Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
e device: root@SRX-Firewall# run show services user-identification active-directory-access active-directory-authentication-table all Next review the results to see if valid users and groups are returned. e.g. Domain: juniperlab.com Total entries: 3 Source IP Username groups state 172.16.26.1 administrator Valid 192.168.26.2 engg01 engineers Valid 192.168.26.3 guest01 guests Valid Domain: NULL Total entries: 8 Source IP Username groups state 192.168.26.4 Invalid 192.168.26.5 Invalid This will also indicate that Valid users and groups are authenticating through the device. Affected releases are Juniper Networks Junos OS 12.3X48 from 12.3X48-D30 and prior to 12.3X48-D35 on SRX series; 15.1X49 f
fected releases are Juniper Networks Junos OS 12.3X48 from 12.3X48-D30 and prior to 12.3X48-D35 on SRX series; 15.1X49 from 15.1X49-D40 and prior to 15.1X49-D50 on SRX series. Devices on any version of Junos OS 12.1X46, or 12.1X47 are unaffected by this issue. Additional Analyst Notes: - CVE Program Container: References: - https://kb.juniper.net/JSA10791 - http://www.securitytracker.com/id/1038904
CVE ID: CVE-2017-2344 State: PUBLISHED Published: 2017-07-14T14:00:00Z Last Updated: 2024-09-16T23:31:21.548Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Juniper Networks Products: Junos OS Problem Types: Buffer overflow Description: A routine within an internal Junos OS sockets library is vulnerable to a buffer overflow. Malicious exploitation of this issue may lead to a denial of service (kernel panic) or be leveraged as a privilege escalation through local code execution. The routines are only accessible via programs running on the device itself, and veriexec restricts arbitrary programs from running on Junos OS. There are no known exploit vectors utili
ice itself, and veriexec restricts arbitrary programs from running on Junos OS. There are no known exploit vectors utilizing signed binaries shipped with Junos OS itself. Affected releases are Juniper Networks Junos OS 12.1X46 prior to 12.1X46-D67; 12.3X48 prior to 12.3X48-D51, 12.3X48-D55; 13.3 prior to 13.3R10-S2; 14.1 prior to 14.1R2-S10, 14.1R8-S4, 14.1R9; 14.1X50 prior to 14.1X50-D185; 14.1X53 prior to 14.1X53-D122, 14.1X53-D45, 14.1X53-D50; 14.2 prior to 14.2R4-S9, 14.2R7-S7, 14.2R8; 15.1 prior to 15.1F2-S18, 15.1F6-S7, 15.1R4-S8, 15.1R5-S5, 15.1R6-S1, 15.1R7; 15.1X49 prior to 15.1X49-D100; 15.1X53 prior to 15.1X53-D231, 15.1X53-D47, 15.1X53-D48, 15.1X53-D57, 15.1X53-D64, 15.1X53-D70;
prior to 15.1X49-D100; 15.1X53 prior to 15.1X53-D231, 15.1X53-D47, 15.1X53-D48, 15.1X53-D57, 15.1X53-D64, 15.1X53-D70; 16.1 prior to 16.1R3-S4, 16.1R4-S3, 16.1R4-S4, 16.1R5; 16.2 prior to 16.2R2; 17.1 prior to 17.1R1-S3, 17.1R2; 17.2 prior to 17.2R1-S1, 17.2R2; 17.2X75 prior to 17.2X75-D30. No other Juniper Networks products or platforms are affected by this issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038896 - https://kb.juniper.net/JSA10792 - http://www.securityfocus.com/bid/99556
CVE ID: CVE-2017-2345 State: PUBLISHED Published: 2017-07-14T14:00:00Z Last Updated: 2024-09-17T02:37:11.379Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Juniper Networks Products: Junos OS Problem Types: Denial of service Description: On Junos OS devices with SNMP enabled, a network based attacker with unfiltered access to the RE can cause the Junos OS snmpd daemon to crash and restart by sending a crafted SNMP packet. Repeated crashes of the snmpd daemon can result in a partial denial of service condition. Additionally, it may be possible to craft a malicious SNMP packet in a way that can result in remote code execution. SNMP is disabled in Junos OS
