deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2015-2344
Published: 2016-03-16
Description: Cross-site scripting (XSS) vulnerability in VMware vRealize Automation 6.x before 6.2.4 on Linux allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securitytracker.com/id/1035270; http://www.vmware.com/security/advisories/VMSA-2016-0003.html; http://www.securitytracker.com/id/1035270
CVE: CVE-2016-1990
Published: 2016-03-16
Description: HPE ArcSight ESM 5.x before 5.6, 6.0, 6.5.x before 6.5C SP1 Patch 2, and 6.8c before P1, and ArcSight ESM Express before 6.9.1, allows local users to gain privileges for command execution via unspecified vectors.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.securitytracker.com/id/1035282; https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05048452; http://www.securitytracker.com/id/1035282
CVE: CVE-2016-1991
Published: 2016-03-16
Description: HPE ArcSight ESM 5.x before 5.6, 6.0, 6.5.x before 6.5C SP1 Patch 2, and 6.8c before P1, and ArcSight ESM Express before 6.9.1, allows remote authenticated users to conduct unspecified "file download" attacks via unknown vectors.
CVSS Score: 8.0 (HIGH)
References: http://www.securitytracker.com/id/1035282; https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05048452; http://www.securitytracker.com/id/1035282
CVE: CVE-2016-2075
Published: 2016-03-16
Description: Cross-site scripting (XSS) vulnerability in VMware vRealize Business Advanced and Enterprise 8.x before 8.2.5 on Linux allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securitytracker.com/id/1035270; http://www.vmware.com/security/advisories/VMSA-2016-0003.html; http://www.securitytracker.com/id/1035270
CVE: CVE-2016-2846
Published: 2016-03-16
Description: Siemens SIMATIC S7-1200 CPU devices before 4.0 allow remote attackers to bypass a "user program block" protection mechanism via unspecified vectors.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-254
References: http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-833048.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-833048.pdf; https://ics-cert.us-cert.gov/advisories/ICSA-16-075-01
CVE: CVE-2016-1992
Published: 2016-03-17
Description: HPE ArcSight ESM before 6.8c, and ArcSight ESM Express before 6.9.1, allows remote authenticated users to obtain sensitive information via unspecified vectors.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://www.securitytracker.com/id/1035307; https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05048753; http://www.securitytracker.com/id/1035307
CVE: CVE-2016-2342
Published: 2016-03-17
Description: The bgp_nlri_parse_vpnv4 function in bgp_mplsvpn.c in the VPNv4 NLRI parser in bgpd in Quagga before 1.0.20160309, when a certain VPNv4 configuration is used, relies on a Labeled-VPN SAFI routes-data length field during a data copy, which allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow) via a crafted packet.
CVSS Score: 8.1 (HIGH)
CWE: CWE-119
References: http://git.savannah.gnu.org/cgit/quagga.git/commit/?id=a3bc7e9400b214a0f078fdb19596ba54214a1442; http://lists.opensuse.org/opensuse-updates/2016-03/msg00102.html; http://lists.opensuse.org/opensuse-updates/2016-03/msg00117.html
CVE: CVE-2016-2345
Published: 2016-03-17
Description: Stack-based buffer overflow in dwrcs.exe in the dwmrcs daemon in SolarWinds DameWare Mini Remote Control 12.0 allows remote attackers to execute arbitrary code via a crafted string.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://packetstormsecurity.com/files/136293/Solarwinds-Dameware-Mini-Remote-Code-Execution.html; http://www.kb.cert.org/vuls/id/897144; http://www.securityfocus.com/archive/1/537823/100/0/threaded
CVE: CVE-2016-3191
Published: 2016-03-17
Description: The compile_branch function in pcre_compile.c in PCRE 8.x before 8.39 and pcre2_compile.c in PCRE2 before 10.22 mishandles patterns containing an (*ACCEPT) substring in conjunction with nested parentheses, which allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow) via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror, aka ZDI-CAN-3542.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://rhn.redhat.com/errata/RHSA-2016-1025.html; http://vcs.pcre.org/pcre2?view=revision&revision=489; http://vcs.pcre.org/pcre?view=revision&revision=1631
CVE: CVE-2015-5968
Published: 2016-03-18
Description: Cross-site scripting (XSS) vulnerability in Novell Filr 1.2 before Hot Patch 4 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.novell.com/support/kb/doc.php?id=7017078; https://www.novell.com/support/kb/doc.php?id=7017078
CVE: CVE-2016-1993
Published: 2016-03-18
Description: HPE System Management Homepage before 7.5.4 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors.
