rainbutterfly/cve_corpus huggingface dataset:
CVE-2016-4675 
An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affected. The issue involves the "libxpc" component. It allows attackers to execute arbitrary code in a privileged context via a crafted app.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-20T08:35:00.000Z
CVE-2016-4676 
A Cross-origin vulnerability exists in WebKit in Apple Safari before 10.0.1 when processing location attributes, which could let a remote malicious user obtain sensitive information.
Problem types: description: cross-origin bypass
Affected products: vendor: Apple
product: Safari
Published: 2020-02-03T17:07:07.000Z
CVE-2016-4677 
An issue was discovered in certain Apple products. iOS before 10.1 is affected. Safari before 10.0.1 is affected. tvOS before 10.0.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-20T08:35:00.000Z
CVE-2016-4678 
An issue was discovered in certain Apple products. macOS before 10.12.1 is affected. The issue involves the "AppleSMC" component. It allows local users to gain privileges or cause a denial of service (NULL pointer dereference) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-20T08:35:00.000Z
CVE-2016-4679 
An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affected. The issue involves the "libarchive" component, which allows remote attackers to write to arbitrary files via a crafted archive containing a symlink.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-20T08:35:00.000Z
CVE-2016-4680 
An issue was discovered in certain Apple products. iOS before 10.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affected. The issue involves the "Kernel" component. It allows attackers to obtain sensitive information from kernel memory via a crafted app.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-20T08:35:00.000Z
CVE-2016-4681 
An issue was discovered in certain Apple products. macOS before 10.12.1 is affected. The issue involves the "Core Image" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted JPEG file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-20T08:35:00.000Z
CVE-2016-4682 
An issue was discovered in certain Apple products. macOS before 10.12 is affected. macOS before 10.12.1 is affected. The issue involves the "ImageIO" component. It allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash) via a crafted SGI file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-20T08:35:00.000Z
CVE-2016-4683 
An issue was discovered in certain Apple products. macOS before 10.12.1 is affected. The issue involves the "ImageIO" component. It allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds memory access and application crash) via a crafted SGI file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-20T08:35:00.000Z
CVE-2016-4685 
An issue was discovered in certain Apple products. iOS before 10.1 is affected. The issue involves the "iTunes Backup" component, which improperly hashes passwords, making it easier to decrypt files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-20T08:35:00.000Z
CVE-2016-4686 
An issue was discovered in certain Apple products. iOS before 10.1 is affected. The issue involves the "Contacts" component, which does not prevent an app's Address Book access after access revocation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-20T08:35:00.000Z
CVE-2016-4688 
An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affected. watchOS before 3.1.3 is affected. The issue involves the "FontParser" component. It allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via a crafted font.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-20T08:35:00.000Z
CVE-2016-4689 
An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the "Mail" component, which does not alert the user to an S/MIME email signature that used a revoked certificate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-20T08:35:00.000Z
CVE-2016-4690 
An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the "Image Capture" component, which allows attackers to execute arbitrary code via a crafted USB HID device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-20T08:35:00.000Z
CVE-2016-4691 
An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "FontParser" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted font.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-20T08:35:00.000Z
CVE-2016-4692 
An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-20T08:35:00.000Z
CVE-2016-4693 
An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "Security" component, which makes it easier for attackers to bypass cryptographic protection mechanisms by leveraging use of the 3DES cipher.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-20T08:35:00.000Z
CVE-2016-4694 
The Apache HTTP Server in Apple OS X before 10.12 and OS X Server before 5.2 follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted CGI client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an "httpoxy" issue, a related issue to CVE-2016-5387.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-25T10:00:00.000Z
CVE-2016-4696 
AppleEFIRuntime in Apple OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via a crafted app.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-25T10:00:00.000Z
CVE-2016-4697 
Apple HSSPI Support in Apple OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-25T10:00:00.000Z
CVE-2016-4698 
AppleMobileFileIntegrity in Apple iOS before 10 and OS X before 10.12 mishandles process entitlement and Team ID values in the task port inheritance policy, which allows attackers to execute arbitrary code in a privileged context via a crafted app.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-25T10:00:00.000Z
CVE-2016-4699 
