Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-4336 State: PUBLISHED Published: 2014-06-22T21:00:00 Last Updated: 2024-08-06T11:12:35.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: The generate_local_queue function in utils/cups-browsed.c in cups-browsed in cups-filters before 1.0.53 allows remote IPP printers to execute arbitrary commands via shell metacharacters in the host name. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2707. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2014/04/25/7 - http://bzr.linuxfoundation.org/loggerhead/openprinting/cups-filters/revision/7194 - http://openwall.com/lists/oss-security/2014/0
r.linuxfoundation.org/loggerhead/openprinting/cups-filters/revision/7194 - http://openwall.com/lists/oss-security/2014/06/19/12
CVE ID: CVE-2014-4337 State: PUBLISHED Published: 2014-06-22T21:00:00 Last Updated: 2024-08-06T11:12:35.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: The process_browse_data function in utils/cups-browsed.c in cups-browsed in cups-filters before 1.0.53 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via crafted packet data. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-1795.html - http://secunia.com/advisories/62044 - http://bzr.linuxfoundation.org/loggerhead/openprinting/cups-filters/revision/7194 - http://www.securityfocus.com/bid/68122 - http://openwall.com/lists/oss
gerhead/openprinting/cups-filters/revision/7194 - http://www.securityfocus.com/bid/68122 - http://openwall.com/lists/oss-security/2014/06/19/12
CVE ID: CVE-2014-4338 State: PUBLISHED Published: 2014-06-22T21:00:00 Last Updated: 2024-08-06T11:12:34.736Z Vendors: n/a Products: n/a Problem Types: n/a Description: cups-browsed in cups-filters before 1.0.53 allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging a malformed cups-browsed.conf BrowseAllow directive that is interpreted as granting browse access to all IP addresses. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-1795.html - http://www.securityfocus.com/bid/68124 - https://bugs.linuxfoundation.org/show_bug.cgi?id=1204 - http://secunia.com/advisories/62044 - http://open
om/bid/68124 - https://bugs.linuxfoundation.org/show_bug.cgi?id=1204 - http://secunia.com/advisories/62044 - http://openwall.com/lists/oss-security/2014/04/25/7 - http://openwall.com/lists/oss-security/2014/06/19/12
CVE ID: CVE-2014-4341 State: PUBLISHED Published: 2014-07-20T10:00:00 Last Updated: 2024-08-06T11:12:35.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: MIT Kerberos 5 (aka krb5) before 1.12.2 allows remote attackers to cause a denial of service (buffer over-read and application crash) by injecting invalid tokens into a GSSAPI application session. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/krb5/krb5/commit/e6ae703ae597d798e310368d52b8f38ee11c6a73 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94904 - http://aix.software.ibm.com/aix/efixes/security/nas_advisory1.asc - http://rhn.redhat.com/errata/RHSA-2015-0439.html - http://secu
.software.ibm.com/aix/efixes/security/nas_advisory1.asc - http://rhn.redhat.com/errata/RHSA-2015-0439.html - http://secunia.com/advisories/60448 - http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136360.html - http://www.securityfocus.com/bid/68909 - http://krbdev.mit.edu/rt/Ticket/Display.html?id=7949 - http://www.debian.org/security/2014/dsa-3000 - http://www.mandriva.com/security/advisories?name=MDVSA-2014:165 - http://security.gentoo.org/glsa/glsa-201412-53.xml - http://www.securitytracker.com/id/1030706 - http://secunia.com/advisories/60082 - http://advisories.mageia.org/MGASA-2014-0345.html - http://secunia.com/advisories/59102
CVE ID: CVE-2014-4342 State: PUBLISHED Published: 2014-07-20T10:00:00 Last Updated: 2024-08-06T11:12:35.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: MIT Kerberos 5 (aka krb5) 1.7.x through 1.12.x before 1.12.2 allows remote attackers to cause a denial of service (buffer over-read or NULL pointer dereference, and application crash) by injecting invalid tokens into a GSSAPI application session. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/krb5/krb5/commit/e6ae703ae597d798e310368d52b8f38ee11c6a73 - http://www.securityfocus.com/bid/68908 - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://rhn.redhat.com/