ssible to craft a malicious SNMP packet in a way that can result in remote code execution. SNMP is disabled in Junos OS by default. Junos OS devices with SNMP disabled are not affected by this issue. No other Juniper Networks products or platforms are affected by this issue. NOTE: This is a different issue than Cisco CVE-2017-6736, CVE-2017-6737, and CVE-2017-6738. Affected releases are Juniper Networks Junos OS 12.1X46 prior to 12.1X46-D67; 12.3X48 prior to 12.3X48-D51, 12.3X48-D55; 13.3 prior to 13.3R10-S2; 14.1 prior to 14.1R2-S10, 14.1R8-S4, 14.1R9; 14.1X50 prior to 14.1X50-D185; 14.1X53 prior to 14.1X53-D122, 14.1X53-D44, 14.1X53-D50; 14.2 prior to 14.2R4-S9, 14.2R7-S7, 14.2R8; 15.1 pri
1X50-D185; 14.1X53 prior to 14.1X53-D122, 14.1X53-D44, 14.1X53-D50; 14.2 prior to 14.2R4-S9, 14.2R7-S7, 14.2R8; 15.1 prior to 15.1F2-S18, 15.1F6-S7, 15.1R4-S8, 15.1R5-S5, 15.1R6-S1, 15.1R7; 15.1X49 prior to 15.1X49-D100, 15.1X49-D110; 15.1X53 prior to 15.1X53-D231, 15.1X53-D47, 15.1X53-D48, 15.1X53-D57, 15.1X53-D64, 15.1X53-D70; 16.1 prior to 16.1R3-S4, 16.1R4-S3, 16.1R4-S4, 16.1R5; 16.2 prior to 16.2R2, 16.2R3; 17.1 prior to 17.1R1-S3, 17.1R2, 17.1R3; 17.2 prior to 17.2R1-S1, 17.2R2; 17.2X75 prior to 17.2X75-D30. Junos releases prior to 10.2 are not affected. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038903 - https://kb.juniper.net/J
alyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038903 - https://kb.juniper.net/JSA10793 - http://www.securityfocus.com/bid/99567
CVE ID: CVE-2017-2346 State: PUBLISHED Published: 2017-07-14T14:00:00Z Last Updated: 2024-09-16T20:51:55.167Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Juniper Networks Products: Junos OS Problem Types: Denial of service Description: An MS-MPC or MS-MIC Service PIC may crash when large fragmented packets are passed through an Application Layer Gateway (ALG). Repeated crashes of the Service PC can result in an extended denial of service condition. The issue can be seen only if NAT or stateful-firewall rules are configured with ALGs enabled. This issue was caused by the code change for PR 1182910 in Junos OS 14.1X55-D30, 14.1X55-D35, 14.2R7, 15.1R5, and
bled. This issue was caused by the code change for PR 1182910 in Junos OS 14.1X55-D30, 14.1X55-D35, 14.2R7, 15.1R5, and 16.1R2. No other versions of Junos OS and no other Juniper Networks products or platforms are affected by this issue. Affected releases are Juniper Networks Junos OS on MX platforms running: 14.1X55 from 14.1X55-D30 to releases prior to 14.1X55-D35; 14.2R from 14.2R7 to releases prior to 14.2R7-S4, 14.2R8; 15.1R from 15.1R5 to releases prior to 15.1R5-S2, 15.1R6; 16.1R from 16.1R2 to releases prior to 16.1R3-S2, 16.1R4. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038895 - https://kb.juniper.net/JSA10794
CVE ID: CVE-2017-2347 State: PUBLISHED Published: 2017-07-14T14:00:00Z Last Updated: 2024-09-16T18:18:59.342Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Juniper Networks Products: Junos OS Problem Types: denial of service Description: A denial of service vulnerability in rpd daemon of Juniper Networks Junos OS allows a malformed MPLS ping packet to crash the rpd daemon if MPLS OAM is configured. Repeated crashes of the rpd daemon can result in an extended denial of service condition for the device. The affected releases are Junos OS 12.3X48 prior to 12.3X48-D50, 12.3X48-D55; 13.3 prior to 13.3R10; 14.1 prior to 14.1R4-S13, 14.1R8-S3, 14.1R9; 14.1X53 pri
.3X48 prior to 12.3X48-D50, 12.3X48-D55; 13.3 prior to 13.3R10; 14.1 prior to 14.1R4-S13, 14.1R8-S3, 14.1R9; 14.1X53 prior to 14.1X53-D42, 14.1X53-D50; 14.2 prior to 14.2R4-S8, 14.2R7-S6, 14.2R8; 15.1 prior to 15.1F2-S14, 15.1F5-S7, 15.1F6-S4, 15.1F7, 15.1R4-S7, 15.1R5-S1, 15.1R6; 15.1X49 prior to 15.1X49-D100; 15.1X53 prior to 15.1X53-D105, 15.1X53-D47, 15.1X53-D62, 15.1X53-D70; 16.1 prior to 16.1R3-S3, 16.1R4. No other Juniper Networks products or platforms are affected by this issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038892 - http://www.securityfocus.com/bid/100236 - https://kb.juniper.net/JSA10795
