Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
.com/HT211844 - https://support.apple.com/HT211843 - http://seclists.org/fulldisclosure/2020/Nov/19 - http://seclists.org/fulldisclosure/2020/Nov/20 - http://seclists.org/fulldisclosure/2020/Nov/22
CVE ID: CVE-2020-9977 State: PUBLISHED Published: 2020-12-08T19:28:08 Last Updated: 2024-08-04T10:50:57.246Z Vendors: Apple Products: iOS and iPadOS, macOS Problem Types: A malicious application may be able to determine a user's open tabs in Safari Description: A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.0 and iPadOS 14.0. A malicious application may be able to determine a user's open tabs in Safari. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT211850 - https://support.apple.com/en-us/HT211931 -
E Program Container: References: - https://support.apple.com/en-us/HT211850 - https://support.apple.com/en-us/HT211931 - http://seclists.org/fulldisclosure/2020/Dec/32
CVE ID: CVE-2020-9978 State: PUBLISHED Published: 2021-04-02T17:25:14 Last Updated: 2024-08-04T10:50:57.782Z Vendors: Apple Products: tvOS, watchOS, iOS and iPadOS, macOS Problem Types: An attacker in a privileged network position may be able to unexpectedly alter application state Description: This issue was addressed with improved setting propagation. This issue is fixed in macOS Big Sur 11.0.1, tvOS 14.0, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, watchOS 7.0, iOS 14.0 and iPadOS 14.0. An attacker in a privileged network position may be able to unexpectedly alter application state. Additional Analyst Notes: - CVE Program Container: References:
ion may be able to unexpectedly alter application state. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT211843 - https://support.apple.com/en-us/HT211850 - https://support.apple.com/en-us/HT211844 - https://support.apple.com/en-us/HT211931 - https://support.apple.com/en-us/HT212011
CVE ID: CVE-2020-9979 State: PUBLISHED Published: 2020-10-27T20:52:13 Last Updated: 2024-08-04T10:50:57.513Z Vendors: Apple Products: tvOS, iOS and iPadOS Problem Types: An attacker may be able to misuse a trust relationship to download malicious content Description: A trust issue was addressed by removing a legacy API. This issue is fixed in iOS 14.0 and iPadOS 14.0, tvOS 14.0. An attacker may be able to misuse a trust relationship to download malicious content. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT211843 - https://support.apple.com/en-us/HT211850 - http://seclists.org/fulldisclosure/2020/Nov/19 - http://seclists.org/fulldisclosu
s://support.apple.com/en-us/HT211850 - http://seclists.org/fulldisclosure/2020/Nov/19 - http://seclists.org/fulldisclosure/2020/Nov/20
CVE ID: CVE-2020-9980 State: PUBLISHED Published: 2020-10-22T18:06:07 Last Updated: 2024-08-04T10:50:57.376Z Vendors: Apple Products: iOS, macOS, tvOS, watchOS Problem Types: Processing a maliciously crafted font file may lead to arbitrary code execution Description: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. Processing a maliciously crafted font file may lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/kb/HT211289 - https://support.apple.com/kb/HT211288 - https://support.apple.com/kb/HT
ences: - https://support.apple.com/kb/HT211289 - https://support.apple.com/kb/HT211288 - https://support.apple.com/kb/HT211290 - https://support.apple.com/kb/HT211291
CVE ID: CVE-2020-9981 State: PUBLISHED Published: 2020-12-08T19:28:42 Last Updated: 2024-08-04T10:50:57.410Z Vendors: Apple Products: tvOS, watchOS, macOS Problem Types: Processing a maliciously crafted file may lead to arbitrary code execution Description: A use after free issue was addressed with improved memory management. This issue is fixed in watchOS 7.0, iOS 14.0 and iPadOS 14.0, iTunes for Windows 12.10.9, iCloud for Windows 11.5, tvOS 14.0, macOS Catalina 10.15.7, Security Update 2020-005 High Sierra, Security Update 2020-005 Mojave. Processing a maliciously crafted file may lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://su
