Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-2367 State: PUBLISHED Published: 2017-04-02T01:36:00 Last Updated: 2024-08-05T13:55:03.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038137 - https://support.apple.com/HT207601 - http://www.securityfocus.com/bid/97130 - https://www.exploit-db.com/exploits/41801/
ttps://support.apple.com/HT207601 - http://www.securityfocus.com/bid/97130 - https://www.exploit-db.com/exploits/41801/ - https://security.gentoo.org/glsa/201706-15 - https://support.apple.com/HT207600 - https://support.apple.com/HT207617
CVE ID: CVE-2017-2368 State: PUBLISHED Published: 2017-02-20T08:35:00 Last Updated: 2024-08-05T13:55:04.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. The issue involves the "Contacts" component. It allows remote attackers to cause a denial of service (application crash) via a crafted contact card. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95722 - https://support.apple.com/HT207482 - http://www.securitytracker.com/id/1037668
CVE ID: CVE-2017-2369 State: PUBLISHED Published: 2017-02-20T08:35:00 Last Updated: 2024-08-05T13:55:04.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95727 - https://support.apple.com/HT207485 - https://security.gentoo.org/glsa/201706-15 - https
ww.securityfocus.com/bid/95727 - https://support.apple.com/HT207485 - https://security.gentoo.org/glsa/201706-15 - https://www.exploit-db.com/exploits/41215/ - https://support.apple.com/HT207484 - https://support.apple.com/HT207482 - http://www.securitytracker.com/id/1037668
CVE ID: CVE-2017-2370 State: PUBLISHED Published: 2017-02-20T08:35:00 Last Updated: 2024-08-05T13:55:04.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. macOS before 10.12.3 is affected. tvOS before 10.1.1 is affected. watchOS before 3.1.3 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (buffer overflow) via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/project-zero/issues/detail?id=1004 - https://www.exploit-db.com/exploits/41163
References: - https://bugs.chromium.org/p/project-zero/issues/detail?id=1004 - https://www.exploit-db.com/exploits/41163/ - https://support.apple.com/HT207487 - https://support.apple.com/HT207483 - http://www.securityfocus.com/bid/95731 - https://support.apple.com/HT207485 - https://support.apple.com/HT207482 - http://www.securitytracker.com/id/1037668
CVE ID: CVE-2017-2371 State: PUBLISHED Published: 2017-02-20T08:35:00 Last Updated: 2024-08-05T13:55:04.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. The issue involves the "WebKit" component, which allows remote attackers to launch popups via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/41451/ - https://security.gentoo.org/glsa/201706-15 - https://support.apple.com/HT207482 - http://www.securitytracker.com/id/1037668 - http://www.securityfocus.com/bid/95735
CVE ID: CVE-2017-2372 State: PUBLISHED Published: 2017-02-20T08:35:00 Last Updated: 2024-08-05T13:55:04.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. GarageBand before 10.1.5 is affected. Logic Pro X before 10.3 is affected. The issue involves the "Projects" component, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted GarageBand project file. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT207476 - http://www.talosintelligence.com/reports/TALOS-2016-0262/ - http://www.securityfocus.com/bid/95627 - https://suppor
76 - http://www.talosintelligence.com/reports/TALOS-2016-0262/ - http://www.securityfocus.com/bid/95627 - https://support.apple.com/HT207477 - http://www.securitytracker.com/id/1037627
CVE ID: CVE-2017-2373 State: PUBLISHED Published: 2017-02-20T08:35:00 Last Updated: 2024-08-05T13:55:04.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/41216/ - http://www.securityfocus.com/bid/95727 - https://support.apple.com/HT207485 - https
www.exploit-db.com/exploits/41216/ - http://www.securityfocus.com/bid/95727 - https://support.apple.com/HT207485 - https://security.gentoo.org/glsa/201706-15 - https://support.apple.com/HT207484 - https://support.apple.com/HT207482 - http://www.securitytracker.com/id/1037668
CVE ID: CVE-2017-2374 State: PUBLISHED Published: 2017-02-20T08:35:00 Last Updated: 2024-08-05T13:55:04.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. GarageBand before 10.1.6 is affected. The issue involves the "Projects" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted GarageBand project file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96171 - https://support.apple.com/HT207518 - http://www.securitytracker.com/id/1037868 - http://www.talosintelligence.com/reports/TALOS-2
upport.apple.com/HT207518 - http://www.securitytracker.com/id/1037868 - http://www.talosintelligence.com/reports/TALOS-2017-0275/
CVE ID: CVE-2017-2375 State: PUBLISHED Published: 2021-12-23T19:48:21 Last Updated: 2024-08-05T13:55:04.109Z Vendors: Apple Products: iOS Problem Types: Updates for CallKit call history are sent to iCloud Description: An issue existed in preventing the uploading of CallKit call history to iCloud. This issue was addressed through improved logic. This issue is fixed in iOS 10.2.1. Updates for CallKit call history are sent to iCloud. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT207482
CVE ID: CVE-2017-2376 State: PUBLISHED Published: 2017-04-02T01:36:00 Last Updated: 2024-08-05T13:55:04.019Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "Safari" component. It allows remote attackers to spoof the address bar by leveraging text input during the loading of a page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97129 - http://www.securitytracker.com/id/1038137 - https://security.gentoo.org/glsa/201706-15 - https://support.apple.com/HT207600 - https://support.apple.com/HT207617
