Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2015-1038
p7zip 9.20.1 allows remote attackers to write to arbitrary files via a symlink attack in an archive.
Affected Products: n/a
References: [{'name': 'openSUSE-SU-2015:1162', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2015-07/msg00000.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774660'}, {'name': 'FEDORA-2015-d5cc306730', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174245.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1179505'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html'}, {'name': '71890', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/71890'}, {'name': 'DSA-3289', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2015/dsa-3289'}, {'name': '[oss-security] 20150111 Re: CVE request for directory traversal flaw in p7zip', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2015/01/11/2'}, {'name': 'FEDORA-2015-fadaa9953e', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-December/173245.html'}, {'name': 'p7zip-cve20151038-symlink(99970)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/99970'}]
CVE State: PUBLISHED
Explain CVE-2015-1039
Cross-site scripting (XSS) vulnerability in user/login.phtml in ZF-Commons ZfcUser before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the redirect parameter.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/ZF-Commons/ZfcUser/issues/550'}, {'name': '[oss-security] 20150111 Re: CVE request', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2015/01/11/4'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/ZF-Commons/ZfcUser/commit/baf0e460'}, {'name': '71931', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/71931'}]
CVE State: PUBLISHED
Explain CVE-2015-1040
Multiple cross-site scripting (XSS) vulnerabilities in the administrative backend in BEdita 3.4.0 allow remote authenticated users to inject arbitrary web script or HTML via the (1) lrealname field in the editProfile form to index.php/home/profile; the (2) data[title] or (3) data[description] field in the addQuickItem form to index.php; the (4) "note text" field in the saveNote form to index.php/areas; or the (5) titleBEObject or (6) tagsArea field in the updateForm form to index.php/documents/view.
Affected Products: n/a
References: [{'name': '20150108 Multiple persistent XSS vulnerabilites in CMS BEdita v. 3.4.0', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2015/Jan/16'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/129865/CMS-BEdita-3.4.0-Cross-Site-Scripting.html'}, {'name': '[oss-security] 20150111 Re: CVE Request -- CMS BEdita v. 3.4.0 -- Multiple stored XSS vulnerabilities', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://seclists.org/oss-sec/2015/q1/115'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/bedita/bedita/issues/566'}, {'tags': ['x_refsource_MISC'], 'url': 'http://sroesemann.blogspot.de/2014/12/sroeadv-2014-10.html'}, {'name': '71949', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/71949'}]
CVE State: PUBLISHED
Explain CVE-2015-1041
Cross-site scripting (XSS) vulnerability in e107_admin/filemanager.php in e107 1.0.4 allows remote attackers to inject arbitrary web script or HTML via the e107_files/ file path in the QUERY_STRING.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://sroesemann.blogspot.de/2015/01/report-for-advisory-sroeadv-2014-05.html'}, {'name': 'e107-filemanager-xss(99898)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/99898'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/e107inc/e107v1/issues/2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/129872/CMS-e107-1.0.4-Cross-Site-Scripting.html'}, {'name': '[oss-security] 20150111 Re: CVE Request -- CMS e107 v.1.0.4 -- Reflecting  XSS vulnerability in filemanager functionality', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2015/01/11/6'}, {'name': '71977', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/71977'}, {'tags': ['x_refsource_MISC'], 'url': 'http://sroesemann.blogspot.de/2014/12/sroeadv-2014-05.html'}, {'name': '20150109 Reflecting XSS vulnerability in CMS e107 v. 1.0.4', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2015/Jan/18'}]
CVE State: PUBLISHED
Explain CVE-2015-1042