cus.com/bid/68908 - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://rhn.redhat.com/errata/RHSA-2015-0439.html - http://krbdev.mit.edu/rt/Ticket/Display.html?id=7949 - http://www.debian.org/security/2014/dsa-3000 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94903 - http://www.mandriva.com/security/advisories?name=MDVSA-2014:165 - http://www.securitytracker.com/id/1030706 - http://secunia.com/advisories/60082 - http://advisories.mageia.org/MGASA-2014-0345.html - http://secunia.com/advisories/59102
CVE ID: CVE-2014-4343 State: PUBLISHED Published: 2014-08-14T01:00:00 Last Updated: 2024-08-06T11:12:35.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in the init_ctx_reselect function in the SPNEGO initiator in lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) 1.10.x through 1.12.x before 1.12.2 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via network traffic that appears to come from an intended acceptor, but specifies a security mechanism different from the one proposed by the initiator. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/krb
e one proposed by the initiator. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/krb5/krb5/commit/f18ddf5d82de0ab7591a36e465bc24225776940f - http://aix.software.ibm.com/aix/efixes/security/nas_advisory1.asc - http://secunia.com/advisories/61052 - http://rhn.redhat.com/errata/RHSA-2015-0439.html - http://secunia.com/advisories/60448 - http://krbdev.mit.edu/rt/Ticket/Display.html?id=7969 - http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136360.html - http://support.f5.com/kb/en-us/solutions/public/15000/500/sol15553.html - http://www.securityfocus.com/bid/69159 - http://www.debian.org/security/2014/dsa-3000 - http://security.gentoo.org/
ml - http://www.securityfocus.com/bid/69159 - http://www.debian.org/security/2014/dsa-3000 - http://security.gentoo.org/glsa/glsa-201412-53.xml - http://www.osvdb.org/109390 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95211 - http://www.securitytracker.com/id/1030706 - http://secunia.com/advisories/60082 - http://advisories.mageia.org/MGASA-2014-0345.html - https://bugzilla.redhat.com/show_bug.cgi?id=1121876 - http://secunia.com/advisories/59102
CVE ID: CVE-2014-4344 State: PUBLISHED Published: 2014-08-14T01:00:00 Last Updated: 2024-08-06T11:12:35.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: The acc_ctx_cont function in the SPNEGO acceptor in lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) 1.5.x through 1.12.x before 1.12.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty continuation token at a certain point during a SPNEGO negotiation. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/krb5/krb5/commit/a7886f0ed1277c69142b14a2c6629175a6331edc - https://bugzilla.redhat.com/show_bug.cgi?id=1121877 - http
m/krb5/krb5/commit/a7886f0ed1277c69142b14a2c6629175a6331edc - https://bugzilla.redhat.com/show_bug.cgi?id=1121877 - https://github.com/krb5/krb5/commit/524688ce87a15fc75f87efc8c039ba4c7d5c197b - https://exchange.xforce.ibmcloud.com/vulnerabilities/95210 - http://aix.software.ibm.com/aix/efixes/security/nas_advisory1.asc - http://rhn.redhat.com/errata/RHSA-2015-0439.html - http://secunia.com/advisories/60448 - http://support.f5.com/kb/en-us/solutions/public/15000/500/sol15561.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136360.html - http://secunia.com/advisories/61051 - http://www.debian.org/security/2014/dsa-3000 - http://krbdev.mit.edu/rt/Ticket/Display.html
cunia.com/advisories/61051 - http://www.debian.org/security/2014/dsa-3000 - http://krbdev.mit.edu/rt/Ticket/Display.html?id=7970 - http://www.mandriva.com/security/advisories?name=MDVSA-2014:165 - http://www.securityfocus.com/bid/69160 - http://www.osvdb.org/109389 - http://www.securitytracker.com/id/1030706 - http://secunia.com/advisories/60082 - http://advisories.mageia.org/MGASA-2014-0345.html - http://secunia.com/advisories/59102
CVE ID: CVE-2014-4345 State: PUBLISHED Published: 2014-08-14T01:00:00 Last Updated: 2024-08-06T11:12:35.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the krb5_encode_krbsecretkey function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in the LDAP KDB module in kadmind in MIT Kerberos 5 (aka krb5) 1.6.x through 1.11.x before 1.11.6 and 1.12.x before 1.12.2 allows remote authenticated users to cause a denial of service (buffer overflow) or possibly execute arbitrary code via a series of "cpw -keepold" commands. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136640.ht
