Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-4667 State: PUBLISHED Published: 2017-02-20T08:35:00 Last Updated: 2024-08-06T00:39:25.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. macOS before 10.12.1 is affected. The issue involves the "ATS" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted font. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037086 - http://www.securityfocus.com/bid/93852 - https://support.apple.com/HT207275
CVE ID: CVE-2016-4668 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-4669 State: PUBLISHED Published: 2017-02-20T08:35:00 Last Updated: 2024-08-06T00:39:25.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affected. The issue involves the "Kernel" component. It allows local users to execute arbitrary code in a privileged context or cause a denial of service (MIG code mishandling and system crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT207271 - http://www.securitytracker.com/id/1037086 -
- CVE Program Container: References: - https://support.apple.com/HT207271 - http://www.securitytracker.com/id/1037086 - http://www.securityfocus.com/bid/93849 - https://support.apple.com/HT207269 - https://support.apple.com/HT207270 - https://support.apple.com/HT207275 - https://www.exploit-db.com/exploits/40654/ - http://packetstormsecurity.com/files/158874/Safari-Webkit-For-iOS-7.1.2-JIT-Optimization-Bug.html
CVE ID: CVE-2016-4670 State: PUBLISHED Published: 2017-02-20T08:35:00 Last Updated: 2024-08-06T00:39:25.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. The issue involves the "Security" component. It allows local users to discover lengths of arbitrary passwords by reading a log. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT207271 - http://www.securityfocus.com/bid/94433 - https://support.apple.com/HT207275
CVE ID: CVE-2016-4671 State: PUBLISHED Published: 2017-02-20T08:35:00 Last Updated: 2024-08-06T00:39:25.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. macOS before 10.12.1 is affected. The issue involves the "ImageIO" component. It allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write and application crash) via a crafted PDF file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037086 - http://www.securityfocus.com/bid/93852 - https://support.apple.com/HT207275
CVE ID: CVE-2016-4672 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-4673 State: PUBLISHED Published: 2017-02-20T08:35:00 Last Updated: 2024-08-06T00:39:25.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affected. The issue involves the "CoreGraphics" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted JPEG file. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT207271 - http://www.securitytracker.com/id/1037086 - http://www
CVE ID: CVE-2016-4674 State: PUBLISHED Published: 2017-02-20T08:35:00 Last Updated: 2024-08-06T00:39:25.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. macOS before 10.12.1 is affected. The issue involves the "ATS" component. It allows local users to gain privileges or cause a denial of service (memory corruption and application crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037086 - http://www.securityfocus.com/bid/93852 - https://support.apple.com/HT207275
CVE ID: CVE-2016-4675 State: PUBLISHED Published: 2017-02-20T08:35:00 Last Updated: 2024-08-06T00:39:25.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affected. The issue involves the "libxpc" component. It allows attackers to execute arbitrary code in a privileged context via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT207271 - http://www.securitytracker.com/id/1037086 - http://www.securityfocus.com/bid/93849 - https://support.apple.com/HT207269
http://www.securitytracker.com/id/1037086 - http://www.securityfocus.com/bid/93849 - https://support.apple.com/HT207269 - https://support.apple.com/HT207270 - https://support.apple.com/HT207275
CVE ID: CVE-2016-4676 State: PUBLISHED Published: 2020-02-03T17:07:07 Last Updated: 2024-08-06T00:39:25.983Z Vendors: Apple Products: Safari Problem Types: cross-origin bypass Description: A Cross-origin vulnerability exists in WebKit in Apple Safari before 10.0.1 when processing location attributes, which could let a remote malicious user obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93851 - http://seclists.org/fulldisclosure/2016/Oct/89 - http://www.securitytracker.com/id/1037087 - https://packetstormsecurity.com/files/cve/CVE-2016-4676 - https://lists.apple.com/archives/security-announce/2016/Oct/msg00002.ht
acketstormsecurity.com/files/cve/CVE-2016-4676 - https://lists.apple.com/archives/security-announce/2016/Oct/msg00002.html
CVE ID: CVE-2016-4677 State: PUBLISHED Published: 2017-02-20T08:35:00 Last Updated: 2024-08-06T00:39:25.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.1 is affected. Safari before 10.0.1 is affected. tvOS before 10.0.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT207271 - https://support.apple.com/HT207270 - http://www.securityfocus.com/bid/93853 - https://support
pport.apple.com/HT207271 - https://support.apple.com/HT207270 - http://www.securityfocus.com/bid/93853 - https://support.apple.com/HT207272 - http://www.securitytracker.com/id/1037087
CVE ID: CVE-2016-4678 State: PUBLISHED Published: 2017-02-20T08:35:00 Last Updated: 2024-08-06T00:39:25.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. macOS before 10.12.1 is affected. The issue involves the "AppleSMC" component. It allows local users to gain privileges or cause a denial of service (NULL pointer dereference) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037086 - http://www.securityfocus.com/bid/93852 - https://support.apple.com/HT207275
