deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-7654
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/94907; http://www.securitytracker.com/id/1037459; https://security.gentoo.org/glsa/201706-15
CVE: CVE-2016-7655
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. The issue involves the "CoreMedia External Displays" component. It allows local users to gain privileges or cause a denial of service (type confusion) via unspecified vectors.
CVSS Score: 7.8 (HIGH)
CWE: CWE-704
References: http://www.securityfocus.com/bid/94906; http://www.securitytracker.com/id/1037469; https://support.apple.com/HT207422
CVE: CVE-2016-7656
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/94907; http://www.securitytracker.com/id/1037459; https://security.gentoo.org/glsa/201706-15
CVE: CVE-2016-7657
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "IOKit" component. It allows attackers to obtain sensitive information from kernel memory via a crafted app.
CVSS Score: 3.3 (LOW)
CWE: CWE-20
References: http://www.securityfocus.com/bid/94905; http://www.securitytracker.com/id/1037469; https://support.apple.com/HT207422
CVE: CVE-2016-7658
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "Audio" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/94905; http://www.securitytracker.com/id/1037469; https://support.apple.com/HT207422
CVE: CVE-2016-7659
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "Audio" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/94905; http://www.securitytracker.com/id/1037469; https://support.apple.com/HT207422
CVE: CVE-2016-7660
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "syslog" component. It allows local users to gain privileges via unspecified vectors related to Mach port name references.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/94905; http://www.securitytracker.com/id/1037469; https://support.apple.com/HT207422
CVE: CVE-2016-7661
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. The issue involves the "Power Management" component. It allows local users to gain privileges via unspecified vectors related to Mach port name references.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/94906; http://www.securitytracker.com/id/1037469; https://support.apple.com/HT207422
CVE: CVE-2016-7662
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "Security" component, which allows remote attackers to spoof certificates via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-295
References: http://www.securityfocus.com/bid/94905; http://www.securitytracker.com/id/1037469; https://support.apple.com/HT207422
CVE: CVE-2016-7663
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "CoreFoundation" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted string.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/94905; http://www.securitytracker.com/id/1037469; https://support.apple.com/HT207422
CVE: CVE-2016-7664
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the "Accessibility" component. which allows physically proximate attackers to obtain sensitive photo and contact information by leveraging the availability of excessive options during lockscreen access.
CVSS Score: 2.4 (LOW)
CWE: CWE-200
References: http://www.securityfocus.com/bid/94850; http://www.securitytracker.com/id/1037429; https://support.apple.com/HT207422
CVE: CVE-2016-7665
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the "Graphics Driver" component, which allows remote attackers to cause a denial of service via a crafted video.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/94850; http://www.securitytracker.com/id/1037429; https://support.apple.com/HT207422
CVE: CVE-2016-7666
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. Transporter before 1.9.2 is affected. The issue involves the "iTMSTransporter" component, which allows attackers to obtain sensitive information via a crafted EPUB.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/94912; https://support.apple.com/HT207432; http://www.securityfocus.com/bid/94912
CVE: CVE-2016-7667
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. The issue involves the "CoreText" component. It allows remote attackers to cause a denial of service via a crafted string.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://support.apple.com/HT207422; https://support.apple.com/HT207423; https://support.apple.com/HT207422
CVE: CVE-2016-7714
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "IOKit" component. It allows local users to obtain sensitive kernel memory-layout information via unspecified vectors.
CVSS Score: 3.3 (LOW)
CWE: CWE-200
References: https://support.apple.com/HT207422; https://support.apple.com/HT207423; https://support.apple.com/HT207487
CVE: CVE-2016-7742
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "xar" component, which allows remote attackers to execute arbitrary code via a crafted archive that triggers use of uninitialized memory locations.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://support.apple.com/HT207423; https://support.apple.com/HT207423
CVE: CVE-2016-7759
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10 is affected. The issue involves the "Springboard" component, which allows physically proximate attackers to obtain sensitive information by viewing application snapshots in the Task Switcher.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://support.apple.com/HT207143; https://support.apple.com/HT207143
CVE: CVE-2016-7761
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "WiFi" component, which allows local users to obtain sensitive network-configuration information by leveraging global storage.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://support.apple.com/HT207423; https://support.apple.com/HT207423
CVE: CVE-2016-7762
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the "WebKit" component, which allows XSS attacks against Safari.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://support.apple.com/HT207422; https://support.apple.com/HT207422
CVE: CVE-2016-7765
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the "Clipboard" component, which allows physically proximate attackers to obtain sensitive information in the lockscreen state by viewing clipboard contents.