: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136640.html - http://secunia.com/advisories/61353 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95212 - https://github.com/krb5/krb5/commit/dc7ed55c689d57de7f7408b34631bf06fec9dab1 - http://secunia.com/advisories/59993 - http://krbdev.mit.edu/rt/Ticket/Display.html?id=7980 - http://linux.oracle.com/errata/ELSA-2014-1255.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-August/137056.html - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://lists.opensuse.org/opensuse-updates/2014-08/msg00030.html - http://rhn.redhat.com/
sory/cpuoct2017-3236626.html - http://lists.opensuse.org/opensuse-updates/2014-08/msg00030.html - http://rhn.redhat.com/errata/RHSA-2015-0439.html - https://blogs.oracle.com/sunsecurity/entry/cve_2014_4345_numeric_errors - http://secunia.com/advisories/61314 - http://lists.opensuse.org/opensuse-security-announce/2014-08/msg00009.html - http://www.securitytracker.com/id/1030705 - https://bugzilla.redhat.com/show_bug.cgi?id=1128157 - http://secunia.com/advisories/60535 - http://www.osvdb.org/109908 - http://www.securityfocus.com/bid/69168 - http://www.debian.org/security/2014/dsa-3000 - http://www.mandriva.com/security/advisories?name=MDVSA-2014:165 - http://security.gentoo.org/glsa/glsa-20141
/dsa-3000 - http://www.mandriva.com/security/advisories?name=MDVSA-2014:165 - http://security.gentoo.org/glsa/glsa-201412-53.xml - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 - http://secunia.com/advisories/59415 - http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2014-001.txt - http://rhn.redhat.com/errata/RHSA-2014-1255.html - http://secunia.com/advisories/60776 - https://github.com/krb5/krb5/pull/181 - http://advisories.mageia.org/MGASA-2014-0345.html - http://secunia.com/advisories/59102
CVE ID: CVE-2014-4346 State: PUBLISHED Published: 2014-07-16T14:00:00 Last Updated: 2024-08-06T11:12:35.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in administration user interface in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway (formerly Access Gateway Enterprise Edition) 10.1 before 10.1-126.12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140716-2_Citrix_NetScaler_Multiple_Vulnerabilities_v10.txt - http://www.securitytra
eccons/prod/temedia/advisories_txt/20140716-2_Citrix_NetScaler_Multiple_Vulnerabilities_v10.txt - http://www.securitytracker.com/id/1030573 - http://support.citrix.com/article/CTX140863 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94493 - http://secunia.com/advisories/59942 - http://seclists.org/fulldisclosure/2014/Jul/77 - http://www.securitytracker.com/id/1030572 - http://www.securityfocus.com/archive/1/532802/100/0/threaded - http://www.securityfocus.com/bid/68535
CVE ID: CVE-2014-4347 State: PUBLISHED Published: 2014-07-16T14:00:00 Last Updated: 2024-08-06T11:12:35.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway (formerly Access Gateway Enterprise Edition) before 9.3-62.4 and 10.x before 10.1-126.12 allows attackers to obtain sensitive information via vectors related to a cookie. Additional Analyst Notes: - CVE Program Container: References: - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140716-2_Citrix_NetScaler_Multiple_Vulnerabilities_v10.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/94494 - http://www.securitytrack
Multiple_Vulnerabilities_v10.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/94494 - http://www.securitytracker.com/id/1030573 - http://support.citrix.com/article/CTX140863 - http://www.securityfocus.com/bid/68537 - http://secunia.com/advisories/59942 - http://seclists.org/fulldisclosure/2014/Jul/77 - http://www.securitytracker.com/id/1030572 - http://www.securityfocus.com/archive/1/532802/100/0/threaded
CVE ID: CVE-2014-4348 State: PUBLISHED Published: 2014-06-25T10:00:00 Last Updated: 2024-08-06T11:12:35.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.2.x before 4.2.4 allow remote authenticated users to inject arbitrary web script or HTML via a crafted (1) database name or (2) table name that is improperly handled after presence in (a) the favorite list or (b) recent tables. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/phpmyadmin/phpmyadmin/commit/d18a2dd9faad7e0e96df799b59e16ef587afb838 - http://phpmyadmin.net/home_page/security/PMASA-2014-2.php - https://github.com/p
