Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-4060 State: REJECTED Published: 2019-10-30T15:36:43 Last Updated: 2019-10-30T15:36:43 Description: No description available.
CVE ID: CVE-2018-4061 State: PUBLISHED Published: 2019-05-06T18:00:11 Last Updated: 2024-08-05T05:04:29.490Z Vendors: n/a Products: Sierra Wireless Problem Types: command injection Description: An exploitable command injection vulnerability exists in the ACEManager iplogging.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A specially crafted HTTP request can inject arbitrary commands, resulting in arbitrary command execution. An attacker can send an authenticated HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/152646/Sierra-Wireless-AirLink-ES450-ACEManager-iplogging.cgi-Command-Inj
rences: - http://packetstormsecurity.com/files/152646/Sierra-Wireless-AirLink-ES450-ACEManager-iplogging.cgi-Command-Injection.html - https://ics-cert.us-cert.gov/advisories/ICSA-19-122-03 - http://www.securityfocus.com/bid/108147 - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0746
CVE ID: CVE-2018-4062 State: PUBLISHED Published: 2019-05-06T18:28:04 Last Updated: 2024-08-05T05:04:28.802Z Vendors: n/a Products: Sierra Wireless Problem Types: Use of Hard-coded Credentials Description: A hard-coded credentials vulnerability exists in the snmpd function of the Sierra Wireless AirLink ES450 FW 4.9.3. Activating snmpd outside of the WebUI can cause the activation of the hard-coded credentials, resulting in the exposure of a privileged user. An attacker can activate snmpd without any configuration changes to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/152647/Sierra-Wireless-AirLink-ES450-SN
tes: - CVE Program Container: References: - http://packetstormsecurity.com/files/152647/Sierra-Wireless-AirLink-ES450-SNMPD-Hard-Coded-Credentials.html - https://ics-cert.us-cert.gov/advisories/ICSA-19-122-03 - http://www.securityfocus.com/bid/108147 - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0747
CVE ID: CVE-2018-4063 State: PUBLISHED Published: 2019-05-06T18:43:31 Last Updated: 2024-08-05T05:04:29.488Z Vendors: n/a Products: Sierra Wireless Problem Types: remote code execution Description: An exploitable remote code execution vulnerability exists in the upload.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A specially crafted HTTP request can upload a file, resulting in executable code being uploaded, and routable, to the webserver. An attacker can make an authenticated HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/152648/Sierra-Wireless-AirLink-ES450-ACEManager-upload.c
m Container: References: - http://packetstormsecurity.com/files/152648/Sierra-Wireless-AirLink-ES450-ACEManager-upload.cgi-Remote-Code-Execution.html - https://ics-cert.us-cert.gov/advisories/ICSA-19-122-03 - http://www.securityfocus.com/bid/108147 - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0748
CVE ID: CVE-2018-4064 State: PUBLISHED Published: 2019-10-31T20:24:12 Last Updated: 2024-08-05T05:04:29.093Z Vendors: n/a Products: Sierra Wireless Problem Types: Unverified password change Description: An exploitable unverified password change vulnerability exists in the ACEManager upload.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A specially crafted HTTP request can cause a unverified device configuration change, resulting in an unverified change of the user password on the device. An attacker can make an authenticated HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_re
ability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0749
CVE ID: CVE-2018-4065 State: PUBLISHED Published: 2019-05-06T18:06:09 Last Updated: 2024-08-05T05:04:28.881Z Vendors: n/a Products: Sierra Wireless Problem Types: Cross-site Scripting Description: An exploitable cross-site scripting vulnerability exists in the ACEManager ping_result.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A specially crafted HTTP ping request can cause reflected javascript code execution, resulting in the execution of javascript code running on the victim's browser. An attacker can get a victim to click a link, or embedded URL, that redirects to the reflected cross-site scripting vulnerability to trigger this vulnerability. Additional Analyst Notes: - CV
irects to the reflected cross-site scripting vulnerability to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/152650/Sierra-Wireless-AirLink-ES450-ACEManager-ping_result.cgi-Cross-Site-Scripting.html - https://ics-cert.us-cert.gov/advisories/ICSA-19-122-03 - http://www.securityfocus.com/bid/108147 - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0750
CVE ID: CVE-2018-4066 State: PUBLISHED Published: 2019-05-06T18:38:09 Last Updated: 2024-08-05T05:04:29.820Z Vendors: n/a Products: Sierra Wireless Problem Types: CWE-352 Description: An exploitable cross-site request forgery vulnerability exists in the ACEManager functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A specially crafted HTTP request can cause an authenticated user to perform privileged requests unknowingly, resulting in unauthenticated requests being requested through an authenticated user. An attacker can get an authenticated user to request authenticated pages on the attacker's behalf to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: Refe
ed pages on the attacker's behalf to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/152651/Sierra-Wireless-AirLink-ES450-ACEManager-Cross-Site-Request-Forgery.html - https://ics-cert.us-cert.gov/advisories/ICSA-19-122-03 - http://www.securityfocus.com/bid/108147 - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0751