d file may lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT211849 - https://support.apple.com/en-us/HT211843 - https://support.apple.com/en-us/HT211850 - https://support.apple.com/en-us/HT211844 - https://support.apple.com/en-us/HT211935 - https://support.apple.com/en-us/HT211952
CVE ID: CVE-2020-9982 State: PUBLISHED Published: 2020-10-27T20:53:09 Last Updated: 2024-08-04T10:50:57.304Z Vendors: Apple Products: Apple Music for Android Problem Types: A malicious application may be able to leak a user's credentials Description: This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in Apple Music 3.4.0 for Android. A malicious application may be able to leak a user's credentials. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT211898
CVE ID: CVE-2020-9983 State: PUBLISHED Published: 2020-10-16T16:56:13 Last Updated: 2024-08-04T10:50:57.422Z Vendors: Apple Products: Safari Problem Types: Processing maliciously crafted web content may lead to code execution Description: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Safari 14.0. Processing maliciously crafted web content may lead to code execution. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/kb/HT211843 - https://support.apple.com/kb/HT211850 - https://support.apple.com/kb/HT211844 - https://support.apple.com/HT211845 - https://support.apple.com/kb/HT211952 - http://seclists.or
.apple.com/kb/HT211844 - https://support.apple.com/HT211845 - https://support.apple.com/kb/HT211952 - http://seclists.org/fulldisclosure/2020/Nov/18 - http://seclists.org/fulldisclosure/2020/Nov/19 - http://seclists.org/fulldisclosure/2020/Nov/20 - http://seclists.org/fulldisclosure/2020/Nov/22 - http://www.openwall.com/lists/oss-security/2020/11/23/3 - https://www.debian.org/security/2020/dsa-4797 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PDGBNKYT7NMW7CJ26YFUPUHPJVYGV7IQ/ - https://support.apple.com/kb/HT211935 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BY2OBQZFMEFZOSWXPXHPEHOJXX
ps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BY2OBQZFMEFZOSWXPXHPEHOJXXILEEX2/ - https://security.gentoo.org/glsa/202012-10
CVE ID: CVE-2020-9984 State: PUBLISHED Published: 2020-10-22T18:06:56 Last Updated: 2024-08-04T10:50:57.248Z Vendors: Apple Products: iOS, macOS, tvOS, watchOS, iTunes for Windows, iCloud for Windows, iCloud for Windows (Legacy) Problem Types: Processing a maliciously crafted image may lead to arbitrary code execution Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Processing a maliciously crafted image may lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Con
CVE ID: CVE-2020-9985 State: PUBLISHED Published: 2020-10-22T18:07:03 Last Updated: 2024-08-04T10:50:57.409Z Vendors: Apple Products: iOS, macOS, watchOS Problem Types: Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution Description: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, watchOS 6.2.8. Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/kb/HT211289 - https://support.apple
CVE ID: CVE-2020-9986 State: PUBLISHED Published: 2020-10-22T18:06:41 Last Updated: 2024-08-04T10:50:57.295Z Vendors: Apple Products: macOS Problem Types: A malicious application may be able to read sensitive location information Description: A file access issue existed with certain home folder files. This was addressed with improved access restrictions. This issue is fixed in macOS Catalina 10.15.7. A malicious application may be able to read sensitive location information. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/kb/HT211849 - http://seclists.org/fulldisclosure/2020/Nov/21
CVE ID: CVE-2020-9987 State: PUBLISHED Published: 2020-12-08T19:29:48 Last Updated: 2024-08-04T10:50:57.436Z Vendors: Apple Products: Safari Problem Types: Visiting a malicious website may lead to address bar spoofing Description: An inconsistent user interface issue was addressed with improved state management. This issue is fixed in Safari 14.0. Visiting a malicious website may lead to address bar spoofing. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT211845
