Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-2399 State: PUBLISHED Published: 2017-04-02T01:36:00 Last Updated: 2024-08-05T13:55:05.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "Pasteboard" component. It allows physically proximate attackers to read the pasteboard by leveraging the use of an encryption key derived only from the hardware UID (rather than that UID in addition to the user passcode). Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038139 - http://www.securityfocus.com/bid/97138 - https://support.apple.com/HT207617
CVE ID: CVE-2017-2400 State: PUBLISHED Published: 2017-04-02T01:36:00 Last Updated: 2024-08-05T13:55:04.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "SafariViewController" component. It allows attackers to obtain sensitive information by leveraging the SafariViewController's incorrect synchronization of Safari cache clearing. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038139 - http://www.securityfocus.com/bid/97138 - https://support.apple.com/HT207617
CVE ID: CVE-2017-2401 State: PUBLISHED Published: 2017-04-02T01:36:00 Last Updated: 2024-08-05T13:55:05.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97137 - https://support.apple.com/HT207601 - https://support.apple.com/HT2076
rences: - http://www.securityfocus.com/bid/97137 - https://support.apple.com/HT207601 - https://support.apple.com/HT207615 - http://www.securitytracker.com/id/1038138 - https://support.apple.com/HT207602 - https://support.apple.com/HT207617
CVE ID: CVE-2017-2402 State: PUBLISHED Published: 2017-04-02T01:36:00 Last Updated: 2024-08-05T13:55:05.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves mishandling of profile uninstall actions in the "MCX Client" component when a profile has multiple payloads. It allows remote attackers to bypass intended access restrictions by leveraging Active Directory certificate trust that should not have remained. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97140 - https://support.apple.com/HT207615 - http://www.securitytracker.com
ferences: - http://www.securityfocus.com/bid/97140 - https://support.apple.com/HT207615 - http://www.securitytracker.com/id/1038138
CVE ID: CVE-2017-2403 State: PUBLISHED Published: 2017-04-02T01:36:00 Last Updated: 2024-08-05T13:55:05.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "Printing" component. A format-string vulnerability allows remote attackers to execute arbitrary code via a crafted ipp: or ipps: URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97140 - https://support.apple.com/HT207615 - http://www.securitytracker.com/id/1038138
CVE ID: CVE-2017-2404 State: PUBLISHED Published: 2017-04-02T01:36:00 Last Updated: 2024-08-05T13:55:04.784Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "Quick Look" component. It allows remote attackers to trigger telephone calls to arbitrary numbers via a tel: URL in a PDF document, as exploited in the wild in October 2016. Additional Analyst Notes: - CVE Program Container: References: - https://www.engadget.com/2017/03/31/apple-fixes-ios-loophole-911-overload/ - http://www.securitytracker.com/id/1038139 - http://www.securityfocus.com/bid/97138 - https://support.apple.com/H
load/ - http://www.securitytracker.com/id/1038139 - http://www.securityfocus.com/bid/97138 - https://support.apple.com/HT207617
CVE ID: CVE-2017-2405 State: PUBLISHED Published: 2017-04-02T01:36:00 Last Updated: 2024-08-05T13:55:05.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "WebKit Web Inspector" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97129 - http://www.securitytracker.com/id/1038137 - https://security.gentoo.org/glsa/201706-15 - https://support.appl
id/97129 - http://www.securitytracker.com/id/1038137 - https://security.gentoo.org/glsa/201706-15 - https://support.apple.com/HT207600 - https://support.apple.com/HT207617
CVE ID: CVE-2017-2406 State: PUBLISHED Published: 2017-04-02T01:36:00 Last Updated: 2024-08-05T13:55:05.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "FontParser" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted font file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97137 - https://support.apple.com/HT207601 - https://support.a
Container: References: - http://www.securityfocus.com/bid/97137 - https://support.apple.com/HT207601 - https://support.apple.com/HT207615 - http://www.securitytracker.com/id/1038138 - https://support.apple.com/HT207602 - https://support.apple.com/HT207617
CVE ID: CVE-2017-2407 State: PUBLISHED Published: 2017-04-02T01:36:00 Last Updated: 2024-08-05T13:55:05.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "FontParser" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted font file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97137 - https://support.apple.com/HT207601 - https://support.a
CVE ID: CVE-2017-2408 State: PUBLISHED Published: 2017-04-02T01:36:00 Last Updated: 2024-08-05T13:55:05.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "IOATAFamily" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97140 - https://support.apple.com/HT207615 - http://www.securitytracker.com/id/1038138
CVE ID: CVE-2017-2409 State: PUBLISHED Published: 2017-04-02T01:36:00 Last Updated: 2024-08-05T13:55:06.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "Menus" component. It allows attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash) via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97140 - https://support.apple.com/HT207615 - http://www.securitytracker.com/id/1038138