CVE ID: CVE-2017-2377 State: PUBLISHED Published: 2017-04-02T01:36:00 Last Updated: 2024-08-05T13:55:04.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "WebKit Web Inspector" component. It allows attackers to cause a denial of service (memory corruption and application crash) by leveraging a window-close action during a debugger-pause state. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97129 - http://www.securitytracker.com/id/1038137 - https://security.gentoo.org/glsa/201706-15 - https://su
ocus.com/bid/97129 - http://www.securitytracker.com/id/1038137 - https://security.gentoo.org/glsa/201706-15 - https://support.apple.com/HT207600 - https://support.apple.com/HT207617
CVE ID: CVE-2017-2378 State: PUBLISHED Published: 2017-04-02T01:36:00 Last Updated: 2024-08-05T13:55:04.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves bookmark creation in the "WebKit" component. It allows remote attackers to execute arbitrary code or spoof a bookmark by leveraging mishandling of links during drag-and-drop actions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97129 - http://www.securitytracker.com/id/1038137 - https://support.apple.com/HT207600 - https://support.apple.com/HT207
97129 - http://www.securitytracker.com/id/1038137 - https://support.apple.com/HT207600 - https://support.apple.com/HT207617
CVE ID: CVE-2017-2379 State: PUBLISHED Published: 2017-04-02T01:36:00 Last Updated: 2024-08-05T13:55:04.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Carbon" component. It allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via a crafted .dfont file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97137 - https://support.apple.com/HT207601 - https://support.apple
ainer: References: - http://www.securityfocus.com/bid/97137 - https://support.apple.com/HT207601 - https://support.apple.com/HT207615 - http://www.securitytracker.com/id/1038138 - https://support.apple.com/HT207602 - https://support.apple.com/HT207617
CVE ID: CVE-2017-2380 State: PUBLISHED Published: 2017-04-02T01:36:00 Last Updated: 2024-08-05T13:55:04.011Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the Simple Certificate Enrollment Protocol (SCEP) implementation in the "Profiles" component. It allows remote attackers to bypass cryptographic protection mechanisms by leveraging DES support. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97138 - https://support.apple.com/HT207617
CVE ID: CVE-2017-2381 State: PUBLISHED Published: 2017-04-02T01:36:00 Last Updated: 2024-08-05T13:55:05.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "sudo" component. It allows remote authenticated users to gain privileges by leveraging membership in the admin group on a network directory server. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97140 - https://support.apple.com/HT207615 - http://www.securitytracker.com/id/1038138
CVE ID: CVE-2017-2382 State: PUBLISHED Published: 2017-04-02T01:36:00 Last Updated: 2024-08-05T13:55:04.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. macOS Server before 5.3 is affected. The issue involves the "Wiki Server" component. It allows remote attackers to enumerate user accounts via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038144 - http://www.securityfocus.com/bid/97128 - https://support.apple.com/HT207604
CVE ID: CVE-2017-2383 State: PUBLISHED Published: 2017-04-02T01:36:00 Last Updated: 2024-08-05T13:55:05.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iCloud before 6.2 on Windows is affected. iTunes before 12.6 on Windows is affected. The issue involves cleartext client-certificate transmission in the "APNs Server" component. It allows man-in-the-middle attackers to track users via correlation with this certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038157 - http://www.securityfocus.com/bid/97175 - https://support.apple.com/HT207607 - https://support.apple.co
.com/id/1038157 - http://www.securityfocus.com/bid/97175 - https://support.apple.com/HT207607 - https://support.apple.com/HT207599
CVE ID: CVE-2017-2384 State: PUBLISHED Published: 2017-04-02T01:36:00 Last Updated: 2024-08-05T13:55:05.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves mishandling of deletion within the SQLite subsystem of the "Safari" component. It allows local users to identify the web-site visits that occurred in Private Browsing mode. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038139 - http://www.securityfocus.com/bid/97138 - https://support.apple.com/HT207617
CVE ID: CVE-2017-2385 State: PUBLISHED Published: 2017-04-02T01:36:00 Last Updated: 2024-08-05T13:55:05.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. Safari before 10.1 is affected. The issue involves the "Safari Login AutoFill" component. It allows local users to obtain access to locked keychain items via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038137 - https://support.apple.com/HT207600 - http://www.securityfocus.com/bid/97136
CVE ID: CVE-2017-2386 State: PUBLISHED Published: 2017-04-02T01:36:00 Last Updated: 2024-08-05T13:55:04.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038137 - https://support.apple.com/HT207601 - http://www.securityfocus.com/bid/97130 - https://security.gentoo.org/glsa/201706-15