CVE ID: CVE-2018-4067 State: PUBLISHED Published: 2019-05-06T18:50:04 Last Updated: 2024-08-05T05:04:28.819Z Vendors: n/a Products: Sierra Wireless Problem Types: information disclosure Description: An exploitable information disclosure vulnerability exists in the ACEManager template_load.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A specially crafted HTTP request can cause a information leak, resulting in the disclosure of internal paths and files. An attacker can make an authenticated HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/152652/Sierra-Wireless-AirLink-ES450-ACEManag
CVE Program Container: References: - http://packetstormsecurity.com/files/152652/Sierra-Wireless-AirLink-ES450-ACEManager-template_load.cgi-Information-Disclosure.html - https://ics-cert.us-cert.gov/advisories/ICSA-19-122-03 - http://www.securityfocus.com/bid/108147 - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0752
CVE ID: CVE-2018-4068 State: PUBLISHED Published: 2019-05-06T17:50:44 Last Updated: 2024-08-05T05:04:29.585Z Vendors: n/a Products: Sierra Wireless Problem Types: Information Exposure Description: An exploitable information disclosure vulnerability exists in the ACEManager functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A HTTP request can result in disclosure of the default configuration for the device. An attacker can send an unauthenticated HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0753
CVE ID: CVE-2018-4069 State: PUBLISHED Published: 2019-05-06T17:42:02 Last Updated: 2024-08-05T05:04:28.890Z Vendors: n/a Products: Sierra Wireless Problem Types: Missing Encryption of Sensitive Data Description: An information disclosure vulnerability exists in the ACEManager authentication functionality of Sierra Wireless AirLink ES450 FW 4.9.3. The ACEManager authentication functionality is done in plaintext XML to the web server. An attacker can listen to network traffic upstream from the device to capitalize on this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/152654/Sierra-Wireless-AirLink-ES450-ACEManager-Informat
m Container: References: - http://packetstormsecurity.com/files/152654/Sierra-Wireless-AirLink-ES450-ACEManager-Information-Exposure.html - https://ics-cert.us-cert.gov/advisories/ICSA-19-122-03 - http://www.securityfocus.com/bid/108147 - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0754
CVE ID: CVE-2018-4070 State: PUBLISHED Published: 2019-05-06T18:15:09 Last Updated: 2024-08-05T05:04:28.828Z Vendors: n/a Products: Sierra Wireless Problem Types: Information Exposure Description: An exploitable Information Disclosure vulnerability exists in the ACEManager EmbeddedAceGet_Task.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. This binary does not have any restricted configuration settings, so once the MSCIID is discovered, any authenticated user can send configuration changes using the /cgi-bin/Embedded_Ace_Get_Task.cgi endpoint. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0755
CVE ID: CVE-2018-4071 State: PUBLISHED Published: 2019-05-06T18:15:42 Last Updated: 2024-08-05T05:04:28.991Z Vendors: n/a Products: Sierra Wireless Problem Types: Information Exposure Description: An exploitable Information Disclosure vulnerability exists in the ACEManager EmbeddedAceGet_Task.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. The EmbeddedAceTLGet_Task.cgi executable is used to retrieve MSCII configuration values within the configuration manager of the AirLink ES450. This binary does not have any restricted configuration settings, so once the MSCIID is discovered, any authenticated user can send configuration changes using the /cgi-bin/Embedded_Ace_TLGet_Task.cgi en
D is discovered, any authenticated user can send configuration changes using the /cgi-bin/Embedded_Ace_TLGet_Task.cgi endpoint. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0755
CVE ID: CVE-2018-4072 State: PUBLISHED Published: 2019-05-06T18:21:13 Last Updated: 2024-08-05T05:04:29.473Z Vendors: n/a Products: Sierra Wireless Problem Types: Incorrect Permission Assignment for Critical Resource Description: An exploitable Permission Assignment vulnerability exists in the ACEManager EmbeddedAceSet_Task.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. The EmbeddedAceSet_Task.cgi executable is used to change MSCII configuration values within the configuration manager of the AirLink ES450. This binary does not have any restricted configuration settings, so once the MSCIID is discovered, any authenticated user can send configuration changes using the /cgi-bin/Em
settings, so once the MSCIID is discovered, any authenticated user can send configuration changes using the /cgi-bin/Embedded_Ace_Set_Task.cgi endpoint. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0756
CVE ID: CVE-2018-4073 State: PUBLISHED Published: 2019-05-06T18:22:09 Last Updated: 2024-08-05T05:04:29.622Z Vendors: n/a Products: Sierra Wireless Problem Types: Incorrect Permission Assignment for Critical Resource Description: An exploitable Permission Assignment vulnerability exists in the ACEManager EmbeddedAceSet_Task.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. The the binary the endpoint /cgi-bin/Embeded_Ace_TLSet_Task.cgi is a very similar endpoint that is designed for use with setting table values that can cause an arbitrary setting writes, resulting in the unverified changes to any system setting. An attacker can make an authenticated HTTP request, or run the binar
ng in the unverified changes to any system setting. An attacker can make an authenticated HTTP request, or run the binary as any user, to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0756
CVE ID: CVE-2018-4074 State: REJECTED Published: 2019-10-30T15:36:43 Last Updated: 2019-10-30T15:36:43 Description: No description available.