CVSS Score: 2.4 (LOW)
CWE: CWE-200
References: https://support.apple.com/HT207422; https://support.apple.com/HT207422
CVE: CVE-2017-2350
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/95727; http://www.securitytracker.com/id/1037668; https://security.gentoo.org/glsa/201706-15
CVE: CVE-2017-2351
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. The issue involves the "WiFi" component, which allows physically proximate attackers to bypass the activation-lock protection mechanism and view the home screen via unspecified vectors.
CVSS Score: 2.4 (LOW)
CWE: CWE-20
References: http://www.securityfocus.com/bid/95722; http://www.securitytracker.com/id/1037668; https://support.apple.com/HT207482
CVE: CVE-2017-2352
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. watchOS before 3.1.3 is affected. The issue involves the "Unlock with iPhone" component, which allows attackers to bypass the wrist-presence protection mechanism and unlock a Watch device via unspecified vectors.
CVSS Score: 4.6 (MEDIUM)
References: http://www.securityfocus.com/bid/95730; http://www.securitytracker.com/id/1037668; https://support.apple.com/HT207482
CVE: CVE-2017-2353
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. macOS before 10.12.3 is affected. The issue involves the "Bluetooth" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (use-after-free) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/95723; http://www.securitytracker.com/id/1037671; https://support.apple.com/HT207483
CVE: CVE-2017-2354
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. iCloud before 6.1.1 is affected. iTunes before 12.5.5 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/95736; http://www.securitytracker.com/id/1037668; https://security.gentoo.org/glsa/201706-15
CVE: CVE-2017-2355
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. iCloud before 6.1.1 is affected. iTunes before 12.5.5 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (uninitialized memory access and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/95736; http://www.securitytracker.com/id/1037668; https://security.gentoo.org/glsa/201706-15
CVE: CVE-2017-2356
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. iCloud before 6.1.1 is affected. iTunes before 12.5.5 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/95736; http://www.securitytracker.com/id/1037668; https://security.gentoo.org/glsa/201706-15
CVE: CVE-2017-2357
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. macOS before 10.12.3 is affected. The issue involves the "IOAudioFamily" component. It allows attackers to obtain sensitive kernel memory-layout information via a crafted app.
CVSS Score: 3.3 (LOW)
CWE: CWE-200
References: http://www.securityfocus.com/bid/95723; http://www.securitytracker.com/id/1037671; https://support.apple.com/HT207483
CVE: CVE-2017-2358
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. macOS before 10.12.3 is affected. The issue involves the "Graphics Drivers" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/95723; http://www.securitytracker.com/id/1037671; https://support.apple.com/HT207483
CVE: CVE-2017-2359
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. Safari before 10.0.3 is affected. The issue involves the "Safari" component, which allows remote attackers to spoof the address bar via a crafted web site.
