deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2015-4892
Published: 2015-10-21
Description: Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 allows remote authenticated users to affect integrity via unknown vectors related to Security, a different vulnerability than CVE-2015-4917.
CVSS Score: 3.5 (LOW)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.securitytracker.com/id/1033899; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2015-4893
Published: 2015-10-21
Description: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2015-4803 and CVE-2015-4911.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00008.html
CVE: CVE-2015-4894
Published: 2015-10-21
Description: Unspecified vulnerability in the Mobile Server component in Oracle Database Mobile/Lite Server 10.3.0.3, 11.3.0.2, and 12.1.0.0 allows remote authenticated users to affect integrity and availability via unknown vectors.
CVSS Score: 4.9 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/77131; http://www.securitytracker.com/id/1033883
CVE: CVE-2015-4895
Published: 2015-10-21
Description: Unspecified vulnerability in Oracle MySQL Server 5.6.25 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : InnoDB.
CVSS Score: 3.5 (LOW)
References: http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177539.html; http://www.debian.org/security/2015/dsa-3385; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2015-4896
Published: 2015-10-21
Description: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.0.34, 4.1.42, 4.2.34, 4.3.32, and 5.0.8, when a VM has the Remote Display feature (RDP) enabled, allows remote attackers to affect availability via unknown vectors related to Core.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-updates/2015-11/msg00000.html; http://lists.opensuse.org/opensuse-updates/2015-11/msg00172.html; http://www.debian.org/security/2015/dsa-3384
CVE: CVE-2015-4898
Published: 2015-10-21
Description: Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote authenticated users to affect integrity via vectors related to Diagnostics and DMZ.
CVSS Score: 4.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.securitytracker.com/id/1033877; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2015-4899
Published: 2015-10-21
Description: Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.0.1 and 3.1.2 allows remote attackers to affect confidentiality via unknown vectors related to Security.
CVSS Score: 4.3 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.securitytracker.com/id/1033875; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2015-4900
Published: 2015-10-21
Description: Unspecified vulnerability in the XDB - XML Database component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.
CVSS Score: 6.5 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.securitytracker.com/id/1033883; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2015-4901
Published: 2015-10-22
Description: Unspecified vulnerability in Oracle Java SE 8u60 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to JavaFX.
CVSS Score: 9.3 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00009.html; http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html; http://rhn.redhat.com/errata/RHSA-2015-1926.html
CVE: CVE-2015-4902
Published: 2015-10-22
Description: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-284
References: http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00009.html; http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.html
CVE: CVE-2015-4903
Published: 2015-10-22
Description: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via vectors related to RMI.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00008.html
CVE: CVE-2015-4904
Published: 2015-10-22
Description: Unspecified vulnerability in Oracle MySQL Server 5.6.25 and earlier allows remote authenticated users to affect availability via unknown vectors related to libmysqld.
CVSS Score: 4.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/77219; http://www.securitytracker.com/id/1033894
CVE: CVE-2015-4905
Published: 2015-10-22
Description: Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availability via vectors related to Server : DML.
CVSS Score: 4.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/77143; http://www.securitytracker.com/id/1033894
CVE: CVE-2015-4906
Published: 2015-10-22
Description: Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 allows remote attackers to affect confidentiality via unknown vectors related to JavaFX, a different vulnerability than CVE-2015-4908 and CVE-2015-4916.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00009.html; http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html; http://rhn.redhat.com/errata/RHSA-2015-1926.html
CVE: CVE-2015-4907
Published: 2015-10-22
Description: Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Solaris Kernel Zones, a different vulnerability than CVE-2015-4820.
CVSS Score: 4.6 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.securitytracker.com/id/1033881; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2015-4908
Published: 2015-10-22
Description: Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2015-4906 and CVE-2015-4916.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00009.html; http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html; http://rhn.redhat.com/errata/RHSA-2015-1926.html
CVE: CVE-2015-4909
Published: 2015-10-22
Description: Unspecified vulnerability in the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.2.4.0, 12.1.2.0.0, and 12.1.3.0.0 allows remote attackers to affect integrity via vectors related to ADF Faces.