AppleUUC in Apple OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-4700.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-25T10:00:00.000Z
CVE-2016-4700 
AppleUUC in Apple OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-4699.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-25T10:00:00.000Z
CVE-2016-4701 
Application Firewall in Apple OS X before 10.12 allows local users to cause a denial of service via vectors involving a crafted SO_EXECPATH environment variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-25T10:00:00.000Z
CVE-2016-4702 
Audio in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-25T10:00:00.000Z
CVE-2016-4703 
Bluetooth in Apple OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-25T10:00:00.000Z
CVE-2016-4704 
otool in Apple Xcode before 8 allows local users to gain privileges or cause a denial of service (memory corruption and application crash) via unspecified vectors, a different vulnerability than CVE-2016-4705.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-18T22:00:00.000Z
CVE-2016-4705 
otool in Apple Xcode before 8 allows local users to gain privileges or cause a denial of service (memory corruption and application crash) via unspecified vectors, a different vulnerability than CVE-2016-4704.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-18T22:00:00.000Z
CVE-2016-4706 
cd9660 in Apple OS X before 10.12 allows local users to cause a denial of service via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-25T10:00:00.000Z
CVE-2016-4707 
CFNetwork in Apple iOS before 10 and OS X before 10.12 mishandles Local Storage deletion, which allows local users to discover the visited web sites of arbitrary users via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-25T10:00:00.000Z
CVE-2016-4708 
CFNetwork in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 misparses the Set-Cookie header, which allows remote attackers to obtain sensitive information via a crafted HTTP response.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-25T10:00:00.000Z
CVE-2016-4709 
WindowServer in Apple OS X before 10.12 allows local users to obtain root access via vectors that leverage "type confusion," a different vulnerability than CVE-2016-4710.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-25T10:00:00.000Z
CVE-2016-4710 
WindowServer in Apple OS X before 10.12 allows local users to obtain root access via vectors that leverage "type confusion," a different vulnerability than CVE-2016-4709.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-25T10:00:00.000Z
CVE-2016-4711 
CCrypt in corecrypto in CommonCrypto in Apple iOS before 10 and OS X before 10.12 allows attackers to discover cleartext information by leveraging a function call that specifies the same buffer for input and output.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-25T10:00:00.000Z
CVE-2016-4712 
CoreCrypto in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to execute arbitrary code or cause a denial of service (out-of-bounds write) via a crafted app.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-25T10:00:00.000Z
CVE-2016-4713 
CoreDisplay in Apple OS X before 10.12 allows attackers to view arbitrary users' screens by leveraging screen-sharing access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-25T10:00:00.000Z
CVE-2016-4715 
The Date & Time Pref Pane component in Apple OS X before 10.12 mishandles the .GlobalPreferences file, which allows attackers to discover a user's location via a crafted app.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-25T10:00:00.000Z
CVE-2016-4716 
diskutil in DiskArbitration in Apple OS X before 10.12 allows local users to gain privileges via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-25T10:00:00.000Z
CVE-2016-4717 
The File Bookmark component in Apple OS X before 10.12 mishandles scoped-bookmark file descriptors, which allows attackers to cause a denial of service via a crafted app.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-25T10:00:00.000Z
CVE-2016-4718 
Buffer overflow in FontParser in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to obtain sensitive information from process memory via a crafted font file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-25T10:00:00.000Z
CVE-2016-4719 
The GeoServices component in Apple iOS before 10 and watchOS before 3 does not properly restrict access to PlaceData information, which allows attackers to discover physical locations via a crafted application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-18T22:00:00.000Z
CVE-2016-4721 
An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. The issue involves the "IDS - Connectivity" component, which allows man-in-the-middle attackers to spoof calls via a "switch caller" notification.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-20T08:35:00.000Z
CVE-2016-4722 
The IDS - Connectivity component in Apple iOS before 10 and OS X before 10.12 allows man-in-the-middle attackers to conduct Call Relay spoofing attacks and cause a denial of service via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-25T10:00:00.000Z
CVE-2016-4723 
Intel Graphics Driver in Apple OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-25T10:00:00.000Z
CVE-2016-4724 
IOAcceleratorFamily in Apple iOS before 10 and OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via a crafted app.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-25T10:00:00.000Z
CVE-2016-4725 
IOAcceleratorFamily in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (memory corruption) via a crafted web site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-25T10:00:00.000Z
CVE-2016-4726 
IOAcceleratorFamily in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-25T10:00:00.000Z
CVE-2016-4727 
IOThunderboltFamily in Apple OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-25T10:00:00