CVSS Score: 8.1 (HIGH)
References: http://www.securitytracker.com/id/1035325; https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763; http://www.securitytracker.com/id/1035325
CVE: CVE-2016-1994
Published: 2016-03-18
Description: HPE System Management Homepage before 7.5.4 allows remote authenticated users to obtain sensitive information via unspecified vectors.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://www.securitytracker.com/id/1035325; https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763; http://www.securitytracker.com/id/1035325
CVE: CVE-2016-1995
Published: 2016-03-18
Description: HPE System Management Homepage before 7.5.4 allows remote attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 9.8 (CRITICAL)
References: http://www.securitytracker.com/id/1035325; https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763; http://www.securitytracker.com/id/1035325
CVE: CVE-2016-1996
Published: 2016-03-18
Description: HPE System Management Homepage before 7.5.4 allows local users to obtain sensitive information or modify data via unspecified vectors.
CVSS Score: 7.7 (HIGH)
References: http://www.securitytracker.com/id/1035325; https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763; http://www.securitytracker.com/id/1035325
CVE: CVE-2014-9768
Published: 2016-03-18
Description: IBM Tivoli NetView Access Services (NVAS) allows remote authenticated users to gain privileges by entering the ADM command and modifying a "page ID" field to the EMSPG2 transaction code.  NOTE: the vendor's perspective is that configuration and use of available security controls in the NVAS product mitigates the reported vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-264
References: http://www.irongeek.com/i.php?page=videos/derbycon4/t217-hacking-mainframes-vulnerabilities-in-applications-exposed-over-tn3270-dominic-white; https://vimeo.com/96718889; http://www.irongeek.com/i.php?page=videos/derbycon4/t217-hacking-mainframes-vulnerabilities-in-applications-exposed-over-tn3270-dominic-white
CVE: CVE-2015-8152
Published: 2016-03-18
Description: Cross-site request forgery (CSRF) vulnerability in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6-MP4 allows remote authenticated users to hijack the authentication of administrators for requests that execute arbitrary code by adding lines to a logging script.
CVSS Score: 8.0 (HIGH)
CWE: CWE-352
References: http://www.securityfocus.com/bid/84343; http://www.securitytracker.com/id/1035329; http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160317_00
CVE: CVE-2015-8153
Published: 2016-03-18
Description: SQL injection vulnerability in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6-MP4 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/84354; http://www.securitytracker.com/id/1035329; http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160317_00
CVE: CVE-2015-8154
Published: 2016-03-18
Description: The SysPlant.sys driver in the Application and Device Control (ADC) component in the client in Symantec Endpoint Protection (SEP) 12.1 before RU6-MP4 allows remote attackers to execute arbitrary code via a crafted HTML document, related to "RWX Permissions."
CVSS Score: 8.8 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/84344; http://www.securitytracker.com/id/1035329; http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160317_00
CVE: CVE-2016-2281
Published: 2016-03-18
Description: Untrusted search path vulnerability in ABB Panel Builder 800 5.1 allows local users to gain privileges via a Trojan horse DLL in the current working directory.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: https://ics-cert.us-cert.gov/advisories/ICSA-16-077-01; https://ics-cert.us-cert.gov/advisories/ICSA-16-077-01
CVE: CVE-2016-3155
Published: 2016-03-18
Description: Siemens APOGEE Insight uses weak permissions for the application folder, which allows local users to obtain sensitive information or modify data via unspecified vectors.
