Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-6960 State: PUBLISHED Published: 2019-07-29T15:30:28 Last Updated: 2024-08-06T07:36:34.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: edx-platform before 2015-09-17 allows XSS via a team name. Additional Analyst Notes: - CVE Program Container: References: - https://open.edx.org/announcements/cve-2015-6960/
CVE ID: CVE-2015-6961 State: PUBLISHED Published: 2017-10-18T20:00:00 Last Updated: 2024-08-06T07:36:34.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in gluon/tools.py in Web2py 2.9.11 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the _next parameter to user/logout. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/web2py/web2py/commit/e31a099cb3456fef471886339653430ae59056b0 - https://github.com/web2py/web2py/issues/731
CVE ID: CVE-2015-6962 State: PUBLISHED Published: 2015-09-17T15:00:00 Last Updated: 2024-08-06T07:36:35.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the web application in Farol allows remote attackers to execute arbitrary SQL commands via the email parameter to tkmonitor/estrutura/login/Login.actions.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/133610/Farol-SQL-Injection.html - https://www.exploit-db.com/exploits/38213/
CVE ID: CVE-2015-6963 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6964 State: PUBLISHED Published: 2023-09-25T00:00:00 Last Updated: 2024-09-24T17:39:24.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: MultiBit HD before 0.1.2 allows attackers to conduct bit-flipping attacks that insert unspendable Bitcoin addresses into the list that MultiBit uses to send fees to the developers. (Attackers cannot realistically steal these fees for themselves.) This occurs because there is no message authentication code (MAC). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://web.archive.org/web/20160506095434/https://multibit.org/blog/2015/07/25/bit-flipping-attack.html
CVE ID: CVE-2015-6965 State: PUBLISHED Published: 2015-09-16T14:00:00Z Last Updated: 2024-09-16T19:41:52.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the Contact Form Generator plugin 2.0.1 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) create a field, (2) update a field, (3) delete a field, (4) create a form, (5) update a form, (6) delete a form, (7) create a template, (8) update a template, (9) delete a template, or (10) conduct cross-site scripting (XSS) attacks via a crafted request to the cfg_forms page in wp-admin/admin.php. Additional
onduct cross-site scripting (XSS) attacks via a crafted request to the cfg_forms page in wp-admin/admin.php. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8176 - http://packetstormsecurity.com/files/133463/WordPress-Contact-Form-Generator-2.0.1-CSRF.html - https://www.exploit-db.com/exploits/38086/
CVE ID: CVE-2015-6966 State: PUBLISHED Published: 2015-09-16T14:00:00Z Last Updated: 2024-09-17T00:16:36.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Nibbleblog before 4.0.5 allow remote attackers to hijack the authentication of administrators for requests that (1) create a post via a new_simple action to admin.php or (2) conduct cross-site scripting (XSS) attacks via the content parameter in a new_simple action to admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2015/Sep/4 - http://blog.curesec.com/article/blog/NibbleBlog-403-CSRF-46.html - http://bl
://seclists.org/fulldisclosure/2015/Sep/4 - http://blog.curesec.com/article/blog/NibbleBlog-403-CSRF-46.html - http://blog.nibbleblog.com/post/nibbleblog-v4-0-5/
CVE ID: CVE-2015-6967 State: PUBLISHED Published: 2015-09-16T14:00:00Z Last Updated: 2024-09-17T01:56:43.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in the My Image plugin in Nibbleblog before 4.0.5 allows remote administrators to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in content/private/plugins/my_image/image.php. Additional Analyst Notes: - CVE Program Container: References: - http://blog.curesec.com/article/blog/NibbleBlog-403-Code-Execution-47.html - http://blog.nibbleblog.com/post/nibbleblog-v4-0-5/ - http://seclists.org/fulldisclosure/2015/Sep/
de-Execution-47.html - http://blog.nibbleblog.com/post/nibbleblog-v4-0-5/ - http://seclists.org/fulldisclosure/2015/Sep/5 - http://packetstormsecurity.com/files/133425/NibbleBlog-4.0.3-Shell-Upload.html
CVE ID: CVE-2015-6968 State: PUBLISHED Published: 2015-09-16T14:00:00Z Last Updated: 2024-09-16T16:27:59.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple incomplete blacklist vulnerabilities in the serendipity_isActiveFile function in include/functions_images.inc.php in Serendipity before 2.0.2 allow remote authenticated users to execute arbitrary PHP code by uploading a file with a (1) .pht or (2) .phtml extension. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2015/Sep/6 - http://blog.curesec.com/article/blog/Serendipity-201-Code-Execution-48.html - http://packetstormsecurity.com/files/133426/Serendipity-2.0.1-She