The string_sanitize_url function in core/string_api.php in MantisBT 1.2.0a3 through 1.2.18 uses an incorrect regular expression, which allows remote attackers to conduct open redirect and phishing attacks via a URL with a ":/" (colon slash) separator in the return parameter to login_page.php, a different vulnerability than CVE-2014-6316.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.mantisbt.org/bugs/view.php?id=17997'}, {'name': '1031633', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031633'}, {'name': '[oss-security] 20150110 Re: CVE-2014-6316: URL redirection issue in MantisBT', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2015/01/10/5'}, {'name': '[oss-security] 20150111 Re: Re: CVE-2014-6316: URL redirection issue in MantisBT', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2015/01/11/8'}, {'name': "20150128 CVE-2015-1042 - Mantis BugTracker 1.2.19 - URL Redirection to Untrusted Site ('Open Redirect')", 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2015/Jan/110'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/130142/Mantis-BugTracker-1.2.19-Open-Redirect.html'}]
CVE State: PUBLISHED
Explain CVE-2015-1043
The Host Guest File System (HGFS) in VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.5, and VMware Fusion 6.x before 6.0.5 and 7.x before 7.0.1 allows guest OS users to cause a guest OS denial of service via unspecified vectors.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vmware.com/security/advisories/VMSA-2015-0001.html'}, {'name': '1031644', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031644'}, {'name': 'vmware-cve20151043-dos(100934)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/100934'}, {'name': '62551', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62551'}, {'name': '72337', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72337'}]
CVE State: PUBLISHED
Explain CVE-2015-1044
vmware-authd (aka the Authorization process) in VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.5, and VMware ESXi 5.0 through 5.5 allows attackers to cause a host OS denial of service via unspecified vectors.
Affected Products: n/a
References: [{'name': '1031645', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031645'}, {'name': '72336', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72336'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vmware.com/security/advisories/VMSA-2015-0001.html'}, {'name': '62569', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62569'}, {'name': 'vmware-cve20151044-dos(100935)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/100935'}, {'name': '1031646', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031646'}, {'name': '62551', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62551'}, {'name': '62669', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62669'}]
CVE State: PUBLISHED
Explain CVE-2015-1047
vpxd in VMware vCenter Server 5.0 before u3e, 5.1 before u3, and 5.5 before u2 allows remote attackers to cause a denial of service via a long heartbeat message.
Affected Products: n/a
References: [{'name': '76932', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/76932'}, {'name': '1033720', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1033720'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vmware.com/security/advisories/VMSA-2015-0007.html'}]
CVE State: PUBLISHED
Explain CVE-2015-1048
Open redirect vulnerability in the integrated web server on Siemens SIMATIC S7-1200 CPU devices with firmware before 4.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-597212.pdf'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://cert-portal.siemens.com/productcert/pdf/ssa-597212.pdf'}]
CVE State: PUBLISHED
Explain CVE-2015-1049
The web server on Siemens SCALANCE X-200IRT switches with firmware before 5.2.0 allows remote attackers to hijack sessions via unspecified vectors.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-954136.pdf'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://cert-portal.siemens.com/productcert/pdf/ssa-954136.pdf'}]
CVE State: PUBLISHED
Explain CVE-2015-1050
Cross-site scripting (XSS) vulnerability in F5 BIG-IP Application Security Manager (ASM) before 11.6 allows remote attackers to inject arbitrary web script or HTML via the Response Body field when creating a new user account.
Affected Products: n/a
References: [{'name': '20150113 [Corrected] Stored XSS Vulnerability in F5 BIG-IP Application Security Manager', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/534459/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/129911/F5-BIG-IP-Application-Security-Manager-ASM-XSS.html'}, {'name': 'f5bigip-responsebody-xss(99907)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/99907'}, {'name': '20150113 [Corrected] Stored XSS Vulnerability in F5 BIG-IP Application Security Manager', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2015/Jan/43'}, {'name': '1031551', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031551'}]
CVE State: PUBLISHED
Explain CVE-2015-1051
Open redirect vulnerability in the Context UI module in the Context module 7.x-3.x before 7.x-3.6 for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the destination parameter.
