deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-3615
Published: 2016-07-21
Description: Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows remote authenticated users to affect availability via vectors related to Server: DML.
CVSS Score: 5.3 (MEDIUM)
References: http://lists.opensuse.org/opensuse-updates/2016-09/msg00042.html; http://rhn.redhat.com/errata/RHSA-2016-1480.html; http://rhn.redhat.com/errata/RHSA-2016-1601.html
CVE: CVE-2016-5436
Published: 2016-07-21
Description: Unspecified vulnerability in Oracle MySQL 5.7.12 and earlier allows remote administrators to affect availability via vectors related to Server: InnoDB.
CVSS Score: 4.9 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/91787; http://www.securityfocus.com/bid/91906
CVE: CVE-2016-5437
Published: 2016-07-21
Description: Unspecified vulnerability in Oracle MySQL 5.7.12 and earlier allows remote administrators to affect availability via vectors related to Server: Log.
CVSS Score: 4.9 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/91787; http://www.securityfocus.com/bid/91917
CVE: CVE-2016-5439
Published: 2016-07-21
Description: Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote administrators to affect availability via vectors related to Server: Privileges.
CVSS Score: 4.9 (MEDIUM)
References: http://rhn.redhat.com/errata/RHSA-2016-1601.html; http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/91787
CVE: CVE-2016-5440
Published: 2016-07-21
Description: Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows remote administrators to affect availability via vectors related to Server: RBR.
CVSS Score: 4.9 (MEDIUM)
References: http://lists.opensuse.org/opensuse-updates/2016-09/msg00042.html; http://rhn.redhat.com/errata/RHSA-2016-1480.html; http://rhn.redhat.com/errata/RHSA-2016-1601.html
CVE: CVE-2016-5441
Published: 2016-07-21
Description: Unspecified vulnerability in Oracle MySQL 5.7.12 and earlier allows remote administrators to affect availability via vectors related to Server: Replication.
CVSS Score: 4.9 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/91787; http://www.securityfocus.com/bid/91915
CVE: CVE-2016-5442
Published: 2016-07-21
Description: Unspecified vulnerability in Oracle MySQL 5.7.12 and earlier allows remote administrators to affect availability via vectors related to Server: Security: Encryption.
CVSS Score: 4.9 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/91787; http://www.securityfocus.com/bid/91974
CVE: CVE-2016-5443
Published: 2016-07-21
Description: Unspecified vulnerability in Oracle MySQL 5.7.12 and earlier allows local users to affect availability via vectors related to Server: Connection.
CVSS Score: 4.7 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/91787; http://www.securityfocus.com/bid/91963
CVE: CVE-2016-5444
Published: 2016-07-21
Description: Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier and MariaDB before 5.5.49, 10.0.x before 10.0.25, and 10.1.x before 10.1.14 allows remote attackers to affect confidentiality via vectors related to Server: Connection.
CVSS Score: 3.7 (LOW)
References: http://rhn.redhat.com/errata/RHSA-2016-0705.html; http://rhn.redhat.com/errata/RHSA-2016-1480.html; http://rhn.redhat.com/errata/RHSA-2016-1481.html
CVE: CVE-2016-5445
Published: 2016-07-21
Description: Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
CVSS Score: 8.3 (HIGH)
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/91787; http://www.securityfocus.com/bid/91991
CVE: CVE-2016-5446
Published: 2016-07-21
Description: Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Infrastructure.
CVSS Score: 7.3 (HIGH)
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/91787; http://www.securityfocus.com/bid/91998
CVE: CVE-2016-5447
Published: 2016-07-21
Description: Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.
CVSS Score: 7.6 (HIGH)
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/91787; http://www.securityfocus.com/bid/91982
CVE: CVE-2016-5448
Published: 2016-07-21
Description: Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote attackers to affect integrity and availability via vectors related to SNMP.
CVSS Score: 6.5 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/91787; http://www.securityfocus.com/bid/92008
CVE: CVE-2016-5449
Published: 2016-07-21
Description: Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote attackers to affect availability via vectors related to Console Redirection.
CVSS Score: 7.5 (HIGH)
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/91787; http://www.securityfocus.com/bid/91986
CVE: CVE-2016-5450
Published: 2016-07-21
Description: Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote attackers to affect integrity via vectors related to UIF Open UI.
CVSS Score: 4.7 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/91787; http://www.securityfocus.com/bid/91981
CVE: CVE-2016-5451
Published: 2016-07-21
Description: Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote authenticated users to affect confidentiality and integrity via vectors related to EAI, a different vulnerability than CVE-2016-5468.
