rainbutterfly/cve_corpus huggingface dataset:
CVE-2010-1753 
ImageIO in Apple iOS before 4 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted JPEG image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-22T20:24:00.000Z
CVE-2010-1754 
Passcode Lock in Apple iOS before 4 on the iPhone and iPod touch does not properly handle alert-based unlocks in conjunction with subsequent Remote Lock operations through MobileMe, which allows physically proximate attackers to bypass intended passcode requirements via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-22T20:24:00.000Z
CVE-2010-1755 
Safari in Apple iOS before 4 on the iPhone and iPod touch does not properly implement the Accept Cookies preference, which makes it easier for remote web servers to track users via a cookie.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-22T20:24:00.000Z
CVE-2010-1756 
The Settings application in Apple iOS before 4 on the iPhone and iPod touch does not properly report the wireless network that is in use, which might make it easier for remote attackers to trick users into communicating over an unintended network.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-22T20:24:00.000Z
CVE-2010-1757 
WebKit in Apple iOS before 4 on the iPhone and iPod touch does not enforce the expected boundary restrictions on content display by an IFRAME element, which allows remote attackers to spoof the user interface via a crafted HTML document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-22T20:24:00.000Z
CVE-2010-1758 
Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving DOM Range objects.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-11T19:00:00.000Z
CVE-2010-1759 
Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to the Node.normalize method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-11T19:00:00.000Z
CVE-2010-1760 
loader/DocumentThreadableLoader.cpp in the XMLHttpRequest implementation in WebCore in WebKit before r58409 does not properly handle credentials during a cross-origin synchronous request, which has unspecified impact and remote attack vectors, aka rdar problem 7905150.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-08-19T20:00:00.000Z
CVE-2010-1761 
Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving HTML document subtrees.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-11T19:00:00.000Z
CVE-2010-1762 
Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to inject arbitrary web script or HTML via vectors involving HTML in a TEXTAREA element.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-11T19:00:00.000Z
CVE-2010-1763 
Unspecified vulnerability in WebKit in Apple iTunes before 9.2 on Windows has unknown impact and attack vectors, a different vulnerability than CVE-2010-1387 and CVE-2010-1769.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-18T16:00:00.000Z
CVE-2010-1764 
WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, follows multiple redirections during form submission, which allows remote web servers to obtain sensitive information by recording the form data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-11T19:00:00.000Z
CVE-2010-1766 
Off-by-one error in the WebSocketHandshake::readServerHandshake function in websockets/WebSocketHandshake.cpp in WebCore in WebKit before r56380, as used in Qt and other products, allows remote websockets servers to cause a denial of service (memory corruption) or possibly have unspecified other impact via an upgrade header that is long and invalid.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-22T01:00:00.000Z
CVE-2010-1767 
Cross-site request forgery (CSRF) vulnerability in loader/DocumentThreadableLoader.cpp in WebCore in WebKit before r57041, as used in Google Chrome before 4.1.249.1059, allows remote attackers to hijack the authentication of unspecified victims via a crafted synchronous preflight XMLHttpRequest operation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-09-24T18:00:00.000Z
CVE-2010-1768 
Unspecified vulnerability in Apple iTunes before 9.1 allows local users to gain console privileges via vectors related to log files, "insecure file operation," and syncing an iPhone, iPad, or iPod touch.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-08-20T19:00:00.000Z
CVE-2010-1769 
WebKit in Apple iTunes before 9.2 on Windows, and Apple iOS before 4 on the iPhone and iPod touch, accesses out-of-bounds memory during the handling of tables, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted HTML document, a different vulnerability than CVE-2010-1387 and CVE-2010-1763.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-18T16:00:00.000Z
CVE-2010-1770 
WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, Apple Safari before 4.1 on Mac OS X 10.4, and Google Chrome before 5.0.375.70 does not properly handle a transformation of a text node that has the IBM1147 character set, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document containing a BR element, related to a "type checking issue."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-11T19:00:00.000Z
CVE-2010-1771 
Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving fonts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-11T19:00:00.000Z
CVE-2010-1772 
