rainbutterfly/cve_corpus huggingface dataset:
CVE-2016-6343 
JBoss BPM Suite 6 is vulnerable to a reflected XSS via dashbuilder. Remote attackers can entice authenticated users that have privileges to access dashbuilder (usually admins) to click on links to /dashbuilder/Controller containing malicious scripts. Successful exploitation would allow execution of script code within the context of the affected user.
Problem types: cwe_id: CWE-79
description: CWE-79
Affected products: vendor: [UNKNOWN]
product: Dashbuilder
Published: 2018-10-31T13:00:00.000Z
CVE-2016-6344 
Red Hat JBoss BPM Suite 6.3.x does not include the HTTPOnly flag in a Set-Cookie header for session cookies, which makes it easier for remote attackers to obtain potentially sensitive information via script access to the cookies.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-07T18:00:00.000Z
CVE-2016-6345 
RESTEasy allows remote authenticated users to obtain sensitive information by leveraging "insufficient use of random values" in async jobs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-07T18:00:00.000Z
CVE-2016-6346 
RESTEasy enables GZIPInterceptor, which allows remote attackers to cause a denial of service via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-07T18:00:00.000Z
CVE-2016-6347 
Cross-site scripting (XSS) vulnerability in the default exception handler in RESTEasy allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-20T17:00:00.000Z
CVE-2016-6348 
JacksonJsonpInterceptor in RESTEasy might allow remote attackers to conduct a cross-site script inclusion (XSSI) attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-12T22:00:00.000Z
CVE-2016-6349 
The machinectl command in oci-register-machine allows local users to list running containers and possibly obtain sensitive information by running that command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-29T20:00:00.000Z
CVE-2016-6350 
OpenBSD 5.8 and 5.9 allows local users to cause a denial of service (NULL pointer dereference and panic) via a sysctl call with a path starting with 10,9.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-07T16:00:00.000Z
CVE-2016-6351 
The esp_do_dma function in hw/scsi/esp.c in QEMU (aka Quick Emulator), when built with ESP/NCR53C9x controller emulation support, allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) or execute arbitrary code on the QEMU host via vectors involving DMA read into ESP command buffer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-07T18:00:00.000Z
CVE-2016-6352 
The OneLine32 function in io-ico.c in gdk-pixbuf before 2.35.3 allows remote attackers to cause a denial of service (out-of-bounds write and crash) via crafted dimensions in an ICO file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-03T18:00:00.000Z
CVE-2016-6353 
Cloudera Search in CDH before 5.7.0 allows unauthorized document access because Solr Queries by document id can bypass Sentry document-level security via the RealTimeGetHandler.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-26T13:48:22.000Z
CVE-2016-6354 
Heap-based buffer overflow in the yy_get_next_buffer function in Flex before 2.6.1 might allow context-dependent attackers to cause a denial of service or possibly execute arbitrary code via vectors involving num_to_read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-21T14:00:00.000Z
CVE-2016-6355 
Memory leak in Cisco IOS XR 5.1.x through 5.1.3, 5.2.x through 5.2.5, and 5.3.x through 5.3.2 on ASR 9001 devices allows remote attackers to cause a denial of service (control-plane protocol outage) via crafted fragmented packets, aka Bug ID CSCux26791.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-23T01:00:00.000Z
CVE-2016-6356 
A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to cause an affected device to stop scanning and forwarding email messages due to a denial of service (DoS) condition. Affected Products: This vulnerability affects all releases prior to the first fixed release of Cisco AsyncOS Software for Cisco Email Security Appliances, both virtual and hardware appliances, if the software is configured to apply a message filter or content filter to incoming email attachments. The vulnerability is not limited to any specific rules or actions for a message filter or content filter. More Information: CSCuz63143. Known Affected Releases: 8.5.7-042 9.7.0-125. Known Fixed Releases: 10.0.0-125 9.1.1-038 9.7.2-047.