CVSS Score: 5.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.securitytracker.com/id/1033898; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2015-4910
Published: 2015-10-22
Description: Unspecified vulnerability in Oracle MySQL Server 5.6.26 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Memcached.
CVSS Score: 2.1 (LOW)
References: http://rhn.redhat.com/errata/RHSA-2016-0705.html; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/77234
CVE: CVE-2015-4911
Published: 2015-10-22
Description: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2015-4803 and CVE-2015-4893.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00008.html
CVE: CVE-2015-4912
Published: 2015-10-22
Description: Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.2.2 and 11.1.2.3 allows remote attackers to affect confidentiality via vectors related to SSO Engine.
CVSS Score: 4.3 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.securitytracker.com/id/1033898; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2015-4913
Published: 2015-10-22
Description: Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via vectors related to Server : DML, a different vulnerability than CVE-2015-4858.
CVSS Score: 3.5 (LOW)
References: http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177539.html; http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00010.html; http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00011.html
CVE: CVE-2015-4914
Published: 2015-10-22
Description: Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 10.1.3.5, 11.1.1.7, 11.1.1.9, 12.1.2.0, and 12.1.3.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Web Listener.
CVSS Score: 3.5 (LOW)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.securitytracker.com/id/1033907; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2015-4915
Published: 2015-10-22
Description: Unspecified vulnerability in the Integrated Lights Out Manager (ILOM) component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to System Management.
CVSS Score: 10.0 (HIGH)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.securitytracker.com/id/1033882; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2015-4916
Published: 2015-10-22
Description: Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2015-4906 and CVE-2015-4908.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00009.html; http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html; http://rhn.redhat.com/errata/RHSA-2015-1926.html
CVE: CVE-2015-4917
Published: 2015-10-22
Description: Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 allows remote authenticated users to affect integrity via unknown vectors related to Security, a different vulnerability than CVE-2015-4892.
CVSS Score: 3.5 (LOW)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.securitytracker.com/id/1033899; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2015-6975
Published: 2015-10-23
Description: CoreText in Apple iOS before 9.1, OS X before 10.11.1, and iTunes before 12.3.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6992 and CVE-2015-7017.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00006.html
CVE: CVE-2015-6979
Published: 2015-10-23
Description: GasGauge in Apple iOS before 9.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Dec/msg00002.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html; http://www.securityfocus.com/bid/77268
CVE: CVE-2015-6981
Published: 2015-10-23
Description: WebKit, as used in Apple iOS before 9.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-10-21-1.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html; http://www.securitytracker.com/id/1033929; https://support.apple.com/HT205370
CVE: CVE-2015-6982
Published: 2015-10-23
Description: WebKit, as used in Apple iOS before 9.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-10-21-1.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html; http://www.securitytracker.com/id/1033929; https://support.apple.com/HT205370
CVE: CVE-2015-6986
Published: 2015-10-23
Description: com.apple.driver.AppleVXD393 in the Graphics Driver subsystem in Apple iOS before 9.1 allows attackers to execute arbitrary code via a crafted app that leverages an unspecified "type confusion."
CVSS Score: 9.3 (HIGH)
References: http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html; http://www.securityfocus.com/bid/77268; http://www.securitytracker.com/id/1033929
CVE: CVE-2015-6992
Published: 2015-10-23
Description: CoreText in Apple iOS before 9.1, OS X before 10.11.1, and iTunes before 12.3.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6975 and CVE-2015-7017.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00006.html
CVE: CVE-2015-6997
Published: 2015-10-23
Description: The X.509 certificate-trust implementation in Apple iOS before 9.1 does not recognize that the kSecRevocationRequirePositiveResponse flag implies a revocation-checking requirement, which makes it easier for man-in-the-middle attackers to spoof endpoints by leveraging access to a revoked certificate.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-254
References: http://lists.apple.com/archives/security-announce/2015/Dec/msg00002.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html; http://www.securityfocus.com/bid/77268
CVE: CVE-2015-6999
Published: 2015-10-23
Description: The OCSP client in Apple iOS before 9.1 does not check for certificate expiry, which allows remote attackers to spoof a valid certificate by leveraging access to a revoked certificate.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-254
References: http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html; http://www.securityfocus.com/bid/77268; http://www.securitytracker.com/id/1033929
CVE: CVE-2015-7000
Published: 2015-10-23
Description: Notification Center in Apple iOS before 9.1 mishandles changes to "Show on Lock Screen" settings, which allows physically proximate attackers to obtain sensitive information by looking for a (1) Phone or (2) Messages notification on the lock screen soon after a setting was disabled.