CVE ID: CVE-2017-2348 State: PUBLISHED Published: 2017-07-14T14:00:00Z Last Updated: 2024-09-16T20:03:49.290Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Juniper Networks Products: Junos OS Problem Types: Denial of service Description: The Juniper Enhanced jdhcpd daemon may experience high CPU utilization, or crash and restart upon receipt of an invalid IPv6 UDP packet. Both high CPU utilization and repeated crashes of the jdhcpd daemon can result in a denial of service as DHCP service is interrupted. No other Juniper Networks products or platforms are affected by this issue. Affected releases are Juniper Networks Junos OS 14.1X53 prior to 14.1X53-D12, 14.
platforms are affected by this issue. Affected releases are Juniper Networks Junos OS 14.1X53 prior to 14.1X53-D12, 14.1X53-D38, 14.1X53-D40 on QFX, EX, QFabric System; 15.1 prior to 15.1F2-S18, 15.1R4 on all products and platforms; 15.1X49 prior to 15.1X49-D80 on SRX; 15.1X53 prior to 15.1X53-D51, 15.1X53-D60 on NFX, QFX, EX. Additional Analyst Notes: - CVE Program Container: References: - https://kb.juniper.net/JSA10800 - http://www.securitytracker.com/id/1038899
CVE ID: CVE-2017-2349 State: PUBLISHED Published: 2017-07-14T14:00:00Z Last Updated: 2024-09-16T18:03:26.230Z Severity: CRITICAL (CVSS 9.9 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Juniper Networks Products: Junos OS Problem Types: command injection Description: A command injection vulnerability in the IDP feature of Juniper Networks Junos OS on SRX series devices potentially allows a user with login access to the device to execute shell commands and elevate privileges. Affected releases are Juniper Networks Junos OS 12.1X44 prior to 12.1X44-D60; 12.1X46 prior to 12.1X46-D50; 12.1X47 prior to 12.1X47-D30, 12.1X47-D35; 12.3X48 prior to 12.3X48-D20, 12.3X48-D30; 15.1X49 prior to 1
to 12.1X46-D50; 12.1X47 prior to 12.1X47-D30, 12.1X47-D35; 12.3X48 prior to 12.3X48-D20, 12.3X48-D30; 15.1X49 prior to 15.1X49-D20, 15.1X49-D30. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038898 - https://kb.juniper.net/JSA10801
CVE ID: CVE-2017-2350 State: PUBLISHED Published: 2017-02-20T08:35:00 Last Updated: 2024-08-05T13:48:05.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95727 - https://support.apple.com/HT207485 - https://security.gentoo.org/glsa/201706-15 - https://support.apple.com/HT207484 -
- https://support.apple.com/HT207485 - https://security.gentoo.org/glsa/201706-15 - https://support.apple.com/HT207484 - https://support.apple.com/HT207482 - http://www.securitytracker.com/id/1037668
CVE ID: CVE-2017-2351 State: PUBLISHED Published: 2017-02-20T08:35:00 Last Updated: 2024-08-05T13:48:05.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. The issue involves the "WiFi" component, which allows physically proximate attackers to bypass the activation-lock protection mechanism and view the home screen via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95722 - https://support.apple.com/HT207482 - http://www.securitytracker.com/id/1037668
CVE ID: CVE-2017-2352 State: PUBLISHED Published: 2017-02-20T08:35:00 Last Updated: 2024-08-05T13:48:05.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. watchOS before 3.1.3 is affected. The issue involves the "Unlock with iPhone" component, which allows attackers to bypass the wrist-presence protection mechanism and unlock a Watch device via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT207487 - http://www.securityfocus.com/bid/95730 - https://support.apple.com/HT207482 - http://www.securitytracker.com/id/1037668