ttps://support.apple.com/HT207601 - http://www.securityfocus.com/bid/97130 - https://security.gentoo.org/glsa/201706-15 - https://support.apple.com/HT207600 - https://support.apple.com/HT207617
CVE ID: CVE-2017-2387 State: PUBLISHED Published: 2017-04-07T11:12:00 Last Updated: 2024-08-05T13:55:05.836Z Vendors: n/a Products: Apple Music before 2.0 for Android Problem Types: missing SSL certificate check Description: The Apple Music (aka com.apple.android.music) application before 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT207605 - http://www.info-sec.ca/advisories/Apple-Music.html - http://www.securityfocus.com/bid/97390
CVE ID: CVE-2017-2388 State: PUBLISHED Published: 2017-04-02T01:36:00 Last Updated: 2024-08-05T13:55:05.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "IOFireWireFamily" component. It allows attackers to cause a denial of service (NULL pointer dereference) via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97140 - https://support.apple.com/HT207615 - http://www.securitytracker.com/id/1038138
CVE ID: CVE-2017-2389 State: PUBLISHED Published: 2017-04-02T01:36:00 Last Updated: 2024-08-05T13:55:04.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "Safari" component. It allows remote attackers to spoof an HTTP authentication sheet or cause a denial of service via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97129 - http://www.securitytracker.com/id/1038137 - https://support.apple.com/HT207600 - https://support.apple.com/HT207617
CVE ID: CVE-2017-2390 State: PUBLISHED Published: 2017-04-02T01:36:00 Last Updated: 2024-08-05T13:55:05.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves symlink mishandling in the "libarchive" component. It allows local users to change arbitrary directory permissions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97137 - https://support.apple.com/HT207601 - https://support.apple.com/HT207615 - http://www.securi
ecurityfocus.com/bid/97137 - https://support.apple.com/HT207601 - https://support.apple.com/HT207615 - http://www.securitytracker.com/id/1038138 - https://support.apple.com/HT207602 - https://support.apple.com/HT207617
CVE ID: CVE-2017-2391 State: PUBLISHED Published: 2017-04-02T01:36:00 Last Updated: 2024-08-05T13:55:05.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. Pages before 6.1, Numbers before 4.1, and Keynote before 7.1 on macOS and Pages before 3.1, Numbers before 3.1, and Keynote before 3.1 on iOS are affected. The issue involves the "Export" component. It allows users to bypass iWork PDF password protection by leveraging use of 40-bit RC4. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038135 - http://www.securitytracker.com/id/1038134 - https://support.apple.com/HT207595 - htt
ww.securitytracker.com/id/1038135 - http://www.securitytracker.com/id/1038134 - https://support.apple.com/HT207595 - http://www.securitytracker.com/id/1038136 - http://www.securityfocus.com/bid/97126
CVE ID: CVE-2017-2392 State: PUBLISHED Published: 2017-04-02T01:36:00 Last Updated: 2024-08-05T13:55:05.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. Safari before 10.1 is affected. The issue involves the "WebKit" component. It allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97140 - http://www.securitytracker.com/id/1038138 - https://security.gentoo.org/glsa/201706-15 - https://support.apple.com/HT207600
CVE ID: CVE-2017-2393 State: PUBLISHED Published: 2017-04-02T01:36:00 Last Updated: 2024-08-05T13:55:05.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "Safari Reader" component. It allows remote attackers to conduct Universal XSS (UXSS) attacks via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038139 - http://www.securityfocus.com/bid/97138 - https://support.apple.com/HT207617
CVE ID: CVE-2017-2394 State: PUBLISHED Published: 2017-04-02T01:36:00 Last Updated: 2024-08-05T13:55:05.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038137 - https://support.apple.com/HT207601 - http://www.securityfocus.com/bid/97130 - https://secu
uritytracker.com/id/1038137 - https://support.apple.com/HT207601 - http://www.securityfocus.com/bid/97130 - https://security.gentoo.org/glsa/201706-15 - https://support.apple.com/HT207600 - https://support.apple.com/HT207617
CVE ID: CVE-2017-2395 State: PUBLISHED Published: 2017-04-02T01:36:00 Last Updated: 2024-08-05T13:55:05.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038137 - https://support.apple.com/HT207601 - http://www.securityfocus.com/bid/97130 - https://secu
CVE ID: CVE-2017-2396 State: PUBLISHED Published: 2017-04-02T01:36:00 Last Updated: 2024-08-05T13:55:05.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038137 - https://support.apple.com/HT207601 - http://www.securityfocus.com/bid/97130 - https://secu
CVE ID: CVE-2017-2397 State: PUBLISHED Published: 2017-04-02T01:36:00 Last Updated: 2024-08-05T13:55:05.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "Accounts" component. It allows physically proximate attackers to discover an Apple ID by reading an iCloud authentication prompt on the lock screen. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038139 - http://www.securityfocus.com/bid/97138 - https://support.apple.com/HT207617
CVE ID: CVE-2017-2398 State: PUBLISHED Published: 2017-04-02T01:36:00 Last Updated: 2024-08-05T13:55:04.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97147 - https://support.apple.com/HT207615 - http://www.securitytracker.com/id/1038138 - https://support.apple.com/HT207617