deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-15775
Published: 2017-10-22
Description: XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address controls Branch Selection starting at CADImage+0x[PII_REDACTED]259aa4."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15775; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15775
CVE: CVE-2017-15776
Published: 2017-10-22
Description: XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address may be used as a return value starting at CADImage+0x[PII_REDACTED]285ec1."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15776; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15776
CVE: CVE-2017-15777
Published: 2017-10-22
Description: XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV near NULL starting at CADImage+0x[PII_REDACTED]288750."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15777; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15777
CVE: CVE-2017-15778
Published: 2017-10-22
Description: XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at CADImage+0x[PII_REDACTED]285de7."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15778; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15778
CVE: CVE-2017-15779
Published: 2017-10-22
Description: XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to "Data from Faulting Address controls subsequent Write Address starting at CADImage+0x[PII_REDACTED]0034b0."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15779; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15779
CVE: CVE-2017-15780
Published: 2017-10-22
Description: XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at CADImage+0x[PII_REDACTED]285dad."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15780; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15780
CVE: CVE-2017-15781
Published: 2017-10-22
Description: XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "Read Access Violation on Control Flow starting at CADImage+0x[PII_REDACTED]286a76."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15781; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15781
CVE: CVE-2017-15782
Published: 2017-10-22
Description: XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV starting at CADImage+0x[PII_REDACTED]0032eb."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15782; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15782
CVE: CVE-2017-15783
Published: 2017-10-22
Description: XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address controls Branch Selection starting at CADImage+0x[PII_REDACTED]285ce1."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15783; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15783
CVE: CVE-2017-15784
Published: 2017-10-22
Description: XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to an "Illegal Instruction Violation starting at xnview+0x[PII_REDACTED]370074."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15784; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15784
CVE: CVE-2017-15785
Published: 2017-10-22
Description: XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "Data Execution Prevention Violation near NULL starting at Unknown Symbol @ 0x[PII_REDACTED]000000 called from CADImage+0x[PII_REDACTED]286a79."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15785; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15785
CVE: CVE-2017-15786
Published: 2017-10-22
Description: XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at CADImage+0x[PII_REDACTED]1a78db."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15786; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15786
CVE: CVE-2017-15787
Published: 2017-10-22
Description: XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "Data Execution Prevention Violation starting at xnview+0x[PII_REDACTED]580063."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15787; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15787
CVE: CVE-2017-15788
Published: 2017-10-22
Description: XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV starting at CADImage+0x[PII_REDACTED]002d83."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15788; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15788
CVE: CVE-2017-15789
Published: 2017-10-22
Description: XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV starting at CADImage+0x[PII_REDACTED]0048e7."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15789; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15789
CVE: CVE-2017-15804
Published: 2017-10-22
Description: The glob function in glob.c in the GNU C Library (aka glibc or libc6) before 2.27 contains a buffer overflow during unescaping of user names with the ~ operator.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/101535; https://access.redhat.com/errata/RHSA-2018:0805; https://access.redhat.com/errata/RHSA-2018:1879
CVE: CVE-2017-7072
Published: 2017-10-23
Description: An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "iBooks" component. It allows remote attackers to cause a denial of service (persistent outage) via a crafted iBooks file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/100892; http://www.securitytracker.com/id/1039385; https://support.apple.com/HT208112
CVE: CVE-2017-7074
Published: 2017-10-23
Description: An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "AppSandbox" component. It allows attackers to cause a denial of service via a crafted app.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/100993; http://www.securitytracker.com/id/1039427; https://support.apple.com/HT208144
CVE: CVE-2017-7076
Published: 2017-10-23
Description: An issue was discovered in certain Apple products. Xcode before 9 is affected. The issue involves the "ld64" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted Mach-O file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/100894; http://www.securitytracker.com/id/1039386; https://support.apple.com/HT208103
CVE: CVE-2017-7077
Published: 2017-10-23
Description: An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "IOFireWireFamily" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/100993; http://www.securitytracker.com/id/1039427; https://support.apple.com/HT208144
CVE: CVE-2017-7078
Published: 2017-10-23
Description: An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. The issue involves the "Mail Drafts" component. It allows remote attackers to obtain sensitive information by reading unintended cleartext transmissions.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-319
References: http://www.securityfocus.com/bid/100999; http://www.securitytracker.com/id/1039427; https://support.apple.com/HT208112
CVE: CVE-2017-7079
Published: 2017-10-23
Description: An issue was discovered in certain Apple products. iTunes before 12.7 is affected. The issue involves the "Data Sync" component. It allows attackers to access iOS backups (written by iTunes) via a crafted app.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-552
References: http://www.securityfocus.com/bid/100983; https://support.apple.com/HT208140; http://www.securityfocus.com/bid/100983
CVE: CVE-2017-7080
Published: 2017-10-23
Description: An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the "Security" component. It allows remote attackers to bypass intended certificate-trust restrictions via a revoked X.509 certificate.