CVE ID: CVE-2017-2353 State: PUBLISHED Published: 2017-02-20T08:35:00 Last Updated: 2024-08-05T13:48:05.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. macOS before 10.12.3 is affected. The issue involves the "Bluetooth" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (use-after-free) via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/41164/ - https://support.apple.com/HT207483 - http://www.securitytracker.com/id/1037671 - http://www.securityfocus.com/bid/95723
CVE ID: CVE-2017-2354 State: PUBLISHED Published: 2017-02-20T08:35:00 Last Updated: 2024-08-05T13:48:05.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. iCloud before 6.1.1 is affected. iTunes before 12.5.5 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95736 - https://support.appl
onal Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95736 - https://support.apple.com/HT207486 - https://support.apple.com/HT207485 - https://security.gentoo.org/glsa/201706-15 - https://support.apple.com/HT207481 - https://support.apple.com/HT207484 - https://support.apple.com/HT207482 - http://www.securitytracker.com/id/1037668
CVE ID: CVE-2017-2355 State: PUBLISHED Published: 2017-02-20T08:35:00 Last Updated: 2024-08-05T13:48:05.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. iCloud before 6.1.1 is affected. iTunes before 12.5.5 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (uninitialized memory access and application crash) via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95736 - https://su
te. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95736 - https://support.apple.com/HT207486 - https://support.apple.com/HT207485 - https://security.gentoo.org/glsa/201706-15 - https://support.apple.com/HT207481 - https://support.apple.com/HT207484 - https://support.apple.com/HT207482 - http://www.securitytracker.com/id/1037668
CVE ID: CVE-2017-2356 State: PUBLISHED Published: 2017-02-20T08:35:00 Last Updated: 2024-08-05T13:48:05.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. iCloud before 6.1.1 is affected. iTunes before 12.5.5 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95736 - https://support.appl
CVE ID: CVE-2017-2357 State: PUBLISHED Published: 2017-02-20T08:35:00 Last Updated: 2024-08-05T13:48:05.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. macOS before 10.12.3 is affected. The issue involves the "IOAudioFamily" component. It allows attackers to obtain sensitive kernel memory-layout information via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT207483 - http://www.securitytracker.com/id/1037671 - http://www.securityfocus.com/bid/95723
CVE ID: CVE-2017-2358 State: PUBLISHED Published: 2017-02-20T08:35:00 Last Updated: 2024-08-05T13:48:05.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. macOS before 10.12.3 is affected. The issue involves the "Graphics Drivers" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT207483 - http://www.securitytracker.com/id/1037671 - http://www.securityfocus.com/bid/95723
CVE ID: CVE-2017-2359 State: PUBLISHED Published: 2017-02-20T08:35:00 Last Updated: 2024-08-05T13:48:05.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. Safari before 10.0.3 is affected. The issue involves the "Safari" component, which allows remote attackers to spoof the address bar via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037669 - https://support.apple.com/HT207484 - http://www.securityfocus.com/bid/95724
CVE ID: CVE-2017-2360 State: PUBLISHED Published: 2017-02-20T08:35:00 Last Updated: 2024-08-05T13:48:05.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. macOS before 10.12.3 is affected. tvOS before 10.1.1 is affected. watchOS before 3.1.3 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (use-after-free) via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95729 - https://support.apple.com/HT207487 - https://support.apple.com/HT2