Affected Products: n/a
References: [{'name': 'FEDORA-2015-0726', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148800.html'}, {'name': '71925', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/71925'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.drupal.org/node/2402779'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.drupal.org/node/2403351'}, {'name': 'FEDORA-2015-0717', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148782.html'}]
CVE State: PUBLISHED
Explain CVE-2015-1052
Cross-site scripting (XSS) vulnerability in the poll archive in PHPKIT 1.6.6 (Build 160014) allows remote attackers to inject arbitrary web script or HTML via the result parameter to upload_files/pk/include.php.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://sroesemann.blogspot.de/2014/12/sroeadv-2014-07.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://sroesemann.blogspot.de/2015/01/report-for-advisory-sroeadv-2014-07.html'}, {'name': '72001', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72001'}, {'name': '20150112 Reflecting XSS vulnerability in CMS PHPKit WCMS v. 1.6.6', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2015/Jan/25'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/129917/CMS-PHPKit-WCMS-1.6.6-Cross-Site-Scripting.html'}]
CVE State: PUBLISHED
Explain CVE-2015-1053
Cross-site scripting (XSS) vulnerability in the administrative backend in Croogo before 2.2.1 allows remote attackers to inject arbitrary web script or HTML via the path parameter to admin/file_manager/file_manager/editfile.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/129916/CMS-Croogo-2.2.0-Cross-Site-Scripting.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://sroesemann.blogspot.de/2015/01/report-for-advisory-sroeadv-2015-02.html'}, {'name': 'croogo-filemanagereditfile-xss(99890)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/99890'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/croogo/croogo/issues/599'}, {'name': '20150112 Reflecting XSS vulnerability in CMS Croogo v.2.2.0', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2015/Jan/24'}, {'name': '71999', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/71999'}, {'tags': ['x_refsource_MISC'], 'url': 'http://sroesemann.blogspot.de/2015/01/sroeadv-2015-02.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://blog.croogo.org/blog/croogo-221-released'}]
CVE State: PUBLISHED
Explain CVE-2015-1054
Cross-site scripting (XSS) vulnerability in the Games feature in Crea8Social 2.0 allows remote authenticated users to inject arbitrary web script or HTML via the Game Content field in Add Game.
Affected Products: n/a
References: [{'name': 'crea8social-game-xss(99615)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/99615'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://codecanyon.net/item/crea8social-php-social-networking-platform-v31/9211270/support'}, {'name': '35691', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/35691'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://codecanyon.net/item/crea8social-php-social-networking-platform-v31/9211270'}, {'name': '116732', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/show/osvdb/116732'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/129816/Crea8Social-2.0-Cross-Site-Scripting.html'}]
CVE State: PUBLISHED
Explain CVE-2015-1055
SQL injection vulnerability in the Photo Gallery plugin 1.2.7 for WordPress allows remote attackers to execute arbitrary SQL commands via the order_by parameter in a GalleryBox action to wp-admin/admin-ajax.php.
Affected Products: n/a
References: [{'name': '72015', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72015'}, {'name': '20150112 Wordpress Photo Gallery 1.2.7 unauthenticated SQL injection', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2015/Jan/36'}]
CVE State: PUBLISHED
Explain CVE-2015-1056
Cross-site scripting (XSS) vulnerability in Brother MFC-J4410DW printer with firmware before L allows remote attackers to inject arbitrary web script or HTML via the url parameter to general/status.html and possibly other pages.
Affected Products: n/a
References: [{'name': 'mfcj4410dw-url-xss(99906)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/99906'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/129841/Brother-MFC-J4410DW-Cross-Site-Scripting.html'}, {'name': '20150107 Brother MFC Administration Reflected Cross-Site Scripting', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/534398/100/0/threaded'}, {'name': '71911', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/71911'}]
CVE State: PUBLISHED
Explain CVE-2015-1057
Cross-site scripting (XSS) vulnerability in usersettings.php in e107 2.0.0 allows remote attackers to inject arbitrary web script or HTML via the "Real Name" value.