/article/blog/Serendipity-201-Code-Execution-48.html - http://packetstormsecurity.com/files/133426/Serendipity-2.0.1-Shell-Upload.html - http://blog.s9y.org/archives/265-Serendipity-2.0.2-Security-Fix-Release.html
CVE ID: CVE-2015-6969 State: PUBLISHED Published: 2015-09-16T14:00:00Z Last Updated: 2024-09-16T23:41:52.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in js/2k11.min.js in the 2k11 theme in Serendipity before 2.0.2 allows remote attackers to inject arbitrary web script or HTML via a user name in a comment, which is not properly handled in a Reply link. Additional Analyst Notes: - CVE Program Container: References: - http://blog.curesec.com/article/blog/Serendipity-201-Persistent-XSS-51.html - http://seclists.org/fulldisclosure/2015/Sep/9 - http://packetstormsecurity.com/files/133427/Serendipity-2.0.1-Cross-Site-Scripting.html - http:
ldisclosure/2015/Sep/9 - http://packetstormsecurity.com/files/133427/Serendipity-2.0.1-Cross-Site-Scripting.html - http://blog.s9y.org/archives/265-Serendipity-2.0.2-Security-Fix-Release.html
CVE ID: CVE-2015-6970 State: PUBLISHED Published: 2020-02-18T13:23:44 Last Updated: 2024-08-06T07:36:35.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface in Bosch Security Systems NBN-498 Dinion2X Day/Night IP Cameras with H.264 Firmware 4.54.0026 allows remote attackers to conduct XML injection attacks via the idstring parameter to rcp.xml. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/38369/
CVE ID: CVE-2015-6971 State: PUBLISHED Published: 2017-10-02T18:00:00 Last Updated: 2024-08-06T07:36:34.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lenovo System Update (formerly ThinkVantage System Update) before 5.07.0013 allows local users to submit commands to the System Update service (SUService.exe) and gain privileges by launching signed Lenovo executables. Additional Analyst Notes: - CVE Program Container: References: - https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2015-018/?fid=7172 - https://support.lenovo.com/us/en/product_security/lsu_privilege
CVE ID: CVE-2015-6972 State: PUBLISHED Published: 2015-09-16T19:00:00 Last Updated: 2024-08-06T07:36:34.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Ignite Realtime Openfire 3.10.2 allow remote attackers to inject arbitrary web script or HTML via the (1) groupchatName parameter to plugins/clientcontrol/create-bookmark.jsp; the (2) urlName parameter to plugins/clientcontrol/create-bookmark.jsp; the (3) hostname parameter to server-session-details.jsp; or the (4) search parameter to group-summary.jsp. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/133558/Openfire-3.1
dditional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/133558/Openfire-3.10.2-Cross-Site-Scripting.html - https://security.gentoo.org/glsa/201612-50 - https://www.exploit-db.com/exploits/38191/ - http://hyp3rlinx.altervista.org/advisories/AS-OPENFIRE-XSS.txt
CVE ID: CVE-2015-6973 State: PUBLISHED Published: 2015-09-16T19:00:00 Last Updated: 2024-08-06T07:36:34.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Ignite Realtime Openfire 3.10.2 allow remote attackers to hijack the authentication of administrators for requests that (1) change a password via a crafted request to user-password.jsp, (2) add users via a crafted request to user-create.jsp, (3) edit server settings or (4) disable SSL on the server via a crafted request to server-props.jsp, or (5) add clients via a crafted request to plugins/clientcontrol/permitted-clients.jsp. Additional Analyst Notes: - CVE Progra
add clients via a crafted request to plugins/clientcontrol/permitted-clients.jsp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/536470/100/0/threaded - https://security.gentoo.org/glsa/201612-50 - http://packetstormsecurity.com/files/133554/Openfire-3.10.2-Cross-Site-Request-Forgery.html - http://hyp3rlinx.altervista.org/advisories/AS-OPENFIRE-CSRF.txt - https://www.exploit-db.com/exploits/38192/
CVE ID: CVE-2015-6974 State: PUBLISHED Published: 2015-10-23T21:00:00 Last Updated: 2024-08-06T07:36:34.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: IOHIDFamily in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html - http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html - https://support.apple.com/HT205375 - http://lists.apple.com/archives/security-announce/2015/Oct/msg
