Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-5138 State: PUBLISHED Published: 2013-09-19T10:00:00 Last Updated: 2024-08-06T17:06:51.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: IOCatalogue in IOKitUser in Apple iOS before 7 allows attackers to cause a denial of service (NULL pointer dereference and device crash) via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029054 - http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html - http://support.apple.com/kb/HT5934 - http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
CVE ID: CVE-2013-5139 State: PUBLISHED Published: 2013-09-19T10:00:00 Last Updated: 2024-08-06T17:06:51.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IOSerialFamily driver in Apple iOS before 7 allows attackers to execute arbitrary code or cause a denial of service (out-of-bounds array access) via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029054 - http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html - http://support.apple.com/kb/HT6150 - http://secunia.com/advisories/54886 - http://support.apple.com/kb/HT5934 - http://lists.apple.com/archives/security-announce/2013/Sep/m
com/advisories/54886 - http://support.apple.com/kb/HT5934 - http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
CVE ID: CVE-2013-5140 State: PUBLISHED Published: 2013-09-19T10:00:00 Last Updated: 2024-08-06T17:06:51.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Apple iOS before 7 allows remote attackers to cause a denial of service (assertion failure and device restart) via an invalid packet fragment. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029054 - http://secunia.com/advisories/54886 - http://support.apple.com/kb/HT5934 - http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
CVE ID: CVE-2013-5141 State: PUBLISHED Published: 2013-09-19T10:00:00 Last Updated: 2024-08-06T17:06:51.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Apple iOS before 7 uses an incorrect data size for a certain integer variable, which allows attackers to cause a denial of service (infinite loop and device hang) via a crafted application, related to an "integer truncation vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029054 - http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html - http://support.apple.com/kb/HT5934 - http://lists.apple.com/archives/security-announce/2013/Se
/2013/Oct/msg00004.html - http://support.apple.com/kb/HT5934 - http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
CVE ID: CVE-2013-5142 State: PUBLISHED Published: 2013-09-19T10:00:00 Last Updated: 2024-08-06T17:06:51.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Apple iOS before 7 does not initialize unspecified kernel data structures, which allows local users to obtain sensitive information from kernel stack memory via the (1) msgctl API or (2) segctl API. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029054 - http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html - http://support.apple.com/kb/HT5934 - http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
CVE ID: CVE-2013-5143 State: PUBLISHED Published: 2013-10-24T10:00:00Z Last Updated: 2024-09-16T19:56:13.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RADIUS service in Server App in Apple OS X Server before 3.0 selects a fallback X.509 certificate in unspecified circumstances, which might allow man-in-the-middle attackers to hijack RADIUS sessions by leveraging knowledge of the private key that matches this fallback certificate. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2013/Oct/msg00006.html
CVE ID: CVE-2013-5144 State: PUBLISHED Published: 2013-10-24T01:00:00Z Last Updated: 2024-09-17T01:21:11.760Z Vendors: n/a Products: n/a Problem Types: n/a Description: Passcode Lock in Apple iOS before 7.0.3 on iPhone devices allows physically proximate attackers to bypass an intended passcode requirement, and dial arbitrary telephone numbers, by tapping the emergency-call button during a certain notification and camera-pane state to trigger a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2013/Oct/msg00002.html
CVE ID: CVE-2013-5145 State: PUBLISHED Published: 2013-09-19T10:00:00 Last Updated: 2024-08-06T17:06:50.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: kextd in Kext Management in Apple iOS before 7 does not properly verify authorization for IPC messages, which allows local users to (1) load or (2) unload kernel extensions via a crafted message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029054 - http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html - http://secunia.com/advisories/54886 - http://support.apple.com/kb/HT5934 - http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
CVE ID: CVE-2013-5146 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:30.656Z Description: No description available.