eferences: - http://www.securityfocus.com/bid/95729 - https://support.apple.com/HT207487 - https://support.apple.com/HT207483 - http://www.securityfocus.com/bid/95731 - https://support.apple.com/HT207485 - https://www.exploit-db.com/exploits/41165/ - https://support.apple.com/HT207482 - http://www.securitytracker.com/id/1037668
CVE ID: CVE-2017-2361 State: PUBLISHED Published: 2017-02-20T08:35:00 Last Updated: 2024-08-05T13:48:05.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. macOS before 10.12.3 is affected. The issue involves the "Help Viewer" component, which allows XSS attacks via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT207483 - https://bugs.chromium.org/p/project-zero/issues/detail?id=1040 - https://www.exploit-db.com/exploits/41443/ - http://www.securitytracker.com/id/1037671 - http://www.securityfocus.com/bid/95723
CVE ID: CVE-2017-2362 State: PUBLISHED Published: 2017-02-20T08:35:00 Last Updated: 2024-08-05T13:55:04.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/41213/ - http://www.securityfocus.com/bid/95727 - https://support.apple.com/HT207485 - https
www.exploit-db.com/exploits/41213/ - http://www.securityfocus.com/bid/95727 - https://support.apple.com/HT207485 - https://security.gentoo.org/glsa/201706-15 - https://support.apple.com/HT207484 - https://support.apple.com/HT207482 - http://www.securitytracker.com/id/1037668
CVE ID: CVE-2017-2363 State: PUBLISHED Published: 2017-02-20T08:35:00 Last Updated: 2024-08-05T13:55:04.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. watchOS before 3.1.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95728 - https://support.apple.com/HT207487 - https://support.apple.com/HT207485 - https://se
//www.securityfocus.com/bid/95728 - https://support.apple.com/HT207487 - https://support.apple.com/HT207485 - https://security.gentoo.org/glsa/201706-15 - https://www.exploit-db.com/exploits/41449/ - https://support.apple.com/HT207484 - https://support.apple.com/HT207482 - http://www.securitytracker.com/id/1037668
CVE ID: CVE-2017-2364 State: PUBLISHED Published: 2017-02-20T08:35:00 Last Updated: 2024-08-05T13:55:04.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/41799/ - http://www.securitytracker.com/id/1038137 - http://www.securityfocus.com/bid/95725 - https://security.gentoo.org/glsa/201706-15 - https://support.
.com/id/1038137 - http://www.securityfocus.com/bid/95725 - https://security.gentoo.org/glsa/201706-15 - https://support.apple.com/HT207484 - https://support.apple.com/HT207482 - http://www.securitytracker.com/id/1037668
CVE ID: CVE-2017-2365 State: PUBLISHED Published: 2017-02-20T08:35:00 Last Updated: 2024-08-05T13:55:04.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95727 - https://support.apple.com/HT207485 - https://www.exploit-db.com/exploits/41453/ - https://security.gentoo.org/glsa/201
- https://support.apple.com/HT207485 - https://www.exploit-db.com/exploits/41453/ - https://security.gentoo.org/glsa/201706-15 - https://support.apple.com/HT207484 - https://support.apple.com/HT207482 - http://www.securitytracker.com/id/1037668
CVE ID: CVE-2017-2366 State: PUBLISHED Published: 2017-02-20T08:35:00 Last Updated: 2024-08-05T13:55:03.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. iCloud before 6.1.1 is affected. iTunes before 12.5.5 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT207486 - https://security.gentoo.org/glsa/201706-15 - https://sup
m Container: References: - https://support.apple.com/HT207486 - https://security.gentoo.org/glsa/201706-15 - https://support.apple.com/HT207481 - https://support.apple.com/HT207484 - http://www.securityfocus.com/bid/95733 - https://support.apple.com/HT207482 - http://www.securitytracker.com/id/1037668