CVE ID: CVE-2018-4075 State: REJECTED Published: 2019-10-30T15:36:43 Last Updated: 2019-10-30T15:36:43 Description: No description available.
CVE ID: CVE-2018-4076 State: REJECTED Published: 2019-10-30T15:36:43 Last Updated: 2019-10-30T15:36:43 Description: No description available.
CVE ID: CVE-2018-4077 State: REJECTED Published: 2019-10-30T15:36:43 Last Updated: 2019-10-30T15:36:43 Description: No description available.
CVE ID: CVE-2018-4078 State: REJECTED Published: 2019-10-30T15:36:43 Last Updated: 2019-10-30T15:36:43 Description: No description available.
CVE ID: CVE-2018-4079 State: REJECTED Published: 2019-10-30T15:36:43 Last Updated: 2019-10-30T15:36:43 Description: No description available.
CVE ID: CVE-2018-4080 State: REJECTED Published: 2019-10-30T15:36:43 Last Updated: 2019-10-30T15:36:43 Description: No description available.
CVE ID: CVE-2018-4082 State: PUBLISHED Published: 2018-04-03T06:00:00 Last Updated: 2024-08-05T05:04:28.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT208462 - https://support.apple.com/HT208465 - http://www.securitytracker.com
: References: - https://support.apple.com/HT208462 - https://support.apple.com/HT208465 - http://www.securitytracker.com/id/1040265 - http://www.securityfocus.com/bid/102782 - https://support.apple.com/HT208464 - http://www.securitytracker.com/id/1040267 - https://support.apple.com/HT208463
CVE ID: CVE-2018-4083 State: PUBLISHED Published: 2018-04-03T06:00:00 Last Updated: 2024-08-05T05:04:28.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. macOS before 10.13.3 is affected. The issue involves the "Touch Bar Support" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT208465 - https://www.exploit-db.com/exploits/44007/
CVE ID: CVE-2018-4084 State: PUBLISHED Published: 2018-04-03T06:00:00 Last Updated: 2024-08-05T05:04:29.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. macOS before 10.13.3 is affected. The issue involves the "Wi-Fi" component. It allows attackers to bypass intended memory-read restrictions via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT208465 - http://www.securityfocus.com/bid/102785 - http://www.securitytracker.com/id/1040267
CVE ID: CVE-2018-4085 State: PUBLISHED Published: 2018-04-03T06:00:00 Last Updated: 2024-08-05T05:04:29.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the "QuartzCore" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT208462 - https://support.apple.com/HT208465 - http://www.secur
gram Container: References: - https://support.apple.com/HT208462 - https://support.apple.com/HT208465 - http://www.securitytracker.com/id/1040265 - http://www.securityfocus.com/bid/102782 - https://support.apple.com/HT208464 - http://www.securitytracker.com/id/1040267 - https://support.apple.com/HT208463
CVE ID: CVE-2018-4086 State: PUBLISHED Published: 2018-04-03T06:00:00 Last Updated: 2024-08-05T05:04:29.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the "Security" component. It allows remote attackers to spoof certificate validation via crafted name constraints. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT208462 - https://support.apple.com/HT208465 - http://www.securitytracker.com/id/1040265 - http://www.securityfocus.com/bid/
462 - https://support.apple.com/HT208465 - http://www.securitytracker.com/id/1040265 - http://www.securityfocus.com/bid/102782 - https://support.apple.com/HT208464 - http://www.securitytracker.com/id/1040267 - https://support.apple.com/HT208463
CVE ID: CVE-2018-4087 State: PUBLISHED Published: 2018-04-03T06:00:00 Last Updated: 2024-08-05T05:04:29.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the "Core Bluetooth" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT208462 - https://www.exploit-db.com/exploits/44215/ - http://www.securitytracker.com/id/1040265 - http