CVE ID: CVE-2013-5147 State: PUBLISHED Published: 2013-09-19T10:00:00 Last Updated: 2024-08-06T17:06:51.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: Passcode Lock in Apple iOS before 7 does not properly manage the lock state, which allows physically proximate attackers to bypass an intended passcode requirement by leveraging a race condition involving phone calls and ejection of a SIM card. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/54886 - http://support.apple.com/kb/HT5934 - http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
CVE ID: CVE-2013-5148 State: PUBLISHED Published: 2013-10-24T10:00:00Z Last Updated: 2024-09-16T19:09:16.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Keynote before 6.0 does not properly handle the interaction between Keynote presentation mode and the Screen Lock implementation, which allows physically proximate attackers to obtain access by visiting an unattended workstation on which this mode was enabled during a sleep operation. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2013/Oct/msg00005.html
CVE ID: CVE-2013-5149 State: PUBLISHED Published: 2013-09-19T10:00:00 Last Updated: 2024-08-06T17:06:51.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Push Notifications subsystem in Apple iOS before 7 provides the push-notification token to an app without user approval, which allows attackers to obtain sensitive information via an app that employs a crafted push-notification registration process. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029054 - http://secunia.com/advisories/54886 - http://support.apple.com/kb/HT5934 - http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
CVE ID: CVE-2013-5150 State: PUBLISHED Published: 2013-09-19T10:00:00 Last Updated: 2024-08-06T17:06:51.753Z Vendors: n/a Products: n/a Problem Types: n/a Description: The history-clearing feature in Safari in Apple iOS before 7 does not clear the back/forward history of an open tab, which allows physically proximate attackers to obtain sensitive information by leveraging an unattended workstation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029054 - http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html - http://support.apple.com/kb/HT5934 - https://support.apple.com/kb/HT6535 - http://lists.apple.com/archives/security-announ
tp://support.apple.com/kb/HT5934 - https://support.apple.com/kb/HT6535 - http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
CVE ID: CVE-2013-5151 State: PUBLISHED Published: 2013-09-19T10:00:00 Last Updated: 2024-08-06T17:06:51.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mobile Safari in Apple iOS before 7 does not prevent HTML interpretation of a document served with a text/plain content type, which allows remote attackers to conduct cross-site scripting (XSS) attacks by uploading a file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029054 - http://secunia.com/advisories/54886 - http://support.apple.com/kb/HT5934 - http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
CVE ID: CVE-2013-5152 State: PUBLISHED Published: 2013-09-19T10:00:00 Last Updated: 2024-08-06T17:06:51.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mobile Safari in Apple iOS before 7 allows remote attackers to spoof the URL bar via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029054 - http://secunia.com/advisories/54886 - http://support.apple.com/kb/HT5934 - http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
CVE ID: CVE-2013-5153 State: PUBLISHED Published: 2013-09-19T10:00:00 Last Updated: 2024-08-06T17:06:51.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: Springboard in Apple iOS before 7 does not properly manage the lock state in Lost Mode, which allows physically proximate attackers to read notifications via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029054 - http://secunia.com/advisories/54886 - http://support.apple.com/kb/HT5934 - http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
CVE ID: CVE-2013-5154 State: PUBLISHED Published: 2013-09-19T10:00:00 Last Updated: 2024-08-06T17:06:51.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Sandbox subsystem in Apple iOS before 7 determines the sandboxing requirement for a #! application on the basis of the script interpreter instead of the script, which allows attackers to bypass intended access restrictions via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029054 - http://secunia.com/advisories/54886 - http://support.apple.com/kb/HT5934 - http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
CVE ID: CVE-2013-5155 State: PUBLISHED Published: 2013-09-19T10:00:00 Last Updated: 2024-08-06T17:06:51.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Sandbox subsystem in Apple iOS before 7 allows attackers to cause a denial of service (infinite loop) via an application that writes crafted values to /dev/random. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029054 - http://support.apple.com/kb/HT5934 - http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
