rainbutterfly/cve_corpus huggingface dataset:
CVE-2011-0136 
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-03T19:00:00.000Z
CVE-2011-0137 
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-03T19:00:00.000Z
CVE-2011-0138 
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-03T19:00:00.000Z
CVE-2011-0139 
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-03T19:00:00.000Z
CVE-2011-0140 
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-03T19:00:00.000Z
CVE-2011-0141 
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-03T19:00:00.000Z
CVE-2011-0142 
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-03T19:00:00.000Z
CVE-2011-0143 
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-03T19:00:00.000Z
CVE-2011-0144 
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-03T19:00:00.000Z
CVE-2011-0145 
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-03T19:00:00.000Z
CVE-2011-0146 
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-03T19:00:00.000Z
CVE-2011-0147 
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-03T19:00:00.000Z
CVE-2011-0148 
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-03T19:00:00.000Z
CVE-2011-0149 
WebKit, as used in Apple iTunes before 10.2 on Windows, does not properly parse HTML elements associated with document namespaces, which allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to a "dangling pointer" and iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-03T19:00:00.000Z
CVE-2011-0150 
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-03T19:00:00.000Z
CVE-2011-0151 
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-03T19:00:00.000Z
CVE-2011-0152 
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-03T19:00:00.000Z
CVE-2011-0153 
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-03T19:00:00.000Z
CVE-2011-0154 
WebKit, as used in Apple iTunes before 10.2 on Windows and Apple iOS, does not properly implement the .sort function for JavaScript arrays, which allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-03T19:00:00.000Z
CVE-2011-0155 
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-03T19:00:00.000Z
CVE-2011-0156 
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-03T19:00:00.000Z
CVE-2011-0157 
WebKit, as used in Apple iOS before 4.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-09-1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-11T22:00:00.000Z
CVE-2011-0158 
MobileSafari in Apple iOS before 4.3 does not properly implement application launching through URL handlers, which allows remote attackers to cause a denial of service (persistent application crash) via crafted JavaScript code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-11T22:00:00.000Z
CVE-2011-0159 
The Safari Settings feature in Safari in Apple iOS 4.x before 4.3 does not properly implement the clearing of cookies during execution of the Safari application, which might make it easier for remote web servers to track users by setting a cookie.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-11T22:00:00.000Z
CVE-2011-0160 
WebKit, as used in Apple Safari before 5.0.4 and iOS before 4.3, does not properly handle redirects in conjunction with HTTP Basic Authentication, which might allow remote web servers to capture credentials by logging the Authorization HTTP header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-11T22:00:00.000Z
CVE-2011-0161 
WebKit, as used in Apple Safari before 5.0.4 and iOS before 4.3, does not properly handle the Attr.style accessor, which allows remote attackers to bypass the Same Origin Policy and inject Cascading Style Sheets (CSS) token sequences via a crafted web site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-11T22:00:00.000Z
CVE-2011-0162 
Wi-Fi in Apple iOS before 4.3 and Apple TV before 4.2 does not properly perform bounds checking for Wi-Fi frames, which allows remote attackers to cause a denial of service (device reset) via unspecified traffic on the local wireless network.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-11T22:00:00.000Z
CVE-2011-0163 
WebKit, as used in Apple Safari before 5.0.4 and iOS before 4.3, does not properly handle unspecified "cached resources," which allows remote attackers to cause a denial of service (resource unavailability) via a crafted web site that conducts a cache-poisoning attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-11T22:00:00.000Z
CVE-2011-0164 
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-03T19:00:00.000Z
CVE-2011-0165 
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-03T19:00:00.000Z
CVE-2011-0166 
The HTML5 drag and drop functionality in WebKit in Apple Safari before 5.0.4 allows user-assisted remote attackers to bypass the Same Origin Policy and obtain sensitive information via vectors related to the dragging of content.  NOTE: this might overlap CVE-2011-0778.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-11T22:00:00.000Z
CVE-2011-0167 
The windows functionality in WebKit in Apple Safari before 5.0.4 allows remote attackers to bypass the Same Origin Policy, and force the upload of arbitrary local files from a client computer, via a crafted web site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-11T22:00:00.000Z
CVE-2011-0168 
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-03T19:00:00.000Z
CVE-2011-0169 
WebKit in Apple Safari before 5.0.4, when the Web Inspector is used, does not properly handle the window.console._inspectorCommandLineAPI property, which allows user-assisted remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via a crafted web site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-11T22:00:00.000Z
CVE-2011-0170 
Heap-based buffer overflow in ImageIO in CoreGraphics in Apple iTunes before 10.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted International Color Consortium (ICC) profile in a JPEG image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-03T19:00:00.000Z
CVE-2011-0172 
AirPort in Apple Mac OS X 10.6 before 10.6.7 allows remote attackers to cause a denial of service (divide-by-zero error and reboot) via Wi-Fi frames on the local wireless network, a different vulnerability than CVE-2011-0162.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-23T01:00:00.000Z
CVE-2011-0173 
Multiple format string vulnerabilities in AppleScript in Apple Mac OS X before 10.6.7 allow context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via format string specifiers in a (1) display dialog or (2) display alert command in a dialog in an AppleScript Studio application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-23T01:00:00.000Z
CVE-2011-0174 
Heap-based buffer overflow in Apple Type Services (ATS) in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code via a document that contains a crafted embedded OpenType font.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-23T01:00:00.000Z