Use-after-free vulnerability in page/Geolocation.cpp in WebCore in WebKit before r59859, as used in Google Chrome before 5.0.375.70, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted web site, related to failure to stop timers associated with geolocation upon deletion of a document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-09-24T18:00:00.000Z
CVE-2010-1773 
Off-by-one error in the toAlphabetic function in rendering/RenderListMarker.cpp in WebCore in WebKit before r59950, as used in Google Chrome before 5.0.375.70, allows remote attackers to obtain sensitive information, cause a denial of service (memory corruption and application crash), or possibly execute arbitrary code via vectors related to list markers for HTML lists, aka rdar problem 8009118.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-09-24T18:00:00.000Z
CVE-2010-1774 
WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, accesses out-of-bounds memory during processing of HTML tables, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted HTML document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-11T19:00:00.000Z
CVE-2010-1775 
Race condition in Passcode Lock in Apple iOS before 4 on the iPhone and iPod touch allows physically proximate attackers to bypass intended passcode requirements, and pair a locked device with a computer and access arbitrary data, via vectors involving the initial boot.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-22T20:24:00.000Z
CVE-2010-1776 
Find My iPhone on iOS 2.0 through 3.1.3 for iPhone 3G and later and iOS 2.1 through 3.1.3 for iPod touch (2nd generation) and later, when Find My iPhone is disabled, allows remote authenticated users with an associated MobileMe account to wipe the device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-24T19:00:00.000Z
CVE-2010-1777 
Buffer overflow in Apple iTunes before 9.2.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted itpc: URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-29T18:00:00.000Z
CVE-2010-1778 
Cross-site scripting (XSS) vulnerability in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4, allows remote attackers to inject arbitrary web script or HTML via an RSS feed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-30T20:00:00.000Z
CVE-2010-1780 
Use-after-free vulnerability in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to element focus.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-30T20:00:00.000Z
CVE-2010-1781 
Double free vulnerability in WebKit in Apple iOS before 4.1 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to the rendering of an inline element.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-09-09T21:00:00.000Z
CVE-2010-1782 
WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to the rendering of an inline element.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-30T20:00:00.000Z
CVE-2010-1783 
WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; does not properly handle dynamic modification of a text node, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-30T20:00:00.000Z
CVE-2010-1784 
The counters functionality in the Cascading Style Sheets (CSS) implementation in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-30T20:00:00.000Z
CVE-2010-1785 
WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; accesses uninitialized memory during processing of the (1) :first-letter and (2) :first-line pseudo-elements in an SVG text element, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-30T20:00:00.000Z
CVE-2010-1786 
Use-after-free vulnerability in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a foreignObject element in an SVG document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-30T20:00:00.000Z
CVE-2010-1787 
WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a floating element in an SVG document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-30T20:00:00.000Z
CVE-2010-1788 
WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a use element in an SVG document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-30T20:00:00.000Z
CVE-2010-1789 
Heap-based buffer overflow in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a JavaScript string object.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-30T20:00:00.000Z
CVE-2010-1790 
WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; does not properly handle just-in-time (JIT) compiled JavaScript stubs, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted HTML document, related to a "reentrancy issue."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-30T20:00:00.000Z
CVE-2010-1791 
Integer signedness error in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving a JavaScript array index.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-30T20:00:00.000Z
CVE-2010-1792 
WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted regular expression.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-30T20:00:00.000Z
CVE-2010-1793 
Multiple use-after-free vulnerabilities in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a (1) font-face or (2) use element in an SVG document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-30T20:00:00.000Z
CVE-2010-1794 
The webdav_mount function in webdav_vfsops.c in the WebDAV kernel extension (aka webdav_fs.kext) for Mac OS X 10.6 allows local users to cause a denial of service (panic) via a mount request with a large integer in the pa_socket_namelen field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-08-02T19:00:00.000Z
CVE-2010-1795 