CVE ID: CVE-2017-2410 State: PUBLISHED Published: 2017-04-02T01:36:00 Last Updated: 2024-08-05T13:55:05.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97140 - https://support.apple.com/HT207615 - http://www.securitytracker.com/id/1038138
CVE ID: CVE-2017-2411 State: PUBLISHED Published: 2019-01-11T18:00:00 Last Updated: 2024-08-05T13:55:05.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: In iOS before 11.2, exchange rates were retrieved from HTTP rather than HTTPS. This was addressed by enabling HTTPS for exchange rates. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT208334
CVE ID: CVE-2017-2412 State: PUBLISHED Published: 2017-04-02T01:36:00 Last Updated: 2024-08-05T13:55:05.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "iTunes Store" component. It allows man-in-the-middle attackers to modify the client-server data stream to iTunes sandbox web services by leveraging use of cleartext HTTP. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038139 - http://www.securityfocus.com/bid/97138 - https://support.apple.com/HT207617
CVE ID: CVE-2017-2413 State: PUBLISHED Published: 2017-04-02T01:36:00 Last Updated: 2024-08-05T13:55:05.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "QuickTime" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted media file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97140 - https://support.apple.com/HT207615 - http://www.securitytracker.com/id/1038138
CVE ID: CVE-2017-2414 State: PUBLISHED Published: 2017-04-02T01:36:00 Last Updated: 2024-08-05T13:55:05.774Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "DataAccess" component. It allows remote attackers to access Exchange traffic in opportunistic circumstances by leveraging a mistake in typing an e-mail address. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038139 - http://www.securityfocus.com/bid/97138 - https://support.apple.com/HT207617
CVE ID: CVE-2017-2415 State: PUBLISHED Published: 2017-04-02T01:36:00 Last Updated: 2024-08-05T13:55:05.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code by leveraging an unspecified "type confusion." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038137 - https://support.apple.com/HT207601 - http://www.securityfocus.com/bid/97143 - https://security.gentoo.org/
/id/1038137 - https://support.apple.com/HT207601 - http://www.securityfocus.com/bid/97143 - https://security.gentoo.org/glsa/201706-15 - https://support.apple.com/HT207602 - https://support.apple.com/HT207600 - https://support.apple.com/HT207617
CVE ID: CVE-2017-2416 State: PUBLISHED Published: 2017-04-02T01:36:00 Last Updated: 2024-08-05T13:55:05.850Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "ImageIO" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted image file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97137 - https://support.apple.com/HT207601 - https://support.app
ntainer: References: - http://www.securityfocus.com/bid/97137 - https://support.apple.com/HT207601 - https://support.apple.com/HT207615 - http://www.securitytracker.com/id/1038138 - https://support.apple.com/HT207602 - https://blog.flanker017.me/cve-2017-2416-gif-remote-exec/ - https://support.apple.com/HT207617
CVE ID: CVE-2017-2417 State: PUBLISHED Published: 2017-04-02T01:36:00 Last Updated: 2024-08-05T13:55:05.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "CoreGraphics" component. It allows remote attackers to cause a denial of service (infinite recursion) via a crafted image. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97137 - https://support.apple.com/HT207601 - https://support.apple.com/HT207615 - http://www.securitytracker.co
.com/bid/97137 - https://support.apple.com/HT207601 - https://support.apple.com/HT207615 - http://www.securitytracker.com/id/1038138 - https://support.apple.com/HT207602 - https://support.apple.com/HT207617
CVE ID: CVE-2017-2418 State: PUBLISHED Published: 2017-04-02T01:36:00 Last Updated: 2024-08-05T13:55:05.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "Hypervisor" component. It allows guest OS users to obtain sensitive information from the CR8 control register via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97140 - https://support.apple.com/HT207615 - http://www.securitytracker.com/id/1038138
CVE ID: CVE-2017-2419 State: PUBLISHED Published: 2017-04-02T01:36:00 Last Updated: 2024-08-05T13:55:05.771Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass a Content Security Policy protection mechanism via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97129 - http://www.securitytracker.com/id/1038137 - https://security.gentoo.org/glsa/201706-15 - https://support.apple.com/HT207600 - https://support.apple.com/HT207617
CVE ID: CVE-2017-2420 State: PUBLISHED Published: 2017-04-02T01:36:00 Last Updated: 2024-08-05T13:55:05.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "Bluetooth" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97140 - https://support.apple.com/HT207615 - http://www.securitytracker.com/id/1038138