pport.apple.com/HT208462 - https://www.exploit-db.com/exploits/44215/ - http://www.securitytracker.com/id/1040265 - http://www.securityfocus.com/bid/102774 - https://support.apple.com/HT208464 - https://blog.zimperium.com/cve-2018-4087-poc-escaping-sandbox-misleading-bluetoothd/ - https://support.apple.com/HT208463
CVE ID: CVE-2018-4088 State: PUBLISHED Published: 2018-04-03T06:00:00 Last Updated: 2024-08-05T05:04:28.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. Safari before 11.0.3 is affected. iCloud before 7.3 on Windows is affected. iTunes before 12.7.3 on Windows is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. Additional Analyst Notes: - CVE Progra
nial of service (memory corruption and application crash) via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT208462 - http://www.securitytracker.com/id/1040266 - https://support.apple.com/HT208465 - http://www.securitytracker.com/id/1040265 - https://support.apple.com/HT208474 - https://usn.ubuntu.com/3551-1/ - https://support.apple.com/HT208464 - http://www.securitytracker.com/id/1040267 - https://support.apple.com/HT208473 - https://support.apple.com/HT208475 - http://www.securityfocus.com/bid/102775 - https://support.apple.com/HT208463
CVE ID: CVE-2018-4089 State: PUBLISHED Published: 2018-04-03T06:00:00 Last Updated: 2024-08-05T05:04:29.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. Safari before 11.0.3 is affected. tvOS before 11.2.5 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT208462 - http://www.securitytracker.com/id/1040266 - https://suppo
Container: References: - https://support.apple.com/HT208462 - http://www.securitytracker.com/id/1040266 - https://support.apple.com/HT208465 - http://www.securitytracker.com/id/1040265 - https://www.exploit-db.com/exploits/43937/ - http://www.securityfocus.com/bid/102778 - http://www.securitytracker.com/id/1040267 - https://support.apple.com/HT208475 - https://support.apple.com/HT208463
CVE ID: CVE-2018-4090 State: PUBLISHED Published: 2018-04-03T06:00:00 Last Updated: 2024-08-05T05:04:29.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT208462 - https://support.apple.com/HT208465 - http://www.securitytracker.com/id/1040265 - https://www.exploit-db.com/exploits/43923
tps://support.apple.com/HT208465 - http://www.securitytracker.com/id/1040265 - https://www.exploit-db.com/exploits/43923/ - http://www.securityfocus.com/bid/102782 - https://support.apple.com/HT208464 - http://www.securitytracker.com/id/1040267 - https://support.apple.com/HT208463
CVE ID: CVE-2018-4091 State: PUBLISHED Published: 2018-04-03T06:00:00 Last Updated: 2024-08-05T05:04:29.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. macOS before 10.13.3 is affected. The issue involves the "Sandbox" component. It allows bypass of a sandbox protection mechanism. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT208465 - http://www.securityfocus.com/bid/102785 - http://www.securitytracker.com/id/1040267
CVE ID: CVE-2018-4092 State: PUBLISHED Published: 2018-04-03T06:00:00 Last Updated: 2024-08-05T05:04:29.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the "Kernel" component. A race condition allows attackers to bypass intended memory-read restrictions via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT208462 - https://support.apple.com/HT208465 - http://www.securitytracker.com/id/1040265 - http://www.securityfocus.co
/HT208462 - https://support.apple.com/HT208465 - http://www.securitytracker.com/id/1040265 - http://www.securityfocus.com/bid/102782 - https://support.apple.com/HT208464 - http://www.securitytracker.com/id/1040267 - https://support.apple.com/HT208463
CVE ID: CVE-2018-4093 State: PUBLISHED Published: 2018-04-03T06:00:00 Last Updated: 2024-08-05T05:04:28.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT208462 - https://support.apple.com/HT208465 - http://www.securitytracker.com/id/1040265 - http://www.securityfocus.com/bid/102782 -