a2dd9faad7e0e96df799b59e16ef587afb838 - http://phpmyadmin.net/home_page/security/PMASA-2014-2.php - https://github.com/phpmyadmin/phpmyadmin/commit/cb7c703c03f656debcea2a16468bd53660fc888e - http://www.securityfocus.com/bid/68201
CVE ID: CVE-2014-4349 State: PUBLISHED Published: 2014-06-25T10:00:00 Last Updated: 2024-08-06T11:12:35.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.1.x before 4.1.14.1 and 4.2.x before 4.2.4 allow remote authenticated users to inject arbitrary web script or HTML via a crafted table name that is improperly handled after a (1) hide or (2) unhide action. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2014-08/msg00045.html - https://github.com/phpmyadmin/phpmyadmin/commit/daa98d0c7ed24b529dc5df0d5905873acd0b00be - http://phpmyadmin.net/home_page/sec
//github.com/phpmyadmin/phpmyadmin/commit/daa98d0c7ed24b529dc5df0d5905873acd0b00be - http://phpmyadmin.net/home_page/security/PMASA-2014-3.php - http://www.securityfocus.com/bid/68205 - http://secunia.com/advisories/60397 - https://github.com/phpmyadmin/phpmyadmin/commit/d4f754c937f9e2c0beadff5b2e38215dde1d6a79
CVE ID: CVE-2014-4350 State: PUBLISHED Published: 2014-09-19T10:00:00 Last Updated: 2024-08-06T11:12:35.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in QT Media Foundation in Apple OS X before 10.9.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted MIDI file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/69908 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96050 - https://support.apple.com/kb/HT6493 - http://www.securitytracker.com/id/1030868 - http://support.apple.com/kb/HT6443
CVE ID: CVE-2014-4351 State: PUBLISHED Published: 2014-10-18T01:00:00 Last Updated: 2024-08-06T11:12:35.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in QuickTime in Apple OS X before 10.10 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted audio samples in an m4a file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/70643 - https://support.apple.com/kb/HT6493 - http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/97626 - https://support.apple.com/kb/HT6535 - http://www.securitytracke
s://exchange.xforce.ibmcloud.com/vulnerabilities/97626 - https://support.apple.com/kb/HT6535 - http://www.securitytracker.com/id/1031065
CVE ID: CVE-2014-4352 State: PUBLISHED Published: 2014-09-18T10:00:00 Last Updated: 2024-08-06T11:12:35.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: Address Book in Apple iOS before 8 relies on the hardware UID for its encryption key, which makes it easier for physically proximate attackers to obtain sensitive information by obtaining this UID. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/69932 - http://support.apple.com/kb/HT6441 - http://www.securitytracker.com/id/1030866 - http://www.securityfocus.com/bid/69882 - http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html - https://exchange.xforce.ibmcloud.com/vu
m/bid/69882 - http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/96084
CVE ID: CVE-2014-4353 State: PUBLISHED Published: 2014-09-18T10:00:00 Last Updated: 2024-08-06T11:12:35.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in iMessage in Apple iOS before 8 allows attackers to obtain sensitive information by leveraging the presence of an attachment after the deletion of its parent (1) iMessage or (2) MMS. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/69951 - http://support.apple.com/kb/HT6441 - http://www.securitytracker.com/id/1030866 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96095 - http://www.securityfocus.com/bid/69882 - http://archives.neohapsis.com/archives/bugt
bmcloud.com/vulnerabilities/96095 - http://www.securityfocus.com/bid/69882 - http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html
CVE ID: CVE-2014-4354 State: PUBLISHED Published: 2014-09-18T10:00:00 Last Updated: 2024-08-06T11:12:35.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple iOS before 8 enables Bluetooth during all upgrade actions, which makes it easier for remote attackers to bypass intended access restrictions via a Bluetooth session. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/69943 - http://support.apple.com/kb/HT6441 - http://www.securitytracker.com/id/1030866 - http://www.securityfocus.com/bid/69882 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96089 - http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html