/Oct/msg00002.html - https://support.apple.com/HT205375 - http://lists.apple.com/archives/security-announce/2015/Oct/msg00003.html - https://support.apple.com/HT205370 - https://support.apple.com/HT205378 - http://www.securitytracker.com/id/1033929
CVE ID: CVE-2015-6975 State: PUBLISHED Published: 2015-10-23T10:00:00 Last Updated: 2024-08-06T07:36:35.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: CoreText in Apple iOS before 9.1, OS X before 10.11.1, and iTunes before 12.3.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6992 and CVE-2015-7017. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html - http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html - https://support.apple.com/HT205375 - https://supp
://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html - https://support.apple.com/HT205375 - https://support.apple.com/HT205370 - https://support.apple.com/HT205372 - http://lists.apple.com/archives/security-announce/2015/Oct/msg00006.html - http://www.securitytracker.com/id/1033929
CVE ID: CVE-2015-6976 State: PUBLISHED Published: 2015-10-23T21:00:00 Last Updated: 2024-08-06T07:36:34.197Z Vendors: n/a Products: n/a Problem Types: n/a Description: FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6977, CVE-2015-6978, CVE-2015-6990, CVE-2015-6991, CVE-2015-6993, CVE-2015-7008, CVE-2015-7009, CVE-2015-7010, and CVE-2015-7018. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html - http://lists.apple.com/archives/securit
es: - http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html - http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html - https://support.apple.com/HT205375 - https://support.apple.com/HT205370 - http://www.securityfocus.com/bid/77263 - http://www.securitytracker.com/id/1033929
CVE ID: CVE-2015-6977 State: PUBLISHED Published: 2015-10-23T21:00:00 Last Updated: 2024-08-06T07:36:34.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6978, CVE-2015-6990, CVE-2015-6991, CVE-2015-6993, CVE-2015-7008, CVE-2015-7009, CVE-2015-7010, and CVE-2015-7018. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html - http://lists.apple.com/archives/securit
CVE ID: CVE-2015-6978 State: PUBLISHED Published: 2015-10-23T21:00:00 Last Updated: 2024-08-06T07:36:34.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6977, CVE-2015-6990, CVE-2015-6991, CVE-2015-6993, CVE-2015-7008, CVE-2015-7009, CVE-2015-7010, and CVE-2015-7018. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html - http://lists.apple.com/archives/securit
es: - http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html - http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html - https://support.apple.com/HT205375 - http://lists.apple.com/archives/security-announce/2015/Dec/msg00002.html - https://support.apple.com/HT205370 - http://www.zerodayinitiative.com/advisories/ZDI-15-533 - http://www.securityfocus.com/bid/77263 - https://support.apple.com/HT205641 - http://www.securitytracker.com/id/1033929
CVE ID: CVE-2015-6979 State: PUBLISHED Published: 2015-10-23T10:00:00 Last Updated: 2024-08-06T07:36:34.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: GasGauge in Apple iOS before 9.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html - http://lists.apple.com/archives/security-announce/2015/Dec/msg00002.html - https://support.apple.com/HT205370 - https://support.apple.com/HT205641 - http://www.securitytracker.com/id/1033929 - http://www.securityfocus.com/bi
05370 - https://support.apple.com/HT205641 - http://www.securitytracker.com/id/1033929 - http://www.securityfocus.com/bid/77268
CVE ID: CVE-2015-6980 State: PUBLISHED Published: 2016-01-11T11:00:00 Last Updated: 2024-08-06T07:36:34.785Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory Utility in Apple OS X before 10.11.1 mishandles authentication for new sessions, which allows local users to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html - https://support.apple.com/HT205375
CVE ID: CVE-2015-6981 State: PUBLISHED Published: 2015-10-23T10:00:00 Last Updated: 2024-08-06T07:36:34.786Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple iOS before 9.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-10-21-1. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html - https://support.apple.com/HT205370 - http://www.securitytracker.com/id/1033929
CVE ID: CVE-2015-6982 State: PUBLISHED Published: 2015-10-23T10:00:00 Last Updated: 2024-08-06T07:36:34.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple iOS before 9.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-10-21-1. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html - https://support.apple.com/HT205370 - http://www.securitytracker.com/id/1033929
