Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
/www.mantisbt.org/bugs/view.php?id=17997 - http://www.securitytracker.com/id/1031633 - http://www.openwall.com/lists/oss-security/2015/01/10/5 - http://www.openwall.com/lists/oss-security/2015/01/11/8 - http://seclists.org/fulldisclosure/2015/Jan/110 - http://packetstormsecurity.com/files/130142/Mantis-BugTracker-1.2.19-Open-Redirect.html
CVE ID: CVE-2015-1043 State: PUBLISHED Published: 2015-01-29T18:00:00 Last Updated: 2024-08-06T04:33:19.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Host Guest File System (HGFS) in VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.5, and VMware Fusion 6.x before 6.0.5 and 7.x before 7.0.1 allows guest OS users to cause a guest OS denial of service via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2015-0001.html - http://www.securitytracker.com/id/1031644 - https://exchange.xforce.ibmcloud.com/vulnerabilities/100934 - http://secunia.com/advisories/62551 - http://www
1031644 - https://exchange.xforce.ibmcloud.com/vulnerabilities/100934 - http://secunia.com/advisories/62551 - http://www.securityfocus.com/bid/72337
CVE ID: CVE-2015-1044 State: PUBLISHED Published: 2015-01-29T18:00:00 Last Updated: 2024-08-06T04:33:20.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: vmware-authd (aka the Authorization process) in VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.5, and VMware ESXi 5.0 through 5.5 allows attackers to cause a host OS denial of service via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031645 - http://www.securityfocus.com/bid/72336 - http://www.vmware.com/security/advisories/VMSA-2015-0001.html - http://secunia.com/advisories/62569 - https://exchange.xforce.ibmcloud.com/vulnerabiliti
dvisories/VMSA-2015-0001.html - http://secunia.com/advisories/62569 - https://exchange.xforce.ibmcloud.com/vulnerabilities/100935 - http://www.securitytracker.com/id/1031646 - http://secunia.com/advisories/62551 - http://secunia.com/advisories/62669
CVE ID: CVE-2015-1045 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-1046 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-1047 State: PUBLISHED Published: 2015-10-12T10:00:00 Last Updated: 2024-08-06T04:33:20.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: vpxd in VMware vCenter Server 5.0 before u3e, 5.1 before u3, and 5.5 before u2 allows remote attackers to cause a denial of service via a long heartbeat message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/76932 - http://www.securitytracker.com/id/1033720 - http://www.vmware.com/security/advisories/VMSA-2015-0007.html
CVE ID: CVE-2015-1048 State: PUBLISHED Published: 2015-01-21T17:00:00 Last Updated: 2024-08-06T04:33:19.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in the integrated web server on Siemens SIMATIC S7-1200 CPU devices with firmware before 4.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-597212.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-597212.pdf
CVE ID: CVE-2015-1049 State: PUBLISHED Published: 2015-02-02T15:00:00 Last Updated: 2024-08-06T04:33:20.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web server on Siemens SCALANCE X-200IRT switches with firmware before 5.2.0 allows remote attackers to hijack sessions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-954136.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-954136.pdf
CVE ID: CVE-2015-1050 State: PUBLISHED Published: 2015-01-15T15:00:00 Last Updated: 2024-08-06T04:33:20.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in F5 BIG-IP Application Security Manager (ASM) before 11.6 allows remote attackers to inject arbitrary web script or HTML via the Response Body field when creating a new user account. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/534459/100/0/threaded - http://packetstormsecurity.com/files/129911/F5-BIG-IP-Application-Security-Manager-ASM-XSS.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/99907 - http://seclists.org
ication-Security-Manager-ASM-XSS.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/99907 - http://seclists.org/fulldisclosure/2015/Jan/43 - http://www.securitytracker.com/id/1031551
CVE ID: CVE-2015-1051 State: PUBLISHED Published: 2015-01-15T15:00:00 Last Updated: 2024-08-06T04:33:20.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in the Context UI module in the Context module 7.x-3.x before 7.x-3.6 for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the destination parameter. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148800.html - http://www.securityfocus.com/bid/71925 - https://www.drupal.org/node/2402779 - https://www.drupal.org/node/2403351 - http://lists.fedorapro
focus.com/bid/71925 - https://www.drupal.org/node/2402779 - https://www.drupal.org/node/2403351 - http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148782.html