CVE ID: CVE-2014-4355 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-4356 State: PUBLISHED Published: 2014-09-18T10:00:00 Last Updated: 2024-08-06T11:12:35.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple iOS before 8 does not follow the intended configuration setting for text-message preview on the lock screen, which allows physically proximate attackers to obtain sensitive information by reading this screen. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/69922 - http://support.apple.com/kb/HT6441 - http://www.securitytracker.com/id/1030866 - http://www.securityfocus.com/bid/69882 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96081 - http://archives.neohapsis.co
.securityfocus.com/bid/69882 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96081 - http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html
CVE ID: CVE-2014-4357 State: PUBLISHED Published: 2014-09-18T10:00:00 Last Updated: 2024-08-06T11:12:35.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: Accounts Framework in Apple iOS before 8 and Apple TV before 7 allows attackers to obtain sensitive information by reading log data that was not intended to be present in a log. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT6441 - http://www.securitytracker.com/id/1030866 - http://support.apple.com/kb/HT6442 - http://archives.neohapsis.com/archives/bugtraq/2014-09/0107.html - http://www.securityfocus.com/bid/69882 - http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.htm
-09/0107.html - http://www.securityfocus.com/bid/69882 - http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html - http://www.securityfocus.com/bid/69930 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96107
CVE ID: CVE-2014-4358 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-4359 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-4360 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-4361 State: PUBLISHED Published: 2014-09-18T10:00:00 Last Updated: 2024-08-06T11:12:35.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Home & Lock Screen subsystem in Apple iOS before 8 does not properly restrict the private API for app prominence, which allows attackers to determine the frontmost app by leveraging access to a crafted background app. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/69949 - http://support.apple.com/kb/HT6441 - http://www.securitytracker.com/id/1030866 - http://www.securityfocus.com/bid/69882 - http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html - https://exchang
p://www.securityfocus.com/bid/69882 - http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/96094
CVE ID: CVE-2014-4362 State: PUBLISHED Published: 2014-09-18T10:00:00 Last Updated: 2024-08-06T11:12:35.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Sandbox Profiles implementation in Apple iOS before 8 does not properly restrict the third-party app sandbox profile, which allows attackers to obtain sensitive Apple ID information via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT6441 - http://www.securityfocus.com/bid/69920 - http://www.securitytracker.com/id/1030866 - http://www.securityfocus.com/bid/69882 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96104 - http://archives.neohapsis.com/archives
ocus.com/bid/69882 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96104 - http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html
CVE ID: CVE-2014-4363 State: PUBLISHED Published: 2014-09-18T10:00:00 Last Updated: 2024-08-06T11:12:35.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: Safari in Apple iOS before 8 does not properly restrict the autofilling of passwords in forms, which allows remote attackers to obtain sensitive information via (1) an http web site, (2) an https web site with an unacceptable X.509 certificate, or (3) an IFRAME element. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/69909 - http://support.apple.com/kb/HT6441 - http://www.securitytracker.com/id/1030866 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96075 - http://www.se