Affected Products: n/a
References: [{'name': '116692', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/show/osvdb/116692'}, {'name': 'bootstrapcms-usersettings-xss(99627)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/99627'}, {'name': '35679', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/35679'}]
CVE State: PUBLISHED
Explain CVE-2015-1058
Multiple cross-site scripting (XSS) vulnerabilities in AdaptCMS 3.0.3 allow remote attackers to inject arbitrary web script or HTML via the (1) data[Category][title] parameter to admin/categories/add, (2) data[Field][title] parameter to admin/fields/ajax_fields/, (3) name property in a basicInfo JSON object to admin/tools/create_theme, (4) data[Link][link_title] parameter to admin/links/links/add, or (5) data[ForumTopic][subject] parameter to forums/off-topic/new.
Affected Products: n/a
References: [{'name': '116718', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/show/osvdb/116718'}, {'name': '116719', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/show/osvdb/116719'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/129812/AdaptCMS-3.0.3-Cross-Site-Scripting.html'}, {'name': 'adaptcms-multiple-data-xss(99617)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/99617'}, {'name': '116716', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/show/osvdb/116716'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zeroscience.mk/en/vulnerabilities/ZSL-2015-5218.php'}, {'name': '116720', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/show/osvdb/116720'}, {'name': '116717', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/show/osvdb/116717'}, {'name': '35710', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/35710'}]
CVE State: PUBLISHED
Explain CVE-2015-1059
Unrestricted file upload vulnerability in admin/files/add in AdaptCMS 3.0.3 allows remote authenticated users to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a direct request to the file in /app/webroot/uploads.
Affected Products: n/a
References: [{'name': '116722', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/show/osvdb/116722'}, {'tags': ['x_refsource_MISC'], 'url': 'http://zeroscience.mk/en/vulnerabilities/ZSL-2015-5220.php'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/129814/AdaptCMS-3.0.3-Remote-Command-Execution.html'}, {'name': 'adaptcms-appwebrootuploads-file-upload(99616)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/99616'}, {'name': '35710', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/35710'}]
CVE State: PUBLISHED
Explain CVE-2015-1060
Open redirect vulnerability in lib/Cake/Controller/Controller.php in AdaptCMS 3.0.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the HTTP Referer header.
Affected Products: n/a
References: [{'name': 'adaptcms-referer-open-redirect(99618)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/99618'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zeroscience.mk/en/vulnerabilities/ZSL-2015-5219.php'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/129813/AdaptCMS-3.0.3-HTTP-Referer-Header-Open-Redirect.html'}, {'name': '116721', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/show/osvdb/116721'}, {'name': '35710', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/35710'}]
CVE State: PUBLISHED
Explain CVE-2015-1061
IOSurface in Apple iOS before 8.2, Apple OS X through 10.10.2, and Apple TV before 7.1 allows attackers to execute arbitrary code in a privileged context via a crafted app that leverages "type confusion" during serialized-object handling.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2015-03-09-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Mar/msg00001.html'}, {'name': 'APPLE-SA-2015-03-09-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Mar/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204426'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204413'}, {'name': 'APPLE-SA-2015-03-09-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Mar/msg00000.html'}, {'name': '1031864', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031864'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/kb/HT204563'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204423'}, {'name': '73004', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/73004'}]
CVE State: PUBLISHED
Explain CVE-2015-1062
MobileStorageMounter in Apple iOS before 8.2 and Apple TV before 7.1 does not delete invalid disk-image folders, which allows attackers to create folders in arbitrary filesystem locations via a crafted app.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2015-03-09-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Mar/msg00001.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204426'}, {'name': 'APPLE-SA-2015-03-09-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Mar/msg00000.html'}, {'name': '1031864', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031864'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204423'}]
CVE State: PUBLISHED
Explain CVE-2015-1063
CoreTelephony in Apple iOS before 8.2 allows remote attackers to cause a denial of service (NULL pointer dereference and device restart) via a Class 0 SMS message.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2015-03-09-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Mar/msg00000.html'}, {'name': '1031864', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031864'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204423'}]
CVE State: PUBLISHED
Explain CVE-2015-1064
Springboard in Apple iOS before 8.2 allows physically proximate attackers to bypass an intended activation requirement and read the home screen by leveraging an application crash during the activation process.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2015-03-09-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Mar/msg00000.html'}, {'name': '1031864', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031864'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204423'}]
CVE State: PUBLISHED
Explain CVE-2015-1065