CVSS Score: 7.5 (HIGH)
CWE: CWE-295
References: http://www.securityfocus.com/bid/100992; http://www.securitytracker.com/id/1039427; https://support.apple.com/HT208112
CVE: CVE-2017-7081
Published: 2017-10-23
Description: An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/100985; http://www.securitytracker.com/id/1039384; http://www.securitytracker.com/id/1039428
CVE: CVE-2017-7082
Published: 2017-10-23
Description: An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "Screen Lock" component. It allows physically proximate attackers to read Application Firewall prompts.
CVSS Score: 2.4 (LOW)
CWE: CWE-200
References: http://www.securityfocus.com/bid/100993; http://www.securitytracker.com/id/1039427; https://support.apple.com/HT208144
CVE: CVE-2017-7083
Published: 2017-10-23
Description: An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the "CFNetwork Proxies" component. It allows remote attackers to cause a denial of service.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/100992; http://www.securitytracker.com/id/1039427; https://support.apple.com/HT208112
CVE: CVE-2017-7084
Published: 2017-10-23
Description: An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "Application Firewall" component. It allows remote attackers to bypass intended settings in opportunistic circumstances by leveraging incorrect handling of a denied setting after an upgrade.
CVSS Score: 3.7 (LOW)
References: http://www.securityfocus.com/bid/100993; http://www.securitytracker.com/id/1039427; https://support.apple.com/HT208144
CVE: CVE-2017-7085
Published: 2017-10-23
Description: An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. The issue involves the "Safari" component. It allows remote attackers to spoof the address bar.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/100895; http://www.securitytracker.com/id/1039384; http://www.securitytracker.com/id/1039385
CVE: CVE-2017-7086
Published: 2017-10-23
Description: An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the "libc" component. It allows remote attackers to cause a denial of service (resource consumption) via a crafted string that is mishandled by the glob function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://www.securityfocus.com/bid/100990; http://www.securitytracker.com/id/1039427; https://support.apple.com/HT208112
CVE: CVE-2017-7087
Published: 2017-10-23
Description: An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/100985; http://www.securitytracker.com/id/1039384; http://www.securitytracker.com/id/1039428
CVE: CVE-2017-7088
Published: 2017-10-23
Description: An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Exchange ActiveSync" component. It allows remote attackers to erase a device in opportunistic circumstances by hijacking a cleartext AutoDiscover V1 session during the setup of an Exchange account.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-275
References: http://www.securityfocus.com/bid/100892; http://www.securitytracker.com/id/1039385; https://support.apple.com/HT208112
CVE: CVE-2017-7089
Published: 2017-10-23
Description: An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS (UXSS) attacks via a crafted web site that is mishandled during parent-tab processing.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/100893; http://www.securitytracker.com/id/1039384; http://www.securitytracker.com/id/1039385
CVE: CVE-2017-7090
Published: 2017-10-23
Description: An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive cookie information via a custom URL scheme.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.securityfocus.com/bid/100995; http://www.securitytracker.com/id/1039384; http://www.securitytracker.com/id/1039428
CVE: CVE-2017-7091
Published: 2017-10-23
Description: An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/100995; http://www.securitytracker.com/id/1039384; http://www.securitytracker.com/id/1039428
CVE: CVE-2017-7092
Published: 2017-10-23
Description: An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/100994; http://www.securitytracker.com/id/1039384; http://www.securitytracker.com/id/1039428
CVE: CVE-2017-7093
Published: 2017-10-23
Description: An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/100994; http://www.securitytracker.com/id/1039384; http://www.securitytracker.com/id/1039428
CVE: CVE-2017-7094
Published: 2017-10-23
Description: An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/100995; http://www.securitytracker.com/id/1039384; http://www.securitytracker.com/id/1039428
CVE: CVE-2017-7095
Published: 2017-10-23
Description: An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/101006; http://www.securitytracker.com/id/1039384; http://www.securitytracker.com/id/1039428
CVE: CVE-2017-7096
Published: 2017-10-23
Description: An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/101006; http://www.securitytracker.com/id/1039384; http://www.securitytracker.com/id/1039428
CVE: CVE-2017-7097
Published: 2017-10-23
Description: An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Mail MessageUI" component. It allows attackers to cause a denial of service (memory corruption) via a crafted image.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: http://www.securityfocus.com/bid/100929; http://www.securitytracker.com/id/1039385; https://support.apple.com/HT208112
CVE: CVE-2017-7098
Published: 2017-10-23
Description: An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/100998; http://www.securitytracker.com/id/1039384; http://www.securitytracker.com/id/1039428
CVE: CVE-2017-7099
Published: 2017-10-23
Description: An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/100998; http://www.securitytracker.com/id/1039384; http://www.securitytracker.com/id/1039428
CVE: CVE-2017-7100
Published: 2017-10-23
Description: An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/100995; http://www.securitytracker.com/id/1039384; http://www.securitytracker.com/id/1039428
CVE: CVE-2017-7102
Published: 2017-10-23
Description: An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/100995; http://www.securitytracker.com/id/1039384; http://www.securitytracker.com/id/1039428
CVE: CVE-2017-7103
Published: 2017-10-23
Description: An issue was discovered in certain Apple products. iOS before 11 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the "Wi-Fi" component. It might allow remote attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via crafted Wi-Fi traffic.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/100927; http://www.securitytracker.com/id/1039385; https://bugs.chromium.org/p/project-zero/issues/detail?id=1302