CVE ID: CVE-2013-5156 State: PUBLISHED Published: 2013-09-19T10:00:00 Last Updated: 2024-08-06T17:06:51.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Telephony subsystem in Apple iOS before 7 does not require API conformity for access to telephony-daemon interfaces, which allows attackers to bypass intended restrictions on phone calls via a crafted app that sends direct requests to the daemon. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029054 - http://secunia.com/advisories/54886 - http://support.apple.com/kb/HT5934 - http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
CVE ID: CVE-2013-5157 State: PUBLISHED Published: 2013-09-19T10:00:00 Last Updated: 2024-08-06T17:06:51.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Twitter subsystem in Apple iOS before 7 does not require API conformity for access to Twitter daemon interfaces, which allows attackers to post Tweets via a crafted app that sends direct requests to the daemon. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029054 - http://secunia.com/advisories/54886 - http://support.apple.com/kb/HT5934 - http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
CVE ID: CVE-2013-5158 State: PUBLISHED Published: 2013-09-19T10:00:00 Last Updated: 2024-08-06T17:06:51.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Social subsystem in Apple iOS before 7 does not properly restrict access to the cache of Twitter icons, which allows physically proximate attackers to obtain sensitive information about recent Twitter interaction via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029054 - http://support.apple.com/kb/HT5934 - http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
CVE ID: CVE-2013-5159 State: PUBLISHED Published: 2013-09-19T10:00:00 Last Updated: 2024-08-06T17:06:51.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit in Apple iOS before 7 allows remote attackers to bypass the Same Origin Policy and obtain potentially sensitive information about use of the window.webkitRequestAnimationFrame API via an IFRAME element. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029054 - http://secunia.com/advisories/54886 - http://support.apple.com/kb/HT5934 - http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
CVE ID: CVE-2013-5160 State: PUBLISHED Published: 2013-09-28T01:00:00Z Last Updated: 2024-09-17T02:52:14.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: Passcode Lock in Apple iOS before 7.0.2 on iPhone devices allows physically proximate attackers to bypass an intended passcode requirement, and dial arbitrary telephone numbers, by making a series of taps of the emergency-call button to trigger a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT5957 - http://lists.apple.com/archives/security-announce/2013/Sep/msg00009.html
CVE ID: CVE-2013-5161 State: PUBLISHED Published: 2013-09-28T01:00:00Z Last Updated: 2024-09-16T19:04:28.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: Passcode Lock in Apple iOS before 7.0.2 does not properly manage the lock state, which allows physically proximate attackers to bypass an intended passcode requirement, and open the Camera app or read the list of all recently opened apps, by leveraging unspecified transition errors. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT5957 - http://lists.apple.com/archives/security-announce/2013/Sep/msg00009.html
CVE ID: CVE-2013-5162 State: PUBLISHED Published: 2013-10-24T01:00:00Z Last Updated: 2024-09-16T22:51:21.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: Passcode Lock in Apple iOS before 7.0.3 on iPhone devices allows physically proximate attackers to bypass the passcode-failure disabled state by leveraging certain incorrect visibility of the passcode-entry view after use of the Phone app. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2013/Oct/msg00002.html
CVE ID: CVE-2013-5163 State: PUBLISHED Published: 2013-10-04T10:00:00Z Last Updated: 2024-09-16T23:50:38.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory Services in Apple Mac OS X before 10.8.5 Supplemental Update allows local users to bypass password-based authentication and modify arbitrary Directory Services records via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2013/Oct/msg00000.html
CVE ID: CVE-2013-5164 State: PUBLISHED Published: 2013-10-24T01:00:00Z Last Updated: 2024-09-16T18:49:18.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple race conditions in the Phone app in Apple iOS before 7.0.3 allow physically proximate attackers to bypass the locked state, and dial the telephone numbers in arbitrary Contacts entries, by visiting the Contacts pane. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2013/Oct/msg00002.html
CVE ID: CVE-2013-5165 State: PUBLISHED Published: 2013-10-24T01:00:00Z Last Updated: 2024-09-16T18:34:35.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: socketfilterfw in Application Firewall in Apple Mac OS X before 10.9 does not properly implement the --blockApp option, which allows remote attackers to bypass intended access restrictions via a network connection to an application for which blocking was configured. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html