CVSS Score: 6.5 (MEDIUM)
References: http://www.securityfocus.com/bid/95724; http://www.securitytracker.com/id/1037669; https://support.apple.com/HT207484
CVE: CVE-2017-2360
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. macOS before 10.12.3 is affected. tvOS before 10.1.1 is affected. watchOS before 3.1.3 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (use-after-free) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/95729; http://www.securityfocus.com/bid/95731; http://www.securitytracker.com/id/1037668
CVE: CVE-2017-2361
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. macOS before 10.12.3 is affected. The issue involves the "Help Viewer" component, which allows XSS attacks via a crafted web site.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/95723; http://www.securitytracker.com/id/1037671; https://bugs.chromium.org/p/project-zero/issues/detail?id=1040
CVE: CVE-2017-2362
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/95727; http://www.securitytracker.com/id/1037668; https://security.gentoo.org/glsa/201706-15
CVE: CVE-2017-2363
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. watchOS before 3.1.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/95728; http://www.securitytracker.com/id/1037668; https://security.gentoo.org/glsa/201706-15
CVE: CVE-2017-2364
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/95725; http://www.securitytracker.com/id/1037668; http://www.securitytracker.com/id/1038137
CVE: CVE-2017-2365
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/95727; http://www.securitytracker.com/id/1037668; https://security.gentoo.org/glsa/201706-15
CVE: CVE-2017-2366
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. iCloud before 6.1.1 is affected. iTunes before 12.5.5 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/95733; http://www.securitytracker.com/id/1037668; https://security.gentoo.org/glsa/201706-15
CVE: CVE-2017-2368
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. The issue involves the "Contacts" component. It allows remote attackers to cause a denial of service (application crash) via a crafted contact card.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/95722; http://www.securitytracker.com/id/1037668; https://support.apple.com/HT207482
CVE: CVE-2017-2369
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/95727; http://www.securitytracker.com/id/1037668; https://security.gentoo.org/glsa/201706-15
CVE: CVE-2017-2370
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. macOS before 10.12.3 is affected. tvOS before 10.1.1 is affected. watchOS before 3.1.3 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (buffer overflow) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/95731; http://www.securitytracker.com/id/1037668; https://bugs.chromium.org/p/project-zero/issues/detail?id=1004
CVE: CVE-2017-2371
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. The issue involves the "WebKit" component, which allows remote attackers to launch popups via a crafted web site.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/95735; http://www.securitytracker.com/id/1037668; https://security.gentoo.org/glsa/201706-15
CVE: CVE-2017-2372
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. GarageBand before 10.1.5 is affected. Logic Pro X before 10.3 is affected. The issue involves the "Projects" component, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted GarageBand project file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/95627; http://www.securitytracker.com/id/1037627; http://www.talosintelligence.com/reports/TALOS-2016-0262/
CVE: CVE-2017-2373
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/95727; http://www.securitytracker.com/id/1037668; https://security.gentoo.org/glsa/201706-15
CVE: CVE-2017-2374
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. GarageBand before 10.1.6 is affected. The issue involves the "Projects" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted GarageBand project file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/96171; http://www.securitytracker.com/id/1037868; http://www.talosintelligence.com/reports/TALOS-2017-0275/
CVE: CVE-2016-6249
Published: 2017-02-20
Description: F5 BIG-IP 12.0.0 and 11.5.0 - 11.6.1 REST requests which timeout during user account authentication may log sensitive attributes such as passwords in plaintext to /var/log/restjavad.0.log. It may allow local users to obtain sensitive information by reading these files.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.securitytracker.com/id/1037873; https://support.f5.com/csp/article/K12685114; http://www.securitytracker.com/id/1037873
CVE: CVE-2017-0038
Published: 2017-02-20
Description: gdi32.dll in Graphics Device Interface (GDI) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows remote attackers to obtain sensitive information from process heap memory via a crafted EMF file, as demonstrated by an EMR_SETDIBITSTODEVICE record with modified Device Independent Bitmap (DIB) dimensions. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-3216, CVE-2016-3219, and/or CVE-2016-3220.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/96023; http://www.securitytracker.com/id/1037845; https://0patch.blogspot.com/2017/02/0patching-0-day-windows-gdi32dll-memory.html
CVE: CVE-2016-10227
Published: 2017-02-21
Description: Zyxel USG50 Security Appliance and NWA3560-N Access Point allow remote attackers to cause a denial of service (CPU consumption) via a flood of ICMPv4 Port Unreachable packets.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://www.securityfocus.com/bid/97105; http://www.zyxel.com/support/announcement_blacknurse_attack.shtml; https://cxsecurity.com/issue/WLB[PII_REDACTED]