cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,exploited_date,poc,trended,trended_no_1,trended_no_1_date,published,trended_score CVE-2018-0094,https://securityvulnerability.io/vulnerability/CVE-2018-0094,,"A vulnerability in IPv6 ingress packet processing for Cisco UCS Central Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition due to high CPU utilization on the targeted device. The vulnerability is due to insufficient rate limiting protection for IPv6 ingress traffic. An attacker could exploit this vulnerability by sending the affected device a high rate of IPv6 packets. Successful exploitation could allow the attacker to cause a DoS condition due to CPU and resource constraints. Cisco Bug IDs: CSCuv34544.",Cisco,Cisco Ucs Central Software,7.5,HIGH,0.0029899999499320984,false,,false,false,false,,,false,false,,2018-01-18T06:00:00.000Z,0 CVE-2017-12349,https://securityvulnerability.io/vulnerability/CVE-2017-12349,,"Multiple vulnerabilities in the web-based management interface of Cisco UCS Central Software could allow a remote attacker to conduct a cross-site scripting (XSS) attack against a user of the affected interface or hijack a valid session ID from a user of the affected interface. Cisco Bug IDs: CSCvf71978, CSCvf71986.",Cisco,Cisco Ucs Central Software,5.4,MEDIUM,0.0007800000021234155,false,,false,false,false,,,false,false,,2017-11-30T09:00:00.000Z,0 CVE-2017-12348,https://securityvulnerability.io/vulnerability/CVE-2017-12348,,"Multiple vulnerabilities in the web-based management interface of Cisco UCS Central Software could allow a remote attacker to conduct a cross-site scripting (XSS) attack against a user of the affected interface or hijack a valid session ID from a user of the affected interface. Cisco Bug IDs: CSCvf71978, CSCvf71986.",Cisco,Cisco Ucs Central Software,5.4,MEDIUM,0.0007800000021234155,false,,false,false,false,,,false,false,,2017-11-30T09:00:00.000Z,0 CVE-2017-12255,https://securityvulnerability.io/vulnerability/CVE-2017-12255,,"A vulnerability in the CLI of Cisco UCS Central Software could allow an authenticated, local attacker to gain shell access. The vulnerability is due to insufficient input validation of commands entered in the CLI, aka a Restricted Shell Break Vulnerability. An attacker could exploit this vulnerability by entering a specific command with crafted arguments. An exploit could allow the attacker to gain shell access to the underlying system. Cisco Bug IDs: CSCve70762.",Cisco,Cisco Ucs Central Software,6.7,MEDIUM,0.0004199999966658652,false,,false,false,false,,,false,false,,2017-09-21T05:00:00.000Z,0