CVE ID: CVE-2013-5166 State: PUBLISHED Published: 2013-10-24T01:00:00Z Last Updated: 2024-09-16T17:47:38.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Bluetooth USB host controller in Apple Mac OS X before 10.9 prematurely deletes interfaces, which allows local users to cause a denial of service (system crash) via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html
CVE ID: CVE-2013-5167 State: PUBLISHED Published: 2013-10-24T01:00:00Z Last Updated: 2024-09-17T00:22:03.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: CFNetwork in Apple Mac OS X before 10.9 does not properly support Safari's deletion of session cookies in response to a reset operation, which makes it easier for remote web servers to track users via Set-Cookie HTTP headers. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html
CVE ID: CVE-2013-5168 State: PUBLISHED Published: 2013-10-24T01:00:00Z Last Updated: 2024-09-16T20:11:59.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: Console in Apple Mac OS X before 10.9 allows user-assisted remote attackers to execute arbitrary applications by triggering a log entry with a crafted attached URL. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html
CVE ID: CVE-2013-5169 State: PUBLISHED Published: 2013-10-24T01:00:00Z Last Updated: 2024-09-16T17:23:03.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: CoreGraphics in Apple Mac OS X before 10.9, when display-sleep mode is used, does not ensure that screen locking blocks the visibility of all windows, which allows physically proximate attackers to obtain sensitive information by reading the screen. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html
CVE ID: CVE-2013-5170 State: PUBLISHED Published: 2013-10-24T01:00:00 Last Updated: 2024-08-06T17:06:52.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer underflow in CoreGraphics in Apple Mac OS X before 10.9 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2014-04/0134.html - http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html
CVE ID: CVE-2013-5171 State: PUBLISHED Published: 2013-10-24T01:00:00Z Last Updated: 2024-09-16T16:58:39.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: CoreGraphics in Apple Mac OS X before 10.9 allows local users to bypass secure input mode and log an arbitrary application's keystrokes via a hotkey event registration. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html
CVE ID: CVE-2013-5172 State: PUBLISHED Published: 2013-10-24T01:00:00Z Last Updated: 2024-09-16T23:10:19.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Apple Mac OS X before 10.9 does not properly determine the output length for SHA-2 digest function calls, which allows context-dependent attackers to cause a denial of service (panic) by triggering a digest operation, as demonstrated by an IPSec connection. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html
CVE ID: CVE-2013-5173 State: PUBLISHED Published: 2013-10-24T01:00:00Z Last Updated: 2024-09-17T03:07:44.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: The random-number generator in the kernel in Apple Mac OS X before 10.9 provides lengthy exclusive access for processing of large requests, which allows local users to cause a denial of service (temporary generator outage) via an application that requires many random numbers. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html
CVE ID: CVE-2013-5174 State: PUBLISHED Published: 2013-10-24T01:00:00Z Last Updated: 2024-09-17T00:41:59.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in the kernel in Apple Mac OS X before 10.9 allows local users to cause a denial of service (system crash) via a crafted tty read operation. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html
CVE ID: CVE-2013-5175 State: PUBLISHED Published: 2013-10-24T01:00:00Z Last Updated: 2024-09-16T18:13:53.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Apple Mac OS X before 10.9 allows local users to obtain sensitive information or cause a denial of service (out-of-bounds read and system crash) via a crafted Mach-O file. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html
CVE ID: CVE-2013-5176 State: PUBLISHED Published: 2013-10-24T01:00:00Z Last Updated: 2024-09-16T20:36:43.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Apple Mac OS X before 10.9 does not properly handle integer values during unspecified tty device operations, which allows local users to cause a denial of service (system hang) by triggering a truncation error. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html
CVE ID: CVE-2013-5177 State: PUBLISHED Published: 2013-10-24T01:00:00Z Last Updated: 2024-09-16T23:11:40.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Apple Mac OS X before 10.9 allows local users to cause a denial of service (panic) via an invalid iovec structure. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html
CVE ID: CVE-2013-5178 State: PUBLISHED Published: 2013-10-24T01:00:00 Last Updated: 2024-08-06T17:06:51.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: LaunchServices in Apple Mac OS X before 10.9 does not properly restrict Unicode characters in filenames, which allows context-dependent attackers to spoof file extensions via a crafted character sequence. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html - http://support.apple.com/kb/HT6150