CVE ID: CVE-2015-1052 State: PUBLISHED Published: 2015-01-15T15:00:00Z Last Updated: 2024-09-17T01:16:30.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the poll archive in PHPKIT 1.6.6 (Build 160014) allows remote attackers to inject arbitrary web script or HTML via the result parameter to upload_files/pk/include.php. Additional Analyst Notes: - CVE Program Container: References: - http://sroesemann.blogspot.de/2014/12/sroeadv-2014-07.html - http://sroesemann.blogspot.de/2015/01/report-for-advisory-sroeadv-2014-07.html - http://www.securityfocus.com/bid/72001 - http://seclists.org/fulldisclosure/2015/Jan/25 - http://packetstormsecu
.html - http://www.securityfocus.com/bid/72001 - http://seclists.org/fulldisclosure/2015/Jan/25 - http://packetstormsecurity.com/files/129917/CMS-PHPKit-WCMS-1.6.6-Cross-Site-Scripting.html
CVE ID: CVE-2015-1053 State: PUBLISHED Published: 2015-01-16T15:00:00 Last Updated: 2024-08-06T04:33:20.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the administrative backend in Croogo before 2.2.1 allows remote attackers to inject arbitrary web script or HTML via the path parameter to admin/file_manager/file_manager/editfile. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/129916/CMS-Croogo-2.2.0-Cross-Site-Scripting.html - http://sroesemann.blogspot.de/2015/01/report-for-advisory-sroeadv-2015-02.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/99890 - https://git
5/01/report-for-advisory-sroeadv-2015-02.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/99890 - https://github.com/croogo/croogo/issues/599 - http://seclists.org/fulldisclosure/2015/Jan/24 - http://www.securityfocus.com/bid/71999 - http://sroesemann.blogspot.de/2015/01/sroeadv-2015-02.html - https://blog.croogo.org/blog/croogo-221-released
CVE ID: CVE-2015-1054 State: PUBLISHED Published: 2015-01-16T15:00:00 Last Updated: 2024-08-06T04:33:20.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Games feature in Crea8Social 2.0 allows remote authenticated users to inject arbitrary web script or HTML via the Game Content field in Add Game. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/99615 - http://codecanyon.net/item/crea8social-php-social-networking-platform-v31/9211270/support - http://www.exploit-db.com/exploits/35691 - http://codecanyon.net/item/crea8social-php-social-networking-platform-v31/921
http://www.exploit-db.com/exploits/35691 - http://codecanyon.net/item/crea8social-php-social-networking-platform-v31/9211270 - http://osvdb.org/show/osvdb/116732 - http://packetstormsecurity.com/files/129816/Crea8Social-2.0-Cross-Site-Scripting.html
CVE ID: CVE-2015-1055 State: PUBLISHED Published: 2015-01-16T15:00:00Z Last Updated: 2024-09-16T16:38:56.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Photo Gallery plugin 1.2.7 for WordPress allows remote attackers to execute arbitrary SQL commands via the order_by parameter in a GalleryBox action to wp-admin/admin-ajax.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/72015 - http://seclists.org/fulldisclosure/2015/Jan/36
CVE ID: CVE-2015-1056 State: PUBLISHED Published: 2015-01-16T15:00:00 Last Updated: 2024-08-06T04:33:20.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Brother MFC-J4410DW printer with firmware before L allows remote attackers to inject arbitrary web script or HTML via the url parameter to general/status.html and possibly other pages. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/99906 - http://packetstormsecurity.com/files/129841/Brother-MFC-J4410DW-Cross-Site-Scripting.html - http://www.securityfocus.com/archive/1/534398/100/0/threaded - http://www.securityfoc
4410DW-Cross-Site-Scripting.html - http://www.securityfocus.com/archive/1/534398/100/0/threaded - http://www.securityfocus.com/bid/71911
CVE ID: CVE-2015-1057 State: PUBLISHED Published: 2015-01-16T15:00:00 Last Updated: 2024-08-06T04:33:20.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in usersettings.php in e107 2.0.0 allows remote attackers to inject arbitrary web script or HTML via the "Real Name" value. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/show/osvdb/116692 - https://exchange.xforce.ibmcloud.com/vulnerabilities/99627 - http://www.exploit-db.com/exploits/35679
CVE ID: CVE-2015-1058 State: PUBLISHED Published: 2015-01-16T15:00:00 Last Updated: 2024-08-06T04:33:20.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in AdaptCMS 3.0.3 allow remote attackers to inject arbitrary web script or HTML via the (1) data[Category][title] parameter to admin/categories/add, (2) data[Field][title] parameter to admin/fields/ajax_fields/, (3) name property in a basicInfo JSON object to admin/tools/create_theme, (4) data[Link][link_title] parameter to admin/links/links/add, or (5) data[ForumTopic][subject] parameter to forums/off-topic/new. Additional Analyst Notes: - CVE Program Container: References:
[ForumTopic][subject] parameter to forums/off-topic/new. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/show/osvdb/116718 - http://osvdb.org/show/osvdb/116719 - http://packetstormsecurity.com/files/129812/AdaptCMS-3.0.3-Cross-Site-Scripting.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/99617 - http://osvdb.org/show/osvdb/116716 - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2015-5218.php - http://osvdb.org/show/osvdb/116720 - http://osvdb.org/show/osvdb/116717 - http://www.exploit-db.com/exploits/35710
CVE ID: CVE-2015-1059 State: PUBLISHED Published: 2015-01-16T15:00:00 Last Updated: 2024-08-06T04:33:20.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in admin/files/add in AdaptCMS 3.0.3 allows remote authenticated users to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a direct request to the file in /app/webroot/uploads. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/show/osvdb/116722 - http://zeroscience.mk/en/vulnerabilities/ZSL-2015-5220.php - http://packetstormsecurity.com/files/129814/AdaptCMS-3.0.3-Remote-Command-Execution.html - https://exchange.xfo
20.php - http://packetstormsecurity.com/files/129814/AdaptCMS-3.0.3-Remote-Command-Execution.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/99616 - http://www.exploit-db.com/exploits/35710
CVE ID: CVE-2015-1060 State: PUBLISHED Published: 2015-01-16T15:00:00 Last Updated: 2024-08-06T04:33:20.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in lib/Cake/Controller/Controller.php in AdaptCMS 3.0.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the HTTP Referer header. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/99618 - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2015-5219.php - http://packetstormsecurity.com/files/129813/AdaptCMS-3.0.3-HTTP-Referer-Header-Open-Redirect.html - http://osvdb.org/show/osv
//packetstormsecurity.com/files/129813/AdaptCMS-3.0.3-HTTP-Referer-Header-Open-Redirect.html - http://osvdb.org/show/osvdb/116721 - http://www.exploit-db.com/exploits/35710
CVE ID: CVE-2015-1061 State: PUBLISHED Published: 2015-03-12T10:00:00 Last Updated: 2024-08-06T04:33:20.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: IOSurface in Apple iOS before 8.2, Apple OS X through 10.10.2, and Apple TV before 7.1 allows attackers to execute arbitrary code in a privileged context via a crafted app that leverages "type confusion" during serialized-object handling. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Mar/msg00001.html - http://lists.apple.com/archives/security-announce/2015/Mar/msg00002.html - https://support.apple.com/HT204426 - https://support.apple.com/HT204413 - http
ecurity-announce/2015/Mar/msg00002.html - https://support.apple.com/HT204426 - https://support.apple.com/HT204413 - http://lists.apple.com/archives/security-announce/2015/Mar/msg00000.html - http://www.securitytracker.com/id/1031864 - https://support.apple.com/kb/HT204563 - https://support.apple.com/HT204423 - http://www.securityfocus.com/bid/73004
CVE ID: CVE-2015-1062 State: PUBLISHED Published: 2015-03-12T10:00:00 Last Updated: 2024-08-06T04:33:20.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: MobileStorageMounter in Apple iOS before 8.2 and Apple TV before 7.1 does not delete invalid disk-image folders, which allows attackers to create folders in arbitrary filesystem locations via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Mar/msg00001.html - https://support.apple.com/HT204426 - http://lists.apple.com/archives/security-announce/2015/Mar/msg00000.html - http://www.securitytracker.com/id/1031864 - https://support.apple.com/HT2
ves/security-announce/2015/Mar/msg00000.html - http://www.securitytracker.com/id/1031864 - https://support.apple.com/HT204423
CVE ID: CVE-2015-1063 State: PUBLISHED Published: 2015-03-12T10:00:00 Last Updated: 2024-08-06T04:33:20.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: CoreTelephony in Apple iOS before 8.2 allows remote attackers to cause a denial of service (NULL pointer dereference and device restart) via a Class 0 SMS message. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Mar/msg00000.html - http://www.securitytracker.com/id/1031864 - https://support.apple.com/HT204423
CVE ID: CVE-2015-1064 State: PUBLISHED Published: 2015-03-12T10:00:00 Last Updated: 2024-08-06T04:33:20.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: Springboard in Apple iOS before 8.2 allows physically proximate attackers to bypass an intended activation requirement and read the home screen by leveraging an application crash during the activation process. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Mar/msg00000.html - http://www.securitytracker.com/id/1031864 - https://support.apple.com/HT204423
CVE ID: CVE-2015-1065 State: PUBLISHED Published: 2015-03-12T10:00:00 Last Updated: 2024-08-06T04:33:20.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in iCloud Keychain in Apple iOS before 8.2 and Apple OS X through 10.10.2 allow man-in-the-middle attackers to execute arbitrary code by modifying the client-server data stream during keychain recovery. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Mar/msg00002.html - http://www.securityfocus.com/bid/73007 - https://support.apple.com/HT204413 - http://lists.apple.com/archives/security-announce/2015/Mar/msg00000.html - http://www