Multiple buffer overflows in iCloud Keychain in Apple iOS before 8.2 and Apple OS X through 10.10.2 allow man-in-the-middle attackers to execute arbitrary code by modifying the client-server data stream during keychain recovery.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2015-03-09-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Mar/msg00002.html'}, {'name': '73007', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/73007'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204413'}, {'name': 'APPLE-SA-2015-03-09-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Mar/msg00000.html'}, {'name': '1031864', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031864'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/kb/HT204563'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204423'}]
CVE State: PUBLISHED
Explain CVE-2015-1066
Off-by-one error in IOAcceleratorFamily in Apple OS X through 10.10.2 allows attackers to execute arbitrary code in a privileged context via a crafted app.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2015-03-09-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Mar/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204413'}, {'name': '1031869', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031869'}]
CVE State: PUBLISHED
Explain CVE-2015-1067
Secure Transport in Apple iOS before 8.2, Apple OS X through 10.10.2, and Apple TV before 7.1 does not properly restrict TLS state transitions, which makes it easier for remote attackers to conduct cipher-downgrade attacks to EXPORT_RSA ciphers via crafted TLS traffic, related to the "FREAK" issue, a different vulnerability than CVE-2015-0204 and CVE-2015-1637.
Affected Products: n/a
References: [{'name': '73009', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/73009'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204659'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/kb/HT204870'}, {'name': 'APPLE-SA-2015-03-09-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Mar/msg00001.html'}, {'name': '1031829', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031829'}, {'name': '1031830', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031830'}, {'name': 'APPLE-SA-2015-03-09-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Mar/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204426'}, {'tags': ['x_refsource_MISC'], 'url': 'https://freakattack.com/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204413'}, {'name': 'APPLE-SA-2015-04-08-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html'}, {'name': 'APPLE-SA-2015-03-09-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Mar/msg00000.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204423'}]
CVE State: PUBLISHED
Explain CVE-2015-1068
WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2015-03-17-1.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2015-04-08-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html'}, {'name': 'APPLE-SA-2015-06-30-6', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Jun/msg00006.html'}, {'name': 'APPLE-SA-2015-03-17-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Mar/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/kb/HT204949'}, {'name': '1031936', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031936'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204662'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204560'}, {'name': 'APPLE-SA-2015-04-08-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204661'}]
CVE State: PUBLISHED
Explain CVE-2015-1069
WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2015-03-17-1.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204659'}, {'name': 'APPLE-SA-2015-04-08-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html'}, {'name': 'APPLE-SA-2015-06-30-6', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Jun/msg00006.html'}, {'name': 'APPLE-SA-2015-03-17-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Mar/msg00004.html'}, {'name': 'APPLE-SA-2015-04-08-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/kb/HT204949'}, {'name': '1031936', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031936'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204662'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204560'}, {'name': 'APPLE-SA-2015-04-08-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204661'}]
CVE State: PUBLISHED
Explain CVE-2015-1070
WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2015-03-17-1.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2015-04-08-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html'}, {'name': 'APPLE-SA-2015-06-30-6', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Jun/msg00006.html'}, {'name': 'APPLE-SA-2015-03-17-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Mar/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/kb/HT204949'}, {'name': '1031936', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031936'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204662'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204560'}, {'name': 'APPLE-SA-2015-04-08-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204661'}]
CVE State: PUBLISHED
Explain CVE-2015-1071
WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2015-03-17-1.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2015-04-08-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html'}, {'name': 'APPLE-SA-2015-06-30-6', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Jun/msg00006.html'}, {'name': 'APPLE-SA-2015-03-17-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Mar/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/kb/HT204949'}, {'name': '1031936', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031936'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204662'}, {'name': 'openSUSE-SU-2016:0915', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2016-03/msg00132.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204560'}, {'name': 'APPLE-SA-2015-04-08-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204661'}, {'name': 'USN-2937-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2937-1'}]
CVE State: PUBLISHED
Explain CVE-2015-1072
WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2015-03-17-1.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2015-04-08-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html'}, {'name': 'APPLE-SA-2015-06-30-6', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Jun/msg00006.html'}, {'name': 'APPLE-SA-2015-03-17-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Mar/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/kb/HT204949'}, {'name': '1031936', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031936'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204662'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204560'}, {'name': 'APPLE-SA-2015-04-08-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204661'}]