Problem types: description: unspecified
Affected products: vendor: n/a
product: Cisco AsyncOS through 9.7.0-125
Published: 2016-10-28T10:00:00.000Z
CVE-2016-6357 
A vulnerability in the configured security policies, including drop email filtering, in Cisco AsyncOS for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass a configured drop filter by using an email with a corrupted attachment. More Information: CSCuz01651. Known Affected Releases: 10.0.9-015 9.7.1-066 9.9.6-026.
Problem types: description: unspecified
Affected products: vendor: n/a
product: Cisco AsyncOS through 9.9.6-026
Published: 2016-10-28T10:00:00.000Z
CVE-2016-6358 
A vulnerability in local FTP to the Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause a partial denial of service (DoS) condition when the FTP application unexpectedly quits. More Information: CSCux68539. Known Affected Releases: 9.1.0-032 9.7.1-000. Known Fixed Releases: 9.1.1-038.
Problem types: description: unspecified
Affected products: vendor: n/a
product: Cisco Email Security Appliance (ESA) through 9.7.1-000
Published: 2016-10-28T10:00:00.000Z
CVE-2016-6359 
Cross-site scripting (XSS) vulnerability in Cisco Transport Gateway Installation Software 4.1(4.0) on Smart Call Home Transport Gateway devices allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug IDs CSCva40650 and CSCva40817.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-22T10:00:00.000Z
CVE-2016-6360 
A vulnerability in Advanced Malware Protection (AMP) for Cisco Email Security Appliances (ESA) and Web Security Appliances (WSA) could allow an unauthenticated, remote attacker to cause a partial denial of service (DoS) condition due to the AMP process unexpectedly restarting. Affected Products: Cisco AsyncOS Software for Email Security Appliances (ESA) versions 9.5 and later up to the first fixed release, Cisco AsyncOS Software for Web Security Appliances (WSA) all versions prior to the first fixed release. More Information: CSCux56406, CSCux59928. Known Affected Releases: 9.6.0-051 9.7.0-125 8.8.0-085 9.5.0-444 WSA10.0.0-000. Known Fixed Releases: 9.7.1-066 WSA10.0.0-233.
Problem types: description: unspecified
Affected products: vendor: n/a
product: Cisco AsyncOS through WSA10.0.0-000
Published: 2016-10-28T10:00:00.000Z
CVE-2016-6361 
The Aggregated MAC Protocol Data Unit (AMPDU) implementation on Cisco Aironet 1800, 2800, and 3800 devices with software before 8.2.121.0 and 8.3.x before 8.3.102.0 allows remote attackers to cause a denial of service (device reload) via a crafted AMPDU header, aka Bug ID CSCuz56288.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-22T10:00:00.000Z
CVE-2016-6362 
Cisco Aironet 1800, 2800, and 3800 devices with software before 8.2.110.0, 8.2.12x before 8.2.121.0, and 8.3.x before 8.3.102.0 allow local users to gain privileges via crafted CLI parameters, aka Bug ID CSCuz24725.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-22T10:00:00.000Z
CVE-2016-6363 
The rate-limit feature in the 802.11 protocol implementation on Cisco Aironet 1800, 2800, and 3800 devices with software before 8.2.121.0 and 8.3.x before 8.3.102.0 allows remote attackers to cause a denial of service (device reload) via crafted 802.11 frames, aka Bug ID CSCva06192.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-22T10:00:00.000Z
CVE-2016-6364 
The User Data Services (UDS) API implementation in Cisco Unified Communications Manager 11.5 allows remote attackers to bypass intended access restrictions and obtain sensitive information via unspecified API calls, aka Bug ID CSCux67855.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-23T01:00:00.000Z
CVE-2016-6365 
Cross-site scripting (XSS) vulnerability in Cisco Firepower Management Center 4.10.3, 5.2.0, 5.3.0, 5.3.0.2, 5.3.1, and 5.4.0 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug IDs CSCur25508 and CSCur25518.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-23T01:00:00.000Z
CVE-2016-6366 
Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Services Module, ASA 1000V, ASAv, Firepower 9300 ASA Security Module, PIX, and FWSM devices allows remote authenticated users to execute arbitrary code via crafted IPv4 SNMP packets, aka Bug ID CSCva92151 or EXTRABACON.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-18T18:00:00.000Z
CVE-2016-6367 
Cisco Adaptive Security Appliance (ASA) Software before 8.4(1) on ASA 5500, ASA 5500-X, PIX, and FWSM devices allows local users to gain privileges via invalid CLI commands, aka Bug ID CSCtu74257 or EPICBANANA.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-18T18:00:00.000Z
CVE-2016-6368 
A vulnerability in the detection engine parsing of Pragmatic General Multicast (PGM) protocol packets for Cisco Firepower System Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition due to the Snort process unexpectedly restarting. The vulnerability is due to improper input validation of the fields in the PGM protocol packet. An attacker could exploit this vulnerability by sending a crafted PGM packet to the detection engine on the targeted device. An exploit could allow the attacker to cause a DoS condition if the Snort process restarts and traffic inspection is bypassed or traffic is dropped. This vulnerability affects Cisco Firepower System Software that has one or more file action policies configured and is running on any of the following Cisco products: Adaptive Security Appliance (ASA) 5500-X Series with FirePOWER Services; Adaptive Security Appliance (ASA) 5500-X Series Next-Generation Firewalls; Advanced Malware Protection (AMP) for Networks, 7000 Series Appliances; Advanced Malware Protection (AMP) for Networks, 8000 Series Appliances; Firepower 4100 Series Security Appliances; FirePOWER 7000 Series Appliances; FirePOWER 8000 Series Appliances; Firepower 9300 Series Security Appliances; FirePOWER Threat Defense for Integrated Services Routers (ISRs); Industrial Security Appliance 3000; Sourcefire 3D System Appliances; Virtual Next-Generation Intrusion Prevention System (NGIPSv) for VMware. Fixed versions: 5.4.0.10 5.4.1.9 6.0.1.3 6.1.0 6.2.0. Cisco Bug IDs: CSCuz00876.
Problem types: cwe_id: CWE-399
description: CWE-399
Affected products: vendor: n/a
product: Cisco Firepower Detection Engine
Published: 2017-04-20T22:00:00.000Z
CVE-2016-6369 
Cisco AnyConnect Secure Mobility Client before 4.2.05015 and 4.3.x before 4.3.02039 mishandles pathnames, which allows local users to gain privileges via a crafted INF file, aka Bug ID CSCuz92464.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-25T21:00:00.000Z
CVE-2016-6370 
Directory traversal vulnerability in the web interface in Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) 10.6(3) and earlier allows remote authenticated users to read arbitrary files via a crafted pathname in an HTTP request, aka Bug ID CSCuz27255.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-12T10:00:00.000Z
CVE-2016-6371 
Directory traversal vulnerability in the web interface in Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) 10.6(3) and earlier allows remote attackers to write to arbitrary files via a crafted URL, aka Bug ID CSCuz64717.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-12T10:00:00.000Z
CVE-2016-6372 
A vulnerability in the email message and content filtering for malformed Multipurpose Internet Mail Extensions (MIME) headers of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) and Web Security Appliances (WSA) could allow an unauthenticated, remote attacker to bypass the filtering functionality of the targeted device. Emails that should have been quarantined could instead be processed. Affected Products: This vulnerability affects all releases prior to the first fixed release of Cisco AsyncOS Software for Cisco ESA and Cisco WSA on both virtual and hardware appliances that are configured with message or content filters to scan incoming email attachments. More Information: CSCuy54740, CSCuy75174. Known Affected Releases: 9.7.1-066 9.5.0-575 WSA10.0.0-000. Known Fixed Releases: 10.0.0-125 9.1.1-038 9.7.2-047.