CVSS Score: 3.4 (LOW)
CWE: CWE-200
References: http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-151221.pdf; https://ics-cert.us-cert.gov/advisories/ICSA-16-082-01; http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-151221.pdf
CVE: CVE-2015-2286
Published: 2016-03-19
Description: lms/templates/footer-edx-new.html in Open edX edx-platform before 2015-01-29 does not properly restrict links on the password-reset page, which allows user-assisted remote attackers to discover password-reset tokens by reading a referer log after a victim navigates from this page to a social-sharing site.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://github.com/edx/edx-platform/commit/a1ffcc52594b1e7240501aab0ea145f1da3edb5a; https://open.edx.org/CVE-2015-2286; https://github.com/edx/edx-platform/commit/a1ffcc52594b1e7240501aab0ea145f1da3edb5a
CVE: CVE-2016-2287
Published: 2016-03-19
Description: Cross-site scripting (XSS) vulnerability in XZERES 442SR OS on 442SR wind turbines allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://ics-cert.us-cert.gov/advisories/ICSA-15-342-01; https://ics-cert.us-cert.gov/advisories/ICSA-15-342-01
CVE: CVE-2016-0283
Published: 2016-03-19
Description: Cross-site scripting (XSS) vulnerability in the OpenID Connect (OIDC) client web application in IBM WebSphere Application Server (WAS) Liberty Profile 8.5.5 before 8.5.5.9 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www-01.ibm.com/support/docview.wss?uid=swg1PI58003; http://www-01.ibm.com/support/docview.wss?uid=swg21978293; http://www.securitytracker.com/id/1035330
CVE: CVE-2016-2245
Published: 2016-03-19
Description: HP Support Assistant before 8.1.52.1 allows remote attackers to bypass authentication via unspecified vectors.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://h20565.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c05031674; https://h20565.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c05031674
CVE: CVE-2015-7454
Published: 2016-03-21
Description: Business Space in IBM WebSphere Process Server 6.1.2.0 through 7.0.0.5 and Business Process Manager Advanced 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, 8.5.0.x through 8.5.0.2, 8.5.5.x through 8.5.5.0, and 8.5.6.x through 8.5.6.2 allows remote authenticated users to bypass intended access restrictions and create an arbitrary page or space via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://www-01.ibm.com/support/docview.wss?uid=swg1JR54678; http://www-01.ibm.com/support/docview.wss?uid=swg21972005; http://www.securityfocus.com/bid/85089
CVE: CVE-2016-1997
Published: 2016-03-22
Description: HPE Operations Orchestration 10.x before 10.51 and Operations Orchestration content before 1.7.0 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05050545; https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05050545
CVE: CVE-2016-1998
Published: 2016-03-22
Description: HPE Service Manager (SM) 9.3x before 9.35 P4 and 9.4x before 9.41.P2 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05054565; https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05054565
CVE: CVE-2016-3115
Published: 2016-03-22
Description: Multiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH before 7.2p2 allow remote authenticated users to bypass intended shell-command restrictions via crafted X11 forwarding data, related to the (1) do_authenticated1 and (2) session_x11_req functions.
CVSS Score: 6.4 (MEDIUM)
References: http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/session.c; http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/session.c.diff?r1=1.281&r2=1.282&f=h; http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183101.html
CVE: CVE-2016-3116
Published: 2016-03-22
Description: CRLF injection vulnerability in Dropbear SSH before 2016.72 allows remote authenticated users to bypass intended shell-command restrictions via crafted X11 forwarding data.
CVSS Score: 6.4 (MEDIUM)
References: http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179261.html; http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179269.html; http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179870.html
CVE: CVE-2009-2197
Published: 2016-03-24
Description: Apple Safari before 9.1 allows remote attackers to spoof the user interface via a web page that places text in a crafted context, leading to unintended use of that text within a Safari dialog.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-19
References: http://lists.apple.com/archives/security-announce/2016/Mar/msg00005.html; http://www.securityfocus.com/bid/85055; http://www.securitytracker.com/id/1035354
CVE: CVE-2015-6853
Published: 2016-03-24
Description: The Domino web agent in CA Single Sign-On (aka SSO, formerly SiteMinder) R6, R12.0 before SP3 CR13, R12.0J before SP3 CR1.2, R12.5 before CR5, R12.51 before CR4, and R12.52 before SP1 CR3 allows remote attackers to cause a denial of service (daemon crash) or obtain sensitive information via a crafted request.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-345
References: http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20160323-01-security-notice-for-ca-single-sign-on-web-agents.aspx; http://www.securitytracker.com/id/1035389; http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20160323-01-security-notice-for-ca-single-sign-on-web-agents.aspx
CVE: CVE-2015-6854
Published: 2016-03-24
Description: The non-Domino web agents in CA Single Sign-On (aka SSO, formerly SiteMinder) R6, R12.0 before SP3 CR13, R12.0J before SP3 CR1.2, and R12.5 before CR5 allow remote attackers to cause a denial of service (daemon crash) or obtain sensitive information via a crafted request.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-345
References: http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20160323-01-security-notice-for-ca-single-sign-on-web-agents.aspx; http://www.securitytracker.com/id/1035389; http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20160323-01-security-notice-for-ca-single-sign-on-web-agents.aspx
CVE: CVE-2015-7551
Published: 2016-03-24
Description: The Fiddle::Handle implementation in ext/fiddle/handle.c in Ruby before 2.0.0-p648, 2.1 before 2.1.8, and 2.2 before 2.2.4, as distributed in Apple OS X before 10.11.4 and other products, mishandles tainting, which allows context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted string, related to the DL module and the libffi library.  NOTE: this vulnerability exists because of a CVE-2009-5147 regression.