CVE ID: CVE-2017-2421 State: PUBLISHED Published: 2017-04-02T01:36:00 Last Updated: 2024-08-05T13:55:05.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "AppleGraphicsPowerManagement" component. A race condition allows attackers to execute arbitrary code in a privileged context via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97140 - https://support.apple.com/HT207615 - http://www.securitytracker.com/id/1038138
CVE ID: CVE-2017-2422 State: PUBLISHED Published: 2017-04-02T01:36:00 Last Updated: 2024-08-05T13:55:05.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "Multi-Touch" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97140 - https://support.apple.com/HT207615 - http://www.securitytracker.com/id/1038138
CVE ID: CVE-2017-2423 State: PUBLISHED Published: 2017-04-02T01:36:00 Last Updated: 2024-08-05T13:55:05.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. The issue involves the "Security" component. It allows remote attackers to bypass intended access restrictions by leveraging a successful result from a SecKeyRawVerify API call with an empty signature. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97147 - https://support.apple.com/HT207615 - http://www.securitytracker.com/id/1038138 - https://support.apple.com/HT2
d/97147 - https://support.apple.com/HT207615 - http://www.securitytracker.com/id/1038138 - https://support.apple.com/HT207617
CVE ID: CVE-2017-2424 State: PUBLISHED Published: 2017-04-02T01:36:00 Last Updated: 2024-08-05T13:55:05.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves mishandling of OpenGL shaders in the "WebKit" component. It allows remote attackers to obtain sensitive information from process memory via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97129 - http://www.securitytracker.com/id/1038137 - https://security.gentoo.org/glsa/201709-03 - https://support.apple.com/HT207600 - https://s
ritytracker.com/id/1038137 - https://security.gentoo.org/glsa/201709-03 - https://support.apple.com/HT207600 - https://support.apple.com/HT207617
CVE ID: CVE-2017-2425 State: PUBLISHED Published: 2017-04-02T01:36:00 Last Updated: 2024-08-05T13:55:05.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "SecurityFoundation" component. A double free vulnerability allows remote attackers to execute arbitrary code via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97140 - https://support.apple.com/HT207615 - http://www.securitytracker.com/id/1038138
CVE ID: CVE-2017-2426 State: PUBLISHED Published: 2017-04-02T01:36:00 Last Updated: 2024-08-05T13:55:05.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "iBooks" component. It allows remote attackers to obtain sensitive information from local files via a file: URL in an iBooks file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97140 - https://support.apple.com/HT207615 - http://www.securitytracker.com/id/1038138 - https://s1gnalcha0s.github.io/ibooks/epub/2017/03/27/This-book-reads-you-using-JavaScript.html
CVE ID: CVE-2017-2427 State: PUBLISHED Published: 2017-04-02T01:36:00 Last Updated: 2024-08-05T13:55:05.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "Bluetooth" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97140 - https://support.apple.com/HT207615 - http://www.securitytracker.com/id/1038138
CVE ID: CVE-2017-2428 State: PUBLISHED Published: 2017-04-02T01:36:00 Last Updated: 2024-08-05T13:55:05.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves nghttp2 before 1.17.0 in the "HTTPProtocol" component. It allows remote HTTP/2 servers to have an unspecified impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97146 - https://support.apple.com/HT207601 - https://support.apple.com/HT207615 - http://www.security
urityfocus.com/bid/97146 - https://support.apple.com/HT207601 - https://support.apple.com/HT207615 - http://www.securitytracker.com/id/1038138 - https://github.com/nghttp2/nghttp2/releases/tag/v1.17.0 - https://support.apple.com/HT207602 - https://support.apple.com/HT207617
CVE ID: CVE-2017-2429 State: PUBLISHED Published: 2017-04-02T01:36:00 Last Updated: 2024-08-05T13:55:05.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "FinderKit" component. It allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging unexpected permission changes during an iCloud Sharing Send Link action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97140 - https://support.apple.com/HT207615 - http://www.securitytracker.com/id/1038138
CVE ID: CVE-2017-2430 State: PUBLISHED Published: 2017-04-02T01:36:00 Last Updated: 2024-08-05T13:55:05.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Audio" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted audio file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97137 - https://support.apple.com/HT207601 - https://support.apple
CVE ID: CVE-2017-2431 State: PUBLISHED Published: 2017-04-02T01:36:00 Last Updated: 2024-08-05T13:55:05.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "CoreMedia" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted .mov file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97140 - https://support.apple.com/HT207615 - http://www.securitytracker.com/id/1038138
CVE ID: CVE-2017-2432 State: PUBLISHED Published: 2017-04-02T01:36:00 Last Updated: 2024-08-05T13:55:05.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "ImageIO" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted JPEG file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97137 - https://support.apple.com/HT207601 - https://support.appl