CVSS Score: 8.1 (HIGH)
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/91787; http://www.securityfocus.com/bid/91954
CVE: CVE-2016-5452
Published: 2016-07-21
Description: Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect confidentiality via vectors related to Verified Boot.
CVSS Score: 5.5 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/91787; http://www.securityfocus.com/bid/91916
CVE: CVE-2016-5453
Published: 2016-07-21
Description: Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to IPMI.
CVSS Score: 9.8 (CRITICAL)
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/91787; http://www.securityfocus.com/bid/92014
CVE: CVE-2016-5454
Published: 2016-07-21
Description: Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect integrity and availability via vectors related to Verified Boot.
CVSS Score: 6.4 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/91787; http://www.securityfocus.com/bid/91957
CVE: CVE-2016-5455
Published: 2016-07-21
Description: Unspecified vulnerability in the Oracle Communications Messaging Server component in Oracle Communications Applications 6.3, 7.0, and 8.0 allows remote attackers to affect confidentiality via vectors related to Multiplexor.
CVSS Score: 5.3 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/91787; http://www.securityfocus.com/bid/91863
CVE: CVE-2016-5456
Published: 2016-07-21
Description: Unspecified vulnerability in the Siebel Core - Server Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote authenticated users to affect confidentiality via vectors related to Services.
CVSS Score: 5.3 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/91787; http://www.securityfocus.com/bid/91958
CVE: CVE-2016-5457
Published: 2016-07-21
Description: Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to LUMAIN.
CVSS Score: 8.8 (HIGH)
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/91787; http://www.securityfocus.com/bid/91995
CVE: CVE-2016-5458
Published: 2016-07-21
Description: Unspecified vulnerability in the Oracle Communications EAGLE Application Processor component in Oracle Communications Applications 16.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to APPL.
CVSS Score: 6.4 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/91787; http://www.securityfocus.com/bid/91868
CVE: CVE-2016-5459
Published: 2016-07-21
Description: Unspecified vulnerability in the Siebel Core - Common Components component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote attackers to affect integrity via vectors related to iHelp.
CVSS Score: 4.7 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/91787; http://www.securityfocus.com/bid/91985
CVE: CVE-2016-5460
Published: 2016-07-21
Description: Unspecified vulnerability in the Siebel Core - Server Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote attackers to affect confidentiality via vectors related to Services, a different vulnerability than CVE-2016-3450 and CVE-2016-5466.
CVSS Score: 3.7 (LOW)
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/91787; http://www.securityfocus.com/bid/91961
CVE: CVE-2016-5461
Published: 2016-07-21
Description: Unspecified vulnerability in the Siebel Core - Server Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote authenticated users to affect confidentiality via vectors related to Object Manager.
CVSS Score: 6.5 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/91787; http://www.securityfocus.com/bid/91964
CVE: CVE-2016-5462
Published: 2016-07-21
Description: Unspecified vulnerability in the Siebel Core - Server Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote administrators to affect confidentiality via vectors related to Workspaces.
CVSS Score: 2.7 (LOW)
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/91787; http://www.securityfocus.com/bid/91968
CVE: CVE-2016-5463
Published: 2016-07-21
Description: Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote authenticated users to affect integrity via vectors related to SWSE Server, a different vulnerability than CVE-2016-5464.
CVSS Score: 4.1 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/91787; http://www.securityfocus.com/bid/91988
CVE: CVE-2016-5464
Published: 2016-07-21
Description: Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote authenticated users to affect integrity via vectors related to SWSE Server, a different vulnerability than CVE-2016-5463.
CVSS Score: 4.1 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/91787; http://www.securityfocus.com/bid/91994
CVE: CVE-2016-5465
Published: 2016-07-21
Description: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote attackers to affect confidentiality and integrity via vectors related to Panel Processor.
CVSS Score: 8.2 (HIGH)
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/91787; http://www.securityfocus.com/bid/91877
CVE: CVE-2016-5466
Published: 2016-07-21
Description: Unspecified vulnerability in the Siebel Core - Server Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote attackers to affect confidentiality via vectors related to Services, a different vulnerability than CVE-2016-3450 and CVE-2016-5460.
CVSS Score: 3.7 (LOW)
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/91787; http://www.securityfocus.com/bid/91970
CVE: CVE-2016-5467
Published: 2016-07-21
Description: Unspecified vulnerability in the PeopleSoft Enterprise FSCM component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality and integrity via vectors related to eProcurement.
CVSS Score: 5.4 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/91787; http://www.securityfocus.com/bid/91879
CVE: CVE-2016-5468
Published: 2016-07-21
Description: Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote authenticated users to affect confidentiality and integrity via vectors related to EAI, a different vulnerability than CVE-2016-5451.