Problem types: description: unspecified
Affected products: vendor: n/a
product: Cisco AsyncOS through WSA10.0.0-000
Published: 2016-10-28T10:00:00.000Z
CVE-2016-6373 
The web-based GUI in Cisco Cloud Services Platform (CSP) 2100 2.0 allows remote authenticated administrators to execute arbitrary OS commands as root via crafted platform commands, aka Bug ID CSCva00541.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-22T22:00:00.000Z
CVE-2016-6374 
Cisco Cloud Services Platform (CSP) 2100 2.0 allows remote attackers to execute arbitrary code via a crafted dnslookup command in an HTTP request, aka Bug ID CSCuz89093.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-22T22:00:00.000Z
CVE-2016-6375 
Cisco Wireless LAN Controller (WLC) devices before 8.0.140.0, 8.1.x and 8.2.x before 8.2.121.0, and 8.3.x before 8.3.102.0 allow remote attackers to cause a denial of service (device reload) by sending crafted Inter-Access Point Protocol (IAPP) packets and then sending a traffic stream metrics (TSM) information request over SNMP, aka Bug ID CSCuz40221.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-12T01:00:00.000Z
CVE-2016-6376 
The Adaptive Wireless Intrusion Prevention System (wIPS) feature on Cisco Wireless LAN Controller (WLC) devices before 8.0.140.0, 8.1.x and 8.2.x before 8.2.121.0, and 8.3.x before 8.3.102.0 allows remote attackers to cause a denial of service (device restart) via a malformed wIPS packet, aka Bug ID CSCuz40263.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-02T00:00:00.000Z
CVE-2016-6377 
Media Origination System Suite Software 2.6 and earlier in Cisco Virtual Media Packager (VMP) allows remote attackers to bypass authentication and make arbitrary Platform and Applications Manager (PAM) API calls via unspecified vectors, aka Bug ID CSCuz52110.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-03T20:00:00.000Z
CVE-2016-6378 
Cisco IOS XE 3.1 through 3.17 and 16.1 through 16.2 allows remote attackers to cause a denial of service (device reload) via crafted ICMP packets that require NAT, aka Bug ID CSCuw85853.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-05T20:00:00.000Z
CVE-2016-6379 
Cisco IOS 12.2 and IOS XE 3.14 through 3.16 and 16.1 allow remote attackers to cause a denial of service (device reload) via crafted IP Detail Record (IPDR) packets, aka Bug ID CSCuu35089.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-05T20:00:00.000Z
CVE-2016-6380 
The DNS forwarder in Cisco IOS 12.0 through 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.15 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (data corruption or device reload) via a crafted DNS response, aka Bug ID CSCup90532.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-05T20:00:00.000Z
CVE-2016-6381 
Cisco IOS 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.18 and 16.1 allow remote attackers to cause a denial of service (memory consumption or device reload) via fragmented IKEv1 packets, aka Bug ID CSCuy47382.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-05T17:00:00.000Z
CVE-2016-6382 
Cisco IOS 15.2 through 15.6 and IOS XE 3.6 through 3.17 and 16.1 allow remote attackers to cause a denial of service (device restart) via a malformed IPv6 Protocol Independent Multicast (PIM) register packet, aka Bug ID CSCuy16399.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-05T17:00:00.000Z
CVE-2016-6384 
Cisco IOS 12.2 through 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.17 and 16.2 allow remote attackers to cause a denial of service (device reload) via crafted fields in an H.323 message, aka Bug ID CSCux04257.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-05T17:00:00.000Z
CVE-2016-6385 
Memory leak in the Smart Install client implementation in Cisco IOS 12.2 and 15.0 through 15.2 and IOS XE 3.2 through 3.8 allows remote attackers to cause a denial of service (memory consumption) via crafted image-list parameters, aka Bug ID CSCuy82367.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-05T20:00:00.000Z
CVE-2016-6386 
Cisco IOS XE 3.1 through 3.17 and 16.1 on 64-bit platforms allows remote attackers to cause a denial of service (data-structure corruption and device reload) via fragmented IPv4 packets, aka Bug ID CSCux66005.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-05T17:00:00.000Z
CVE-2016-6391 
Cisco IOS 12.2 and 15.0 through 15.3 allows remote attackers to cause a denial of service (traffic-processing outage) via a crafted series of Common Industrial Protocol (CIP) requests, aka Bug ID CSCur69036.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-05T20:00:00.000Z
