenticated, remote attacker to log in to an affected system as the Linux admin user, aka an Insecure Default Credentials Vulnerability. More Information: CSCvc76651. Known Affected Releases: 21.0.0.
Problem types: description: Insecure Default Credentials Vulnerability
Affected products: vendor: n/a
product: Cisco Elastic Services Controller
Published: 2017-06-13T06:00:00.000Z
CVE-2017-6685 
A vulnerability in Cisco Ultra Services Framework Staging Server could allow an authenticated, remote attacker with access to the management network to log in as an admin user of the affected device, aka an Insecure Default Credentials Vulnerability. More Information: CSCvc76681. Known Affected Releases: 21.0.0.
Problem types: description: Insecure Default Credentials Vulnerability
Affected products: vendor: n/a
product: Cisco Ultra Services Framework Staging Server
Published: 2017-06-13T06:00:00.000Z
CVE-2017-6686 
A vulnerability in Cisco Ultra Services Framework Element Manager could allow an authenticated, remote attacker with access to the management network to log in as an admin or oper user of the affected device, aka an Insecure Default Credentials Vulnerability. More Information: CSCvc76699. Known Affected Releases: 21.0.0.
Problem types: description: Insecure Default Credentials Vulnerability
Affected products: vendor: n/a
product: Cisco Ultra Services Framework Element Manager
Published: 2017-06-13T06:00:00.000Z
CVE-2017-6687 
A vulnerability in Cisco Ultra Services Framework Element Manager could allow an authenticated, remote attacker with access to the management network to log in to the affected device using default credentials present on the system, aka an Insecure Default Password Vulnerability. More Information: CSCvc76695. Known Affected Releases: 21.0.0.
Problem types: description: Insecure Default Password Vulnerability
Affected products: vendor: n/a
product: Cisco Ultra Services Framework Element Manager
Published: 2017-06-13T06:00:00.000Z
CVE-2017-6688 
A vulnerability in Cisco Elastic Services Controllers could allow an authenticated, remote attacker to log in to an affected system as the Linux root user, aka an Insecure Default Password Vulnerability. More Information: CSCvc76631. Known Affected Releases: 2.2(9.76).
Problem types: description: Insecure Default Password Vulnerability
Affected products: vendor: n/a
product: Cisco Elastic Services Controller
Published: 2017-06-13T06:00:00.000Z
CVE-2017-6689 
A vulnerability in the ConfD CLI of Cisco Elastic Services Controllers could allow an authenticated, remote attacker to log in to an affected system as the admin user, aka an Insecure Default Administrator Credentials Vulnerability. More Information: CSCvc76661. Known Affected Releases: 2.2(9.76).
Problem types: description: Insecure Default Administrator Credentials Vulnerability
Affected products: vendor: n/a
product: Cisco Elastic Services Controller
Published: 2017-06-13T06:00:00.000Z
CVE-2017-6690 
A vulnerability in the file check operation of Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an authenticated, remote attacker to overwrite or modify arbitrary files on an affected system. More Information: CSCvd73726. Known Affected Releases: 21.0.v0.65839 21.3.M0.67005. Known Fixed Releases: 21.4.A0.67087 21.4.A0.67079 21.4.A0.67013 21.3.M0.67084 21.3.M0.67077 21.3.M0.66994 21.3.J0.66993 21.1.v0.67082 21.1.V0.67083.
Problem types: description: Arbitrary File Modification Vulnerability
Affected products: vendor: n/a
product: Cisco StarOS
Published: 2017-06-13T06:00:00.000Z
CVE-2017-6691 
A vulnerability in the ConfD CLI of Cisco Elastic Services Controllers could allow an authenticated, remote attacker to access sensitive information on an affected system. More Information: CSCvd29403. Known Affected Releases: 2.3(2).
Problem types: description: Information Disclosure Vulnerability
Affected products: vendor: n/a
product: Cisco Elastic Services Controller
Published: 2017-06-13T06:00:00.000Z
CVE-2017-6692 
A vulnerability in Cisco Ultra Services Framework Element Manager could allow an authenticated, remote attacker to log in to the device with the privileges of the root user, aka an Insecure Default Account Information Vulnerability. More Information: CSCvd85710. Known Affected Releases: 21.0.v0.65839.
Problem types: description: Insecure Default Account Information Vulnerability
Affected products: vendor: n/a
product: Cisco Ultra Services Framework Element Manager
Published: 2017-06-13T06:00:00.000Z
CVE-2017-6693 
A vulnerability in the ConfD server component of Cisco Elastic Services Controllers could allow an authenticated, local attacker to access information stored in the file system of an affected system, aka Unauthorized Directory Access. More Information: CSCvd76286. Known Affected Releases: 2.2(9.76) 2.3(1).
Problem types: description: Unauthorized Directory Access Vulnerability
Affected products: vendor: n/a
product: Cisco Elastic Services Controller
Published: 2017-06-13T06:00:00.000Z
CVE-2017-6694 
A vulnerability in the Virtual Network Function Manager's (VNFM) logging function of Cisco Ultra Services Platform could allow an authenticated, local attacker to view sensitive data (cleartext credentials) on an affected system. More Information: CSCvd29355. Known Affected Releases: 21.0.v0.65839.