CVE State: PUBLISHED
Explain CVE-2015-1073
WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2015-03-17-1.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2015-04-08-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html'}, {'name': 'APPLE-SA-2015-06-30-6', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Jun/msg00006.html'}, {'name': 'APPLE-SA-2015-03-17-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Mar/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/kb/HT204949'}, {'name': '1031936', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031936'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204662'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204560'}, {'name': 'APPLE-SA-2015-04-08-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204661'}]
CVE State: PUBLISHED
Explain CVE-2015-1074
WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2015-03-17-1.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2015-04-08-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html'}, {'name': 'APPLE-SA-2015-06-30-6', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Jun/msg00006.html'}, {'name': 'APPLE-SA-2015-03-17-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Mar/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/kb/HT204949'}, {'name': '1031936', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031936'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204662'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204560'}, {'name': 'APPLE-SA-2015-04-08-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204661'}]
CVE State: PUBLISHED
Explain CVE-2015-1075
WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2015-03-17-1.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2015-06-30-6', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Jun/msg00006.html'}, {'name': 'APPLE-SA-2015-03-17-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Mar/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/kb/HT204949'}, {'name': '1031936', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031936'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204560'}]
CVE State: PUBLISHED
Explain CVE-2015-1076
WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2015-03-17-1.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2015-04-08-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html'}, {'name': 'APPLE-SA-2015-06-30-6', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Jun/msg00006.html'}, {'name': 'APPLE-SA-2015-03-17-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Mar/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/kb/HT204949'}, {'name': '1031936', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031936'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204662'}, {'name': 'openSUSE-SU-2016:0915', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2016-03/msg00132.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204560'}, {'name': 'APPLE-SA-2015-04-08-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204661'}, {'name': 'USN-2937-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2937-1'}]
CVE State: PUBLISHED
Explain CVE-2015-1077
WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2015-03-17-1.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2015-04-08-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html'}, {'name': 'APPLE-SA-2015-06-30-6', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Jun/msg00006.html'}, {'name': 'APPLE-SA-2015-03-17-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Mar/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/kb/HT204949'}, {'name': '1031936', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031936'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204662'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204560'}, {'name': 'APPLE-SA-2015-04-08-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204661'}]
CVE State: PUBLISHED
Explain CVE-2015-1078
WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2015-03-17-1.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2015-04-08-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html'}, {'name': 'APPLE-SA-2015-06-30-6', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Jun/msg00006.html'}, {'name': 'APPLE-SA-2015-03-17-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Mar/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/kb/HT204949'}, {'name': '1031936', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031936'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204662'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204560'}, {'name': 'APPLE-SA-2015-04-08-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204661'}]
CVE State: PUBLISHED
Explain CVE-2015-1079
WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2015-03-17-1.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2015-04-08-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html'}, {'name': 'APPLE-SA-2015-06-30-6', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Jun/msg00006.html'}, {'name': 'APPLE-SA-2015-03-17-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Mar/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/kb/HT204949'}, {'name': '1031936', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031936'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204662'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204560'}, {'name': 'APPLE-SA-2015-04-08-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204661'}]
CVE State: PUBLISHED
Explain CVE-2015-1080
WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2015-03-17-1.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2015-04-08-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html'}, {'name': 'APPLE-SA-2015-06-30-6', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Jun/msg00006.html'}, {'name': 'APPLE-SA-2015-03-17-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Mar/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/kb/HT204949'}, {'name': '1031936', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031936'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204662'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204560'}, {'name': 'APPLE-SA-2015-04-08-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204661'}]
CVE State: PUBLISHED