Untrusted search path vulnerability in Apple iTunes before 9.1, when running on Windows 7, Vista, and XP, allows local users and possibly remote attackers to gain privileges via a Trojan horse DLL in the current working directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-08-20T19:00:00.000Z
CVE-2010-1796 
The AutoFill feature in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4, allows remote attackers to obtain sensitive Address Book Card information via JavaScript code that forces keystroke events for input fields.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-30T20:00:00.000Z
CVE-2010-1797 
Multiple stack-based buffer overflows in the cff_decoder_parse_charstrings function in the CFF Type2 CharStrings interpreter in cff/cffgload.c in FreeType before 2.4.2, as used in Apple iOS before 4.0.2 on the iPhone and iPod touch and before 3.2.2 on the iPad, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted CFF opcodes in embedded fonts in a PDF document, as demonstrated by JailbreakMe. NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-08-16T18:25:00.000Z
CVE-2010-1799 
Stack-based buffer overflow in the error-logging functionality in Apple QuickTime before 7.6.7 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-08-16T18:25:00.000Z
CVE-2010-1800 
CFNetwork in Apple Mac OS X 10.6.3 and 10.6.4 supports anonymous SSL and TLS connections, which allows man-in-the-middle attackers to redirect a connection and obtain sensitive information via crafted responses.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-08-25T19:00:00.000Z
CVE-2010-1801 
Heap-based buffer overflow in CoreGraphics in Apple Mac OS X 10.5.8 and 10.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-08-25T19:00:00.000Z
CVE-2010-1802 
libsecurity in Apple Mac OS X 10.5.8 and 10.6.4 does not properly perform comparisons to domain-name strings in X.509 certificates, which allows man-in-the-middle attackers to spoof SSL servers via a certificate associated with a similar domain name, as demonstrated by use of a www.example.con certificate to spoof www.example.com.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-08-25T19:00:00.000Z
CVE-2010-1803 
Time Machine in Apple Mac OS X 10.6.x before 10.6.5 does not verify the unique identifier of its remote AFP volume, which allows remote attackers to obtain sensitive information by spoofing this volume.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-15T22:00:00.000Z
CVE-2010-1804 
Unspecified vulnerability in the network bridge functionality on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware before 7.5.2 allows remote attackers to cause a denial of service (networking outage) via a crafted DHCP reply.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-12-22T01:00:00.000Z
CVE-2010-1805 
Untrusted search path vulnerability in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2 on Windows allows local users to gain privileges via a Trojan horse explorer.exe (aka Windows Explorer) program in a directory containing a file that had been downloaded by Safari.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-09-10T18:00:00.000Z
CVE-2010-1806 
Use-after-free vulnerability in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via run-in styling in an element, related to object pointers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-09-10T18:00:00.000Z
CVE-2010-1807 
WebKit in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2; Android before 2.2; and webkitgtk before 1.2.6; does not properly validate floating-point data, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted HTML document, related to non-standard NaN representation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-09-10T18:00:00.000Z
CVE-2010-1808 
Stack-based buffer overflow in Apple Type Services (ATS) in Apple Mac OS X 10.5.8 and 10.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted embedded font in a document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-08-25T19:00:00.000Z
CVE-2010-1809 
The Accessibility component in Apple iOS before 4.1 on the iPhone and iPod touch does not perform the expected VoiceOver announcement associated with the location services icon, which has unspecified impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-09-09T21:00:00.000Z
CVE-2010-1810 
FaceTime in Apple iOS before 4.1 on the iPhone and iPod touch does not properly handle invalid X.509 certificates, which allows man-in-the-middle attackers to redirect calls via a crafted certificate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-09-09T21:00:00.000Z
CVE-2010-1811 
ImageIO in Apple iOS before 4.1 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted TIFF file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-09-09T21:00:00.000Z
CVE-2010-1812 
Use-after-free vulnerability in WebKit in Apple iOS before 4.1 on the iPhone and iPod touch, and webkitgtk before 1.2.6, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving selections.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-09-09T21:00:00.000Z
CVE-2010-1813 
WebKit in Apple iOS before 4.1 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors involving HTML object outlines.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-09-09T21:00:00.000Z
CVE-2010-1814 
WebKit in Apple iOS before 4.1 on the iPhone and iPod touch, and webkitgtk before 1.2.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors involving form menus.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-09-09T21:00:00.000Z