CVSS Score: 8.4 (HIGH)
CWE: CWE-20
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=796344; http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=796551; http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html
CVE: CVE-2016-1599
Published: 2016-03-24
Description: Cross-site scripting (XSS) vulnerability in NetIQ Self Service Password Reset (SSPR) 2.x and 3.x before 3.3.1 HF2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/96837; https://bugzilla.netiq.com/show_bug.cgi?id=967461; https://www.netiq.com/support/kb/doc.php?id=7017399
CVE: CVE-2016-1732
Published: 2016-03-24
Description: AppleRAID in Apple OS X before 10.11.4 allows local users to obtain sensitive kernel memory-layout information or cause a denial of service (out-of-bounds read) via unspecified vectors.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html; http://www.securitytracker.com/id/1035363; https://support.apple.com/HT206167
CVE: CVE-2016-1733
Published: 2016-03-24
Description: AppleRAID in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-119
References: http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html; http://www.securitytracker.com/id/1035363; https://support.apple.com/HT206167
CVE: CVE-2016-1734
Published: 2016-03-24
Description: AppleUSBNetworking in Apple iOS before 9.3 and OS X before 10.11.4 allows physically proximate attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted USB device.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119, CWE-264
References: http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html; http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html; http://www.securitytracker.com/id/1035353
CVE: CVE-2016-1735
Published: 2016-03-24
Description: Bluetooth in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1736.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html; http://www.securitytracker.com/id/1035363; https://support.apple.com/HT206167
CVE: CVE-2016-1736
Published: 2016-03-24
Description: Bluetooth in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1735.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html; http://www.securitytracker.com/id/1035363; https://support.apple.com/HT206167
CVE: CVE-2016-1737
Published: 2016-03-24
Description: Carbon in Apple OS X before 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted .dfont file.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html; http://www.securitytracker.com/id/1035363; https://support.apple.com/HT206167
CVE: CVE-2016-1738
Published: 2016-03-24
Description: dyld in Apple OS X before 10.11.4 allows attackers to bypass a code-signing protection mechanism via a modified app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-254
References: http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html; http://www.securitytracker.com/id/1035363; https://support.apple.com/HT206167
CVE: CVE-2016-1740
Published: 2016-03-24
Description: FontParser in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html; http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html; http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html
CVE: CVE-2016-1741
Published: 2016-03-24
Description: The NVIDIA driver in the Graphics Drivers subsystem in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html; http://www.securitytracker.com/id/1035363; https://support.apple.com/HT206167
CVE: CVE-2016-1743
Published: 2016-03-24
Description: The Intel driver in the Graphics Drivers subsystem in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1744.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html; http://www.securitytracker.com/id/1035363; https://support.apple.com/HT206167
CVE: CVE-2016-1744
Published: 2016-03-24
Description: The Intel driver in the Graphics Drivers subsystem in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1743.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html; http://www.securitytracker.com/id/1035363; https://support.apple.com/HT206167
CVE: CVE-2016-1745
Published: 2016-03-24
Description: IOFireWireFamily in Apple OS X before 10.11.4 allows local users to cause a denial of service (NULL pointer dereference) via unspecified vectors.
CVSS Score: 5.5 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html; http://www.securitytracker.com/id/1035363; https://support.apple.com/HT206167
CVE: CVE-2016-1746
Published: 2016-03-24
Description: IOGraphics in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1747.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-119
References: http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html; http://www.securitytracker.com/id/1035363; http://www.zerodayinitiative.com/advisories/ZDI-16-202
CVE: CVE-2016-1747
Published: 2016-03-24
Description: IOGraphics in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1746.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-119
References: http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html; http://www.securitytracker.com/id/1035363; http://www.zerodayinitiative.com/advisories/ZDI-16-205