CVE ID: CVE-2016-4679 State: PUBLISHED Published: 2017-02-20T08:35:00 Last Updated: 2024-08-06T00:39:26.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affected. The issue involves the "libarchive" component, which allows remote attackers to write to arbitrary files via a crafted archive containing a symlink. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT207271 - http://www.securitytracker.com/id/1037086 - http://www.securityfocus.com/bid/93849 - https://support.ap
e.com/HT207271 - http://www.securitytracker.com/id/1037086 - http://www.securityfocus.com/bid/93849 - https://support.apple.com/HT207269 - https://support.apple.com/HT207270 - https://support.apple.com/HT207275
CVE ID: CVE-2016-4680 State: PUBLISHED Published: 2017-02-20T08:35:00 Last Updated: 2024-08-06T00:39:25.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affected. The issue involves the "Kernel" component. It allows attackers to obtain sensitive information from kernel memory via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT207271 - http://www.securitytracker.com/id/1037088 - http://www.securityfocus.com/bid/93854 - https://support.apple.com/HT207269 - https://support.apple.com/HT207
/1037088 - http://www.securityfocus.com/bid/93854 - https://support.apple.com/HT207269 - https://support.apple.com/HT207270
CVE ID: CVE-2016-4681 State: PUBLISHED Published: 2017-02-20T08:35:00 Last Updated: 2024-08-06T00:39:25.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. macOS before 10.12.1 is affected. The issue involves the "Core Image" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted JPEG file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94431 - https://support.apple.com/HT207275
CVE ID: CVE-2016-4682 State: PUBLISHED Published: 2017-02-20T08:35:00 Last Updated: 2024-08-06T00:39:25.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. macOS before 10.12 is affected. macOS before 10.12.1 is affected. The issue involves the "ImageIO" component. It allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash) via a crafted SGI file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037086 - http://www.securityfocus.com/bid/93852 - https://support.apple.com/HT207275 - https://support.apple.com/HT2
id/1037086 - http://www.securityfocus.com/bid/93852 - https://support.apple.com/HT207275 - https://support.apple.com/HT207170
CVE ID: CVE-2016-4683 State: PUBLISHED Published: 2017-02-20T08:35:00 Last Updated: 2024-08-06T00:39:26.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. macOS before 10.12.1 is affected. The issue involves the "ImageIO" component. It allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds memory access and application crash) via a crafted SGI file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94431 - https://support.apple.com/HT207275
CVE ID: CVE-2016-4684 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-4685 State: PUBLISHED Published: 2017-02-20T08:35:00 Last Updated: 2024-08-06T00:39:25.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.1 is affected. The issue involves the "iTunes Backup" component, which improperly hashes passwords, making it easier to decrypt files. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT207271 - http://www.securityfocus.com/bid/94432
CVE ID: CVE-2016-4686 State: PUBLISHED Published: 2017-02-20T08:35:00 Last Updated: 2024-08-06T00:39:26.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.1 is affected. The issue involves the "Contacts" component, which does not prevent an app's Address Book access after access revocation. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT207271 - http://www.securitytracker.com/id/1037088 - http://www.securityfocus.com/bid/93848
CVE ID: CVE-2016-4687 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-4688 State: PUBLISHED Published: 2017-02-20T08:35:00 Last Updated: 2024-08-06T00:39:25.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affected. watchOS before 3.1.3 is affected. The issue involves the "FontParser" component. It allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via a crafted font. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT207271 - http://www.securityfocus.com/
Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT207271 - http://www.securityfocus.com/bid/94572 - https://support.apple.com/HT207487 - https://support.apple.com/HT207269 - https://support.apple.com/HT207270 - https://support.apple.com/HT207275 - http://www.securitytracker.com/id/1037469
CVE ID: CVE-2016-4689 State: PUBLISHED Published: 2017-02-20T08:35:00 Last Updated: 2024-08-06T00:39:26.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the "Mail" component, which does not alert the user to an S/MIME email signature that used a revoked certificate. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT207422 - http://www.securitytracker.com/id/1037429 - http://www.securityfocus.com/bid/94850
CVE ID: CVE-2016-4690 State: PUBLISHED Published: 2017-02-20T08:35:00 Last Updated: 2024-08-06T00:39:25.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the "Image Capture" component, which allows attackers to execute arbitrary code via a crafted USB HID device. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT207422 - http://www.securitytracker.com/id/1037429 - http://www.securityfocus.com/bid/94850
CVE ID: CVE-2016-4691 State: PUBLISHED Published: 2017-02-20T08:35:00 Last Updated: 2024-08-06T00:39:26.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "FontParser" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted font. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT207487 - https://support.apple.com/HT207422 - http://www.securityfocus.com/bid/94905 - http://www.se
support.apple.com/HT207487 - https://support.apple.com/HT207422 - http://www.securityfocus.com/bid/94905 - http://www.securitytracker.com/id/1037469 - https://support.apple.com/HT207423