CVE-2011-0175 
Multiple buffer overflows in Apple Type Services (ATS) in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code via a document that contains a crafted embedded TrueType font.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-23T01:00:00.000Z
CVE-2011-0176 
Multiple buffer overflows in Apple Type Services (ATS) in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code via a document that contains a crafted embedded Type 1 font.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-23T01:00:00.000Z
CVE-2011-0177 
Multiple buffer overflows in Apple Type Services (ATS) in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code via a document that contains a crafted SFNT table in an embedded font.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-23T01:00:00.000Z
CVE-2011-0178 
The FSFindFolder API in CarbonCore in Apple Mac OS X before 10.6.7 provides a world-readable directory in response to a call with the kTemporaryFolderType flag, which allows local users to obtain potentially sensitive information by accessing this directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-23T01:00:00.000Z
CVE-2011-0179 
CoreText in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a document that contains a crafted embedded font.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-23T01:00:00.000Z
CVE-2011-0180 
Integer overflow in HFS in Apple Mac OS X before 10.6.7 allows local users to read arbitrary (1) HFS, (2) HFS+, or (3) HFS+J files via a crafted F_READBOOTSTRAP ioctl call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-23T01:00:00.000Z
CVE-2011-0181 
Integer overflow in ImageIO in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted XBM image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-23T01:00:00.000Z
CVE-2011-0182 
The i386_set_ldt system call in the kernel in Apple Mac OS X before 10.6.7 does not properly handle call gates, which allows local users to gain privileges via vectors involving the creation of a call gate entry.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-23T01:00:00.000Z
CVE-2011-0183 
Libinfo in Apple Mac OS X before 10.6.7 does not properly handle an unspecified integer field in an NFS RPC packet, which allows remote attackers to cause a denial of service (lockd, statd, mountd, or portmap outage) via a crafted packet, related to an "integer truncation issue."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-23T01:00:00.000Z
CVE-2011-0184 
QuickLook in Apple Mac OS X 10.6 before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via an Excel spreadsheet with a crafted formula that uses unspecified opcodes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-23T01:00:00.000Z
CVE-2011-0185 
Format string vulnerability in the debug-logging feature in Application Firewall in Apple Mac OS X before 10.7.2 allows local users to gain privileges via a crafted name of an executable file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-14T10:00:00.000Z
CVE-2011-0186 
QuickTime in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted JPEG2000 image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-23T01:00:00.000Z
CVE-2011-0187 
The plug-in in QuickTime in Apple Mac OS X before 10.6.7 allows remote attackers to bypass the Same Origin Policy and obtain potentially sensitive video data via vectors involving a cross-site redirect.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-23T01:00:00.000Z
CVE-2011-0188 
The VpMemAlloc function in bigdecimal.c in the BigDecimal class in Ruby 1.9.2-p136 and earlier, as used on Apple Mac OS X before 10.6.7 and other platforms, does not properly allocate memory, which allows context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving creation of a large BigDecimal value within a 64-bit process, related to an "integer truncation issue."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-23T01:00:00.000Z
CVE-2011-0189 
The default configuration of Terminal in Apple Mac OS X 10.6 before 10.6.7 uses SSH protocol version 1 within the New Remote Connection dialog, which might make it easier for man-in-the-middle attackers to spoof SSH servers by leveraging protocol vulnerabilities.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-23T01:00:00.000Z
CVE-2011-0190 
Install Helper in Installer in Apple Mac OS X before 10.6.7 does not properly process an unspecified URL, which might allow remote attackers to track user logins by logging network traffic from an agent that was intended to send network traffic to an Apple server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-23T01:00:00.000Z
CVE-2011-0191 
Buffer overflow in LibTIFF 3.9.4 and possibly other versions, as used in ImageIO in Apple iTunes before 10.2 on Windows and other products, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TIFF image with JPEG encoding.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-03T19:00:00.000Z
CVE-2011-0192 
Buffer overflow in Fax4Decode in LibTIFF 3.9.4 and possibly other versions, as used in ImageIO in Apple iTunes before 10.2 on Windows and other products, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TIFF Internet Fax image file that has been compressed using CCITT Group 4 encoding, related to the EXPAND2D macro in libtiff/tif_fax3.h.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-03T19:00:00.000Z
CVE-2011-0193 
Multiple buffer overflows in Image RAW in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Canon RAW image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-23T01:00:00.000Z
CVE-2011-0194 
Integer overflow in ImageIO in Apple Mac OS X 10.6 before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TIFF image with JPEG encoding.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-23T01:00:00.000Z
CVE-2011-0195 
The generate-id XPath function in libxslt in Apple iOS 4.3.x before 4.3.2 allows remote attackers to obtain potentially sensitive information about heap memory addresses via a crafted web site.  NOTE: this may overlap CVE-2011-1202.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-04-15T19:00:00.000Z
CVE-2011-0196 
AirPort in Apple Mac OS X 10.5.8 allows remote attackers to cause a denial of service (out-of-bounds read and reboot) via Wi-Fi frames on the local wireless network.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-06-24T20:00:00.000Z
CVE-2011-0197 
App Store in Apple Mac OS X before 10.6.8 creates a log entry containing a user's AppleID password, which might allow local users to obtain sensitive information by reading a log file, as demonstrated by a log file that has non-default permissions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-06-24T20:00:00.000Z