CVE-2016-6392 
Cisco IOS 12.2 and 15.0 through 15.3 and IOS XE 3.1 through 3.9 allow remote attackers to cause a denial of service (device restart) via a crafted IPv4 Multicast Source Discovery Protocol (MSDP) Source-Active (SA) message, aka Bug ID CSCud36767.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-05T17:00:00.000Z
CVE-2016-6393 
The AAA service in Cisco IOS 12.0 through 12.4 and 15.0 through 15.6 and IOS XE 2.1 through 3.18 and 16.2 allows remote attackers to cause a denial of service (device reload) via a failed SSH connection attempt that is mishandled during generation of an error-log message, aka Bug ID CSCuy87667.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-05T20:00:00.000Z
CVE-2016-6394 
Session fixation vulnerability in Cisco Firepower Management Center and Cisco FireSIGHT System Software through 6.1.0 allows remote attackers to hijack web sessions via a session identifier, aka Bug ID CSCuz80503.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-12T10:00:00.000Z
CVE-2016-6395 
Cross-site scripting (XSS) vulnerability in the web-based management interface in Cisco Firepower Management Center before 6.1 and FireSIGHT System Software before 6.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuz58658.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-12T10:00:00.000Z
CVE-2016-6396 
Cisco Firepower Management Center before 6.1 and FireSIGHT System Software before 6.1, when certain malware blocking options are enabled, allow remote attackers to bypass malware detection via crafted fields in HTTP headers, aka Bug ID CSCuz44482.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-12T10:00:00.000Z
CVE-2016-6397 
A vulnerability in the interdevice communications interface of the Cisco IP Interoperability and Collaboration System (IPICS) Universal Media Services (UMS) could allow an unauthenticated, remote attacker to modify configuration parameters of the UMS and cause the system to become unavailable. Affected Products: This vulnerability affects Cisco IPICS releases 4.8(1) to 4.10(1). More Information: CSCva46644. Known Affected Releases: 4.10(1) 4.8(1) 4.8(2) 4.9(1) 4.9(2).
Problem types: description: unspecified
Affected products: vendor: n/a
product: Cisco IPICS 4.8(1) to 4.10(1)
Published: 2016-10-28T10:00:00.000Z
CVE-2016-6398 
The PPTP server in Cisco IOS 15.5(3)M does not properly initialize packet buffers, which allows remote attackers to obtain sensitive information from earlier network communication by reading packet data, aka Bug ID CSCvb16274.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-12T10:00:00.000Z
CVE-2016-6399 
Cisco ACE30 Application Control Engine Module through A5 3.3 and ACE 4700 Application Control Engine appliances through A5 3.3 allow remote attackers to cause a denial of service (device reload) via crafted (1) SSL or (2) TLS packets, aka Bug ID CSCvb16317.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-12T10:00:00.000Z
CVE-2016-6401 
Cisco Carrier Routing System (CRS) 5.1 and 5.1.4, as used in CRS Carrier Grade Services for CRS-1 and CRS-3 devices, allows remote attackers to cause a denial of service (line-card reload) via crafted IPv6-over-MPLS packets, aka Bug ID CSCva32494.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-17T01:00:00.000Z
CVE-2016-6402 
UCS Manager and UCS 6200 Fabric Interconnects in Cisco Unified Computing System (UCS) through 3.0(2d) allow local users to obtain OS root access via crafted CLI input, aka Bug ID CSCuz91263.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-18T22:00:00.000Z
CVE-2016-6403 
The Data in Motion (DMo) application in Cisco IOS 15.6(1)T and IOS XE, when the IOx feature set is enabled, allows remote attackers to cause a denial of service via a crafted packet, aka Bug IDs CSCuy82904, CSCuy82909, and CSCuy82912.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-18T22:00:00.000Z
CVE-2016-6404 
Cross-site scripting (XSS) vulnerability in the web framework in Cisco IOx Local Manager in IOS 15.5(2)T and IOS XE allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuy19854.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-18T22:00:00.000Z
CVE-2016-6405 
Cisco Fog Director 1.0(0) for IOx allows remote authenticated users to bypass intended access restrictions and write to arbitrary files via the Cartridge interface, aka Bug ID CSCuz89368.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-18T22:00:00.000Z