CVSS Score: 2.1 (LOW)
CWE: CWE-200
References: http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html; http://www.securityfocus.com/bid/77268; http://www.securitytracker.com/id/1033929
CVE: CVE-2015-7004
Published: 2015-10-23
Description: The kernel in Apple iOS before 9.1 allows attackers to cause a denial of service via a crafted app.
CVSS Score: 7.1 (HIGH)
CWE: CWE-20
References: http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html; http://www.securityfocus.com/bid/77268; http://www.securitytracker.com/id/1033929
CVE: CVE-2015-7005
Published: 2015-10-23
Description: WebKit, as used in Apple iOS before 9.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-10-21-1.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html; http://www.securitytracker.com/id/1033929; https://support.apple.com/HT205370
CVE: CVE-2015-7017
Published: 2015-10-23
Description: CoreText in Apple iOS before 9.1, OS X before 10.11.1, and iTunes before 12.3.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6975 and CVE-2015-6992.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00006.html
CVE: CVE-2015-7022
Published: 2015-10-23
Description: The Telephony subsystem in Apple iOS before 9.1 allows attackers to obtain sensitive call-status information via a crafted app.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html; http://www.securityfocus.com/bid/77268; http://www.securitytracker.com/id/1033929
CVE: CVE-2015-7030
Published: 2015-10-23
Description: The Swift implementation in Apple Xcode before 7.1 mishandles type conversion, which has unspecified impact and attack vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-17
References: http://lists.apple.com/archives/security-announce/2015/Oct/msg00008.html; http://www.securitytracker.com/id/1033930; https://support.apple.com/HT205379
CVE: CVE-2015-7031
Published: 2015-10-23
Description: The Web Service component in Apple OS X Server before 5.0.15 omits an unspecified HTTP header configuration, which allows remote attackers to bypass intended access restrictions via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://lists.apple.com/archives/security-announce/2015/Oct/msg00009.html; http://www.securitytracker.com/id/1033933; https://support.apple.com/HT205376
CVE: CVE-2015-7035
Published: 2015-10-23
Description: Apple Mac EFI before 2015-002, as used in OS X before 10.11.1 and other products, mishandles arguments, which allows attackers to reach "unused" functions via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-17
References: http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00007.html; http://www.securityfocus.com/bid/74971
CVE: CVE-2015-5196
Published: 2015-10-23
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-7703. Reason: This candidate is a reservation duplicate of CVE-2015-7703. Notes: All CVE users should reference CVE-2015-7703 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
CVE: CVE-2015-5924
Published: 2015-10-23
Description: The OpenGL implementation in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html; http://www.securityfocus.com/bid/77263
CVE: CVE-2015-5925
Published: 2015-10-23
Description: The CoreGraphics component in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2015-5926.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00003.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html
CVE: CVE-2015-5926
Published: 2015-10-23
Description: The CoreGraphics component in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2015-5925.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00003.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html
CVE: CVE-2015-5927
Published: 2015-10-23
Description: FontParser in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-5942.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00003.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html
CVE: CVE-2015-5928
Published: 2015-10-23
Description: WebKit, as used in Apple iOS before 9.1, Safari before 9.0.1, and iTunes before 12.3.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-10-21-1, APPLE-SA-2015-10-21-3, and APPLE-SA-2015-10-21-5.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00004.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00006.html
CVE: CVE-2015-5929
Published: 2015-10-23
Description: WebKit, as used in Apple iOS before 9.1, Safari before 9.0.1, and iTunes before 12.3.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-10-21-1, APPLE-SA-2015-10-21-3, and APPLE-SA-2015-10-21-5.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00004.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00006.html