CVE ID: CVE-2015-6983 State: PUBLISHED Published: 2015-10-23T21:00:00 Last Updated: 2024-08-06T07:36:34.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in Apple iOS before 9.1 and OS X before 10.11.1 allows attackers to write to arbitrary files via a crafted app that accesses AtomicBufferedFile descriptors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html - http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html - https://support.apple.com/HT205375 - https://support.apple.com/HT205370 - http://www.securityfocus.com/bid/77263 - http://www.security
t.apple.com/HT205375 - https://support.apple.com/HT205370 - http://www.securityfocus.com/bid/77263 - http://www.securitytracker.com/id/1033929
CVE ID: CVE-2015-6984 State: PUBLISHED Published: 2015-10-23T21:00:00 Last Updated: 2024-08-06T07:36:34.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: libarchive in Apple OS X before 10.11.1 allows attackers to write to arbitrary files via a crafted app that conducts an unspecified symlink attack. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html - https://support.apple.com/HT205375
CVE ID: CVE-2015-6985 State: PUBLISHED Published: 2015-10-23T21:00:00 Last Updated: 2024-08-06T07:36:35.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Type Services (ATS) in Apple OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web page. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html - https://support.apple.com/HT205375
CVE ID: CVE-2015-6986 State: PUBLISHED Published: 2015-10-23T10:00:00 Last Updated: 2024-08-06T07:36:34.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: com.apple.driver.AppleVXD393 in the Graphics Driver subsystem in Apple iOS before 9.1 allows attackers to execute arbitrary code via a crafted app that leverages an unspecified "type confusion." Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html - https://support.apple.com/HT205370 - http://www.securitytracker.com/id/1033929 - http://www.securityfocus.com/bid/77268
CVE ID: CVE-2015-6987 State: PUBLISHED Published: 2015-10-23T21:00:00 Last Updated: 2024-08-06T07:36:34.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: The File Bookmark component in Apple OS X before 10.11.1 allows local users to cause a denial of service (application crash) via crafted bookmark metadata in a folder. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html - https://support.apple.com/HT205375
CVE ID: CVE-2015-6988 State: PUBLISHED Published: 2015-10-23T21:00:00 Last Updated: 2024-08-06T07:36:34.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Apple iOS before 9.1 and OS X before 10.11.1 does not initialize an unspecified data structure, which allows remote attackers to execute arbitrary code via vectors involving an unknown network-connectivity requirement. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html - http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html - https://support.apple.com/HT205375 - https://support.apple.com/HT205370 - http://www
y-announce/2015/Oct/msg00002.html - https://support.apple.com/HT205375 - https://support.apple.com/HT205370 - http://www.securityfocus.com/bid/77263 - http://www.securitytracker.com/id/1033929
CVE ID: CVE-2015-6989 State: PUBLISHED Published: 2015-10-23T21:00:00 Last Updated: 2024-08-06T07:36:35.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: Grand Central Dispatch in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted package that is mishandled during dispatch calls. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html - http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html - https://support.apple.com/HT205375 - http://lists.apple.com/archive
/archives/security-announce/2015/Oct/msg00002.html - https://support.apple.com/HT205375 - http://lists.apple.com/archives/security-announce/2015/Oct/msg00003.html - https://support.apple.com/HT205370 - https://support.apple.com/HT205378 - http://www.securitytracker.com/id/1033929
CVE ID: CVE-2015-6990 State: PUBLISHED Published: 2015-10-23T21:00:00 Last Updated: 2024-08-06T07:36:34.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6977, CVE-2015-6978, CVE-2015-6991, CVE-2015-6993, CVE-2015-7008, CVE-2015-7009, CVE-2015-7010, and CVE-2015-7018. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html - http://lists.apple.com/archives/securit
CVE ID: CVE-2015-6991 State: PUBLISHED Published: 2015-10-23T21:00:00 Last Updated: 2024-08-06T07:36:34.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6977, CVE-2015-6978, CVE-2015-6990, CVE-2015-6993, CVE-2015-7008, CVE-2015-7009, CVE-2015-7010, and CVE-2015-7018. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html - http://lists.apple.com/archives/securit