Problem types: description: Information Disclosure Vulnerability
Affected products: vendor: n/a
product: Cisco Ultra Services Platform
Published: 2017-06-13T06:00:00.000Z
CVE-2017-6695 
A vulnerability in the ConfD server in Cisco Ultra Services Platform could allow an authenticated, local attacker to view sensitive information. More Information: CSCvd29398. Known Affected Releases: 21.0.v0.65839.
Problem types: description: Information Disclosure Vulnerability
Affected products: vendor: n/a
product: Cisco Ultra Services Platform
Published: 2017-06-13T06:00:00.000Z
CVE-2017-6696 
A vulnerability in the file system of Cisco Elastic Services Controllers could allow an authenticated, local attacker to gain access to sensitive user credentials that are stored in an affected system. More Information: CSCvd73677. Known Affected Releases: 2.3(2).
Problem types: description: Information Disclosure Vulnerability
Affected products: vendor: n/a
product: Cisco Elastic Services Controller
Published: 2017-06-13T06:00:00.000Z
CVE-2017-6697 
A vulnerability in the web interface of Cisco Elastic Services Controllers could allow an authenticated, remote attacker to access sensitive system credentials that are stored in an affected system. More Information: CSCvd76339. Known Affected Releases: 2.2(9.76).
Problem types: description: Information Disclosure Vulnerability
Affected products: vendor: n/a
product: Cisco Elastic Services Controller
Published: 2017-06-13T06:00:00.000Z
CVE-2017-6698 
A vulnerability in the Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM) SQL database interface could allow an authenticated, remote attacker to impact the confidentiality and integrity of the application by executing arbitrary SQL queries, aka SQL Injection. More Information: CSCvc23892 CSCvc35270 CSCvc35626 CSCvc35630 CSCvc49568. Known Affected Releases: 3.1(1) 2.0(4.0.45B).
Problem types: description: SQL Injection Vulnerability
Affected products: vendor: n/a
product: Cisco Prime Infrastructure and Evolved Programmable Network Manager
Published: 2017-07-04T00:00:00.000Z
CVE-2017-6699 
A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM) could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. More Information: CSCvc24616 CSCvc35363 CSCvc49574. Known Affected Releases: 3.1(1) 2.0(4.0.45B).
Problem types: description: Reflected Cross-Site Scripting Vulnerability
Affected products: vendor: n/a
product: Cisco Prime Infrastructure and Evolved Programmable Network Manager
Published: 2017-07-04T00:00:00.000Z
CVE-2017-6700 
A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM) could allow an unauthenticated, remote attacker to conduct a Document Object Model (DOM) based (environment or client-side) cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. More Information: CSCvc24620 CSCvc49586. Known Affected Releases: 3.1(1) 2.0(4.0.45B).
Problem types: description: DOM Cross-Site Scripting Vulnerability
Affected products: vendor: n/a
product: Cisco Prime Infrastructure and Evolved Programmable Network Manager
Published: 2017-07-04T00:00:00.000Z
CVE-2017-6701 
A vulnerability in the web application interface of the Cisco Identity Services Engine (ISE) portal could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web interface of an affected system. More Information: CSCvd49141. Known Affected Releases: 2.1(102.101).
Problem types: description: Cross-Site Scripting Vulnerability
Affected products: vendor: n/a
product: Cisco Identity Services Engine
Published: 2017-07-04T00:00:00.000Z
CVE-2017-6702 
A vulnerability in the web framework of Cisco SocialMiner could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected system. More Information: CSCve15285. Known Affected Releases: 11.5(1).
Problem types: description: Cross-Site Scripting Vulnerability
Affected products: vendor: n/a
product: Cisco SocialMiner
Published: 2017-07-04T00:00:00.000Z
CVE-2017-6703 
A vulnerability in the web application in the Cisco Prime Collaboration Provisioning tool could allow an unauthenticated, remote attacker to hijack another user's session. More Information: CSCvc90346. Known Affected Releases: 12.1.
Problem types: description: Session Hijacking Vulnerability
Affected products: vendor: n/a
product: Cisco Prime Collaboration Provisioning Tool
Published: 2017-07-04T00:00:00.000Z
CVE-2017-6704 
A vulnerability in the web application in the Cisco Prime Collaboration Provisioning tool could allow an authenticated, remote attacker to perform arbitrary file downloads that could allow the attacker to read files from the underlying filesystem. More Information: CSCvc90335. Known Affected Releases: 12.1.
Problem types: description: Arbitrary File Download Vulnerability
Affected products: vendor: n/a
product: Cisco Prime Collaboration Provisioning Tool
Published: 2017-07-04T00:00:00.000Z
CVE-2017-6705 
A vulnerability in the filesystem of the Cisco Prime Collaboration Provisioning tool could allow an authenticated, local attacker to acquire sensitive information. More Information: CSCvc82973. Known Affected Releases: 12.1.
Problem types: description: Information Disclosure Vulnerability
Affected products: vendor: n/a
product: Cisco Prime Collaboration Provisioning Tool
Published: 2017-07-04T00:00:00.000Z
CVE-2017-6706 
A vulnerability in the logging subsystem of the Cisco Prime Collaboration Provisioning tool could allow an unauthenticated, local attacker to acquire sensitive information. More Information: CSCvd07260. Known Affected Releases: 12.1.
Problem types: description: Log File Information Disclosure Vulnerability
Affected products: vendor: n/a
product: Cisco Prime Collaboration Provisioning Tool
Published: 2017-07-04T00:00:00.000Z