CVSS Score: 5.4 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/91787; http://www.securityfocus.com/bid/91973
CVE: CVE-2016-5469
Published: 2016-07-21
Description: Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect availability via vectors related to Kernel, a different vulnerability than CVE-2016-3497 and CVE-2016-5471.
CVSS Score: 5.5 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/91787; http://www.securityfocus.com/bid/91938
CVE: CVE-2016-5470
Published: 2016-07-21
Description: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows remote attackers to affect confidentiality via vectors related to Application Designer.
CVSS Score: 6.5 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/91787; http://www.securityfocus.com/bid/91875
CVE: CVE-2016-5471
Published: 2016-07-21
Description: Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect availability via vectors related to Kernel, a different vulnerability than CVE-2016-3497 and CVE-2016-5469.
CVSS Score: 5.5 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/91787; http://www.securityfocus.com/bid/92020
CVE: CVE-2016-5472
Published: 2016-07-21
Description: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows local users to affect confidentiality, integrity, and availability via vectors related to Install and Packaging.
CVSS Score: 7.8 (HIGH)
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/91787; http://www.securityfocus.com/bid/91871
CVE: CVE-2016-5473
Published: 2016-07-21
Description: Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality via vectors related to File Folders / Attachment, a different vulnerability than CVE-2016-3537.
CVSS Score: 3.1 (LOW)
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/91787; http://www.securityfocus.com/bid/92021
CVE: CVE-2016-5474
Published: 2016-07-21
Description: Unspecified vulnerability in the Oracle Retail Service Backbone component in Oracle Retail Applications 14.0, 14.1, and 15.0 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to RSB Kernel.
CVSS Score: 8.8 (HIGH)
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/91787; http://www.securityfocus.com/bid/91891
CVE: CVE-2016-5475
Published: 2016-07-21
Description: Unspecified vulnerability in the Oracle Retail Service Backbone component in Oracle Retail Applications 14.0, 14.1, and 15.0 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to Install.
CVSS Score: 7.6 (HIGH)
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/91787; http://www.securityfocus.com/bid/91895
CVE: CVE-2016-5476
Published: 2016-07-21
Description: Unspecified vulnerability in the Oracle Retail Integration Bus component in Oracle Retail Applications 13.0, 13.1, 13.2, 14.0, 14.1, and 15.0 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to Install.
CVSS Score: 7.6 (HIGH)
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/91787; http://www.securityfocus.com/bid/91897
CVE: CVE-2016-5477
Published: 2016-07-21
Description: Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1 and 3.0.1 allows remote attackers to affect confidentiality via vectors related to Administration.
CVSS Score: 5.8 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/91787; http://www.securityfocus.com/bid/92032
CVE: CVE-2014-9862
Published: 2016-07-22
Description: Integer signedness error in bspatch.c in bspatch in bsdiff, as used in Apple OS X before 10.11.6 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow) via a crafted patch file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html; http://lists.opensuse.org/opensuse-updates/2016-08/msg00026.html; http://seclists.org/fulldisclosure/2020/Jul/8
CVE: CVE-2016-1863
Published: 2016-07-22
Description: The kernel in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4582 and CVE-2016-4653.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html; http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html
CVE: CVE-2016-1865
Published: 2016-07-22
Description: The kernel in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows local users to cause a denial of service (NULL pointer dereference) via unspecified vectors.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html; http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html
CVE: CVE-2016-4582
Published: 2016-07-22
Description: The kernel in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1863 and CVE-2016-4653.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html; http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html
CVE: CVE-2016-4583
Published: 2016-07-22
Description: WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to bypass the Same Origin Policy and obtain image date from an unintended web site via a timing attack involving an SVG document.
CVSS Score: 3.1 (LOW)
CWE: CWE-362
References: http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html; http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html; http://lists.apple.com/archives/security-announce/2016/Jul/msg00004.html
CVE: CVE-2016-4584
Published: 2016-07-22
Description: The WebKit Page Loading implementation in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html; http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html; http://lists.apple.com/archives/security-announce/2016/Jul/msg00004.html
CVE: CVE-2016-4585
Published: 2016-07-22
Description: Cross-site scripting (XSS) vulnerability in the WebKit Page Loading implementation in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to inject arbitrary web script or HTML via an HTTP response specifying redirection that is mishandled by Safari.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html; http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html; http://lists.apple.com/archives/security-announce/2016/Jul/msg00004.html
CVE: CVE-2016-4586
Published: 2016-07-22
Description: WebKit in Apple Safari before 9.1.2 and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html; http://lists.apple.com/archives/security-announce/2016/Jul/msg00004.html; http://packetstormsecurity.com/files/138502/WebKitGTK-SOP-Bypass-Information-Disclosure.html