CVE ID: CVE-2016-4692 State: PUBLISHED Published: 2017-02-20T08:35:00 Last Updated: 2024-08-06T00:39:25.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT207427 - http://www.securityfocus.com/bid/94907 - https://support.app
ntainer: References: - https://support.apple.com/HT207427 - http://www.securityfocus.com/bid/94907 - https://support.apple.com/HT207421 - http://www.securitytracker.com/id/1037459 - https://support.apple.com/HT207422 - https://security.gentoo.org/glsa/201706-15 - https://support.apple.com/HT207424
CVE ID: CVE-2016-4693 State: PUBLISHED Published: 2017-02-20T08:35:00 Last Updated: 2024-08-06T00:39:25.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "Security" component, which makes it easier for attackers to bypass cryptographic protection mechanisms by leveraging use of the 3DES cipher. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT207487 - https://support.apple.com/HT207422 - http://www.securityfocus.com/bid/94905 - http://www.securitytracker.com/id/10374
- https://support.apple.com/HT207422 - http://www.securityfocus.com/bid/94905 - http://www.securitytracker.com/id/1037469 - https://support.apple.com/HT207423
CVE ID: CVE-2016-4694 State: PUBLISHED Published: 2016-09-25T10:00:00 Last Updated: 2024-08-06T00:39:26.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Apache HTTP Server in Apple OS X before 10.12 and OS X Server before 5.2 follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted CGI client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an "httpoxy" issue, a related issue to CVE-2016-5387. Additional Analyst Notes: - CVE Program Container: References: - http://
tpoxy" issue, a related issue to CVE-2016-5387. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93060 - https://support.apple.com/HT207171 - http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html - http://www.securitytracker.com/id/1036853 - https://support.apple.com/HT207170 - http://lists.apple.com/archives/security-announce/2016/Sep/msg00009.html
CVE ID: CVE-2016-4695 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-4696 State: PUBLISHED Published: 2016-09-25T10:00:00 Last Updated: 2024-08-06T00:39:25.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: AppleEFIRuntime in Apple OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036858 - http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html - http://www.securityfocus.com/bid/93055 - https://support.apple.com/HT207170
CVE ID: CVE-2016-4697 State: PUBLISHED Published: 2016-09-25T10:00:00 Last Updated: 2024-08-06T00:39:25.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple HSSPI Support in Apple OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036858 - http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html - http://www.securityfocus.com/bid/93055 - https://support.apple.com/HT207170
CVE ID: CVE-2016-4698 State: PUBLISHED Published: 2016-09-25T10:00:00 Last Updated: 2024-08-06T00:39:26.045Z Vendors: n/a Products: n/a Problem Types: n/a Description: AppleMobileFileIntegrity in Apple iOS before 10 and OS X before 10.12 mishandles process entitlement and Team ID values in the task port inheritance policy, which allows attackers to execute arbitrary code in a privileged context via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036858 - http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html - http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html - http://www.securityfocus
/Sep/msg00006.html - http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html - http://www.securityfocus.com/bid/93056 - https://support.apple.com/HT207170 - https://support.apple.com/HT207143
CVE ID: CVE-2016-4699 State: PUBLISHED Published: 2016-09-25T10:00:00 Last Updated: 2024-08-06T00:39:25.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: AppleUUC in Apple OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-4700. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036858 - http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html - http://www.securityfocus.com/bid/93055 - https://support.apple.com/HT207170
CVE ID: CVE-2016-4700 State: PUBLISHED Published: 2016-09-25T10:00:00 Last Updated: 2024-08-06T00:39:25.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: AppleUUC in Apple OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-4699. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036858 - http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html - http://www.securityfocus.com/bid/93055 - https://support.apple.com/HT207170
CVE ID: CVE-2016-4701 State: PUBLISHED Published: 2016-09-25T10:00:00 Last Updated: 2024-08-06T00:39:25.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: Application Firewall in Apple OS X before 10.12 allows local users to cause a denial of service via vectors involving a crafted SO_EXECPATH environment variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036858 - http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html - http://www.securityfocus.com/bid/93055 - https://support.apple.com/HT207170
CVE ID: CVE-2016-4702 State: PUBLISHED Published: 2016-09-25T10:00:00 Last Updated: 2024-08-06T00:39:26.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: Audio in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT207141 - http://www.securitytracker.com/id/1036858 - http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html - http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html - http://lists.apple.com/arc
ep/msg00006.html - http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html - http://lists.apple.com/archives/security-announce/2016/Sep/msg00010.html - http://lists.apple.com/archives/security-announce/2016/Sep/msg00011.html - http://www.securityfocus.com/bid/93054 - https://support.apple.com/HT207170 - https://support.apple.com/HT207142 - https://support.apple.com/HT207143