CVE ID: CVE-2020-9988 State: PUBLISHED Published: 2020-12-08T19:29:04 Last Updated: 2024-08-04T10:50:57.253Z Vendors: Apple Products: iOS and iPadOS, macOS Problem Types: A local user may be able to discover a user’s deleted messages Description: The issue was addressed with improved deletion. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.0 and iPadOS 14.0. A local user may be able to discover a user’s deleted messages. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT211850 - https://support.apple.com/en-us/HT211931 - http://seclists.org/fulldisclosure/2020/Dec/32
CVE ID: CVE-2020-9989 State: PUBLISHED Published: 2020-12-08T19:58:53 Last Updated: 2024-08-04T10:50:57.216Z Vendors: Apple Products: watchOS, iOS and iPadOS, macOS Problem Types: A local user may be able to discover a user’s deleted messages Description: The issue was addressed with improved deletion. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.0, iOS 14.0 and iPadOS 14.0. A local user may be able to discover a user’s deleted messages. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT211850 - https://support.apple.com/en-us/HT211844 - https://support.apple.com/en-us/HT211931 - http://seclists.org/fulldisclosure/2020/Dec/32
CVE ID: CVE-2020-9990 State: PUBLISHED Published: 2020-10-22T18:06:48 Last Updated: 2024-08-04T10:50:57.869Z Vendors: Apple Products: macOS Problem Types: A malicious application may be able to execute arbitrary code with kernel privileges Description: A race condition was addressed with additional validation. This issue is fixed in macOS Catalina 10.15.6. A malicious application may be able to execute arbitrary code with kernel privileges. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/kb/HT211289
CVE ID: CVE-2020-9991 State: PUBLISHED Published: 2020-12-08T21:11:39 Last Updated: 2024-08-04T10:50:57.927Z Vendors: Apple Products: tvOS, watchOS, iCloud for Windows, iOS and iPadOS, macOS Problem Types: A remote attacker may be able to cause a denial of service Description: This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.0, iOS 14.0 and iPadOS 14.0, iCloud for Windows 7.21, tvOS 14.0. A remote attacker may be able to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/kb/HT211846 - https://support.apple.com/en-us/HT211843 - https://support.apple.com/en-us/HT211850 - http
pport.apple.com/kb/HT211846 - https://support.apple.com/en-us/HT211843 - https://support.apple.com/en-us/HT211850 - https://support.apple.com/en-us/HT211844 - https://support.apple.com/en-us/HT211931 - https://support.apple.com/en-us/HT211847 - http://seclists.org/fulldisclosure/2020/Dec/32 - https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E
CVE ID: CVE-2020-9992 State: PUBLISHED Published: 2020-10-16T16:56:27 Last Updated: 2024-08-04T10:50:57.526Z Vendors: Apple Products: iOS, Xcode Problem Types: An attacker in a privileged network position may be able to execute arbitrary code on a paired device during a debug session over the network Description: This issue was addressed by encrypting communications over the network to devices running iOS 14, iPadOS 14, tvOS 14, and watchOS 7. This issue is fixed in iOS 14.0 and iPadOS 14.0, Xcode 12.0. An attacker in a privileged network position may be able to execute arbitrary code on a paired device during a debug session over the network. Additional Analyst Notes: - CVE Program Containe
itrary code on a paired device during a debug session over the network. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT211850 - https://support.apple.com/HT211848 - http://seclists.org/fulldisclosure/2020/Nov/20
CVE ID: CVE-2020-9993 State: PUBLISHED Published: 2020-12-08T19:31:09 Last Updated: 2024-08-04T10:50:57.253Z Vendors: Apple Products: watchOS, Safari, iOS and iPadOS Problem Types: Visiting a malicious website may lead to address bar spoofing Description: The issue was addressed with improved UI handling. This issue is fixed in watchOS 7.0, Safari 14.0, iOS 14.0 and iPadOS 14.0. Visiting a malicious website may lead to address bar spoofing. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT211850 - https://support.apple.com/en-us/HT211844 - https://support.apple.com/en-us/HT211845
CVE ID: CVE-2020-9994 State: PUBLISHED Published: 2020-10-22T18:07:16 Last Updated: 2024-08-04T10:50:57.260Z Vendors: Apple Products: iOS, macOS, tvOS, watchOS Problem Types: A malicious application may be able to overwrite arbitrary files Description: A path handling issue was addressed with improved validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. A malicious application may be able to overwrite arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/kb/HT211170 - https://support.apple.com/kb/HT211168 - https://support.apple.com/kb/HT211171 - https://support.apple.com/kb/HT21
1170 - https://support.apple.com/kb/HT211168 - https://support.apple.com/kb/HT211171 - https://support.apple.com/kb/HT211175
CVE ID: CVE-2020-9995 State: PUBLISHED Published: 2021-04-02T17:25:31 Last Updated: 2024-08-04T10:50:57.409Z Vendors: Apple Products: macOS Problem Types: Processing a maliciously crafted URL may lead to an open redirect or cross site scripting Description: An issue existed in the parsing of URLs. This issue was addressed with improved input validation. This issue is fixed in macOS Server 5.11. Processing a maliciously crafted URL may lead to an open redirect or cross site scripting. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT211932
CVE ID: CVE-2020-9996 State: PUBLISHED Published: 2020-12-08T19:59:43 Last Updated: 2024-08-04T10:50:57.793Z Vendors: Apple Products: iOS and iPadOS, macOS Problem Types: A malicious application may be able to elevate privileges Description: A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.0 and iPadOS 14.0. A malicious application may be able to elevate privileges. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT211850 - https://support.apple.com/en-us/HT211931 - http://seclists.org/fulldisclosure/2020/Dec/32
CVE ID: CVE-2020-9997 State: PUBLISHED Published: 2020-10-22T18:07:09 Last Updated: 2024-08-04T10:50:57.245Z Vendors: Apple Products: macOS, watchOS Problem Types: A malicious application may disclose restricted memory Description: An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Catalina 10.15.6, watchOS 6.2.8. A malicious application may disclose restricted memory. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/kb/HT211289 - https://support.apple.com/kb/HT211291
CVE ID: CVE-2020-9999 State: PUBLISHED Published: 2020-12-08T19:32:03 Last Updated: 2024-08-04T10:50:57.249Z Vendors: Apple Products: macOS Problem Types: Processing a maliciously crafted text file may lead to arbitrary code execution Description: A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1, iTunes for Windows 12.10.9. Processing a maliciously crafted text file may lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/kb/HT211843 - https://support.apple.com/kb/HT211850 - https://support.apple.com/kb/HT211844 - https://support.apple.com/kb/HT211935 - h
ttps://support.apple.com/kb/HT211850 - https://support.apple.com/kb/HT211844 - https://support.apple.com/kb/HT211935 - https://support.apple.com/en-us/HT211931 - https://support.apple.com/en-us/HT211952 - http://seclists.org/fulldisclosure/2020/Dec/32
CVE ID: CVE-2021-0001 State: PUBLISHED Published: 2021-06-09T19:01:55 Last Updated: 2024-08-03T15:25:01.810Z Vendors: n/a Products: Intel(R) IPP Problem Types: information disclosure Description: Observable timing discrepancy in Intel(R) IPP before version 2020 update 1 may allow authorized user to potentially enable information disclosure via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00477.html
CVE ID: CVE-2021-0002 State: PUBLISHED Published: 2021-08-11T12:48:10 Last Updated: 2024-08-03T15:25:01.873Z Vendors: n/a Products: Intel(R) Ethernet Controllers 800 series Linux drivers Problem Types: information disclosure or denial of service Description: Improper conditions check in some Intel(R) Ethernet Controllers 800 series Linux drivers before version 1.4.11 may allow an authenticated user to potentially enable information disclosure or denial of service via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00515.html - https://security.netapp.com/advisory/ntap-20210827-0008/ - htt
/www/us/en/security-center/advisory/intel-sa-00515.html - https://security.netapp.com/advisory/ntap-20210827-0008/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EUZYFCI7N4TFZSIGA7WGZ4Q7V3EK76GH/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKMUMLUH6ENNMLGTJ5AFRF6764ILEMYJ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MFLYHRQPDF6ZMESCI3HRNOP6D6GELPFR/
CVE ID: CVE-2021-0003 State: PUBLISHED Published: 2021-08-11T12:48:20 Last Updated: 2024-08-03T15:25:01.978Z Vendors: n/a Products: Intel(R) Ethernet Controllers 800 series Linux drivers Problem Types: information disclosure Description: Improper conditions check in some Intel(R) Ethernet Controllers 800 series Linux drivers before version 1.4.11 may allow an authenticated user to potentially enable information disclosure via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00515.html - https://security.netapp.com/advisory/ntap-20210827-0008/
CVE ID: CVE-2021-0004 State: PUBLISHED Published: 2021-08-11T12:47:04 Last Updated: 2024-08-03T15:25:01.772Z Vendors: n/a Products: Intel(R) Ethernet Adapters 800 Series Controllers and associated adapters Problem Types: denial of service Description: Improper buffer restrictions in the firmware of Intel(R) Ethernet Adapters 800 Series Controllers and associated adapters before version 1.5.3.0 may allow a privileged user to potentially enable denial of service via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00479.html - https://security.netapp.com/advisory/ntap-20210827-0009/ - https:
w/us/en/security-center/advisory/intel-sa-00479.html - https://security.netapp.com/advisory/ntap-20210827-0009/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IVGBTAQ3N7X3RJRMPD3QZXD76V4HSOEP/
CVE ID: CVE-2021-0005 State: PUBLISHED Published: 2021-08-11T12:47:11 Last Updated: 2024-08-03T15:25:01.806Z Vendors: n/a Products: Intel(R) Ethernet Adapters 800 Series Controllers and associated adapters Problem Types: denial of service Description: Uncaught exception in firmware for Intel(R) Ethernet Adapters 800 Series Controllers and associated adapters before version 1.5.3.0 may allow a privileged user to potentially enable denial of service via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00479.html - https://security.netapp.com/advisory/ntap-20210827-0009/
CVE ID: CVE-2021-0006 State: PUBLISHED Published: 2021-08-11T12:47:17 Last Updated: 2024-08-03T15:25:01.773Z Vendors: n/a Products: Intel(R) Ethernet Adapters 800 Series Controllers and associated adapters Problem Types: denial of service Description: Improper conditions check in firmware for Intel(R) Ethernet Adapters 800 Series Controllers and associated adapters before version 1.5.4.0 may allow a privileged user to potentially enable denial of service via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00479.html - https://security.netapp.com/advisory/ntap-20210827-0009/
CVE ID: CVE-2021-0007 State: PUBLISHED Published: 2021-08-11T12:47:21 Last Updated: 2024-08-03T15:25:01.656Z Vendors: n/a Products: Intel(R) Ethernet Adapters 800 Series Controllers and associated adapters Problem Types: denial of service Description: Uncaught exception in firmware for Intel(R) Ethernet Adapters 800 Series Controllers and associated adapters before version 1.5.1.0 may allow a privileged attacker to potentially enable denial of service via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00479.html - https://security.netapp.com/advisory/ntap-20210827-0009/
CVE ID: CVE-2021-0008 State: PUBLISHED Published: 2021-08-11T12:47:26 Last Updated: 2024-08-03T15:25:01.920Z Vendors: n/a Products: Intel(R) Ethernet Adapters 800 Series Controllers and associated adapters Problem Types: denial of service Description: Uncontrolled resource consumption in firmware for Intel(R) Ethernet Adapters 800 Series Controllers and associated adapters before version 1.5.3.0 may allow privileged user to potentially enable denial of service via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00479.html - https://security.netapp.com/advisory/ntap-20210827-0009/