tps://support.apple.com/HT204413 - http://lists.apple.com/archives/security-announce/2015/Mar/msg00000.html - http://www.securitytracker.com/id/1031864 - https://support.apple.com/kb/HT204563 - https://support.apple.com/HT204423
CVE ID: CVE-2015-1066 State: PUBLISHED Published: 2015-03-12T10:00:00 Last Updated: 2024-08-06T04:33:20.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in IOAcceleratorFamily in Apple OS X through 10.10.2 allows attackers to execute arbitrary code in a privileged context via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Mar/msg00002.html - https://support.apple.com/HT204413 - http://www.securitytracker.com/id/1031869
CVE ID: CVE-2015-1067 State: PUBLISHED Published: 2015-03-11T01:00:00 Last Updated: 2024-08-06T04:33:20.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: Secure Transport in Apple iOS before 8.2, Apple OS X through 10.10.2, and Apple TV before 7.1 does not properly restrict TLS state transitions, which makes it easier for remote attackers to conduct cipher-downgrade attacks to EXPORT_RSA ciphers via crafted TLS traffic, related to the "FREAK" issue, a different vulnerability than CVE-2015-0204 and CVE-2015-1637. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/73009 - https://support.apple.com/HT204659 - https://support.apple.com
r: References: - http://www.securityfocus.com/bid/73009 - https://support.apple.com/HT204659 - https://support.apple.com/kb/HT204870 - http://lists.apple.com/archives/security-announce/2015/Mar/msg00001.html - http://www.securitytracker.com/id/1031829 - http://www.securitytracker.com/id/1031830 - http://lists.apple.com/archives/security-announce/2015/Mar/msg00002.html - https://support.apple.com/HT204426 - https://freakattack.com/ - https://support.apple.com/HT204413 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html - http://lists.apple.com/archives/security-announce/2015/Mar/msg00000.html - https://support.apple.com/HT204423
CVE ID: CVE-2015-1068 State: PUBLISHED Published: 2015-03-18T22:00:00 Last Updated: 2024-08-06T04:33:19.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2015-03-17-1. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html - http://lists.apple.com/archives/security-announce/2015/Jun/msg00006.html - http://list
announce/2015/Apr/msg00002.html - http://lists.apple.com/archives/security-announce/2015/Jun/msg00006.html - http://lists.apple.com/archives/security-announce/2015/Mar/msg00004.html - https://support.apple.com/kb/HT204949 - http://www.securitytracker.com/id/1031936 - https://support.apple.com/HT204662 - https://support.apple.com/HT204560 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.html - https://support.apple.com/HT204661
CVE ID: CVE-2015-1069 State: PUBLISHED Published: 2015-03-18T22:00:00 Last Updated: 2024-08-06T04:33:20.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2015-03-17-1. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT204659 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html - http://lists.apple.com/archives/security-announce
://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html - http://lists.apple.com/archives/security-announce/2015/Jun/msg00006.html - http://lists.apple.com/archives/security-announce/2015/Mar/msg00004.html - http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html - https://support.apple.com/kb/HT204949 - http://www.securitytracker.com/id/1031936 - https://support.apple.com/HT204662 - https://support.apple.com/HT204560 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.html - https://support.apple.com/HT204661
CVE ID: CVE-2015-1070 State: PUBLISHED Published: 2015-03-18T22:00:00 Last Updated: 2024-08-06T04:33:20.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2015-03-17-1. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html - http://lists.apple.com/archives/security-announce/2015/Jun/msg00006.html - http://list
CVE ID: CVE-2015-1071 State: PUBLISHED Published: 2015-03-18T22:00:00 Last Updated: 2024-08-06T04:33:20.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2015-03-17-1. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html - http://lists.apple.com/archives/security-announce/2015/Jun/msg00006.html - http://list
announce/2015/Apr/msg00002.html - http://lists.apple.com/archives/security-announce/2015/Jun/msg00006.html - http://lists.apple.com/archives/security-announce/2015/Mar/msg00004.html - https://support.apple.com/kb/HT204949 - http://www.securitytracker.com/id/1031936 - https://support.apple.com/HT204662 - http://lists.opensuse.org/opensuse-updates/2016-03/msg00132.html - https://support.apple.com/HT204560 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.html - https://support.apple.com/HT204661 - http://www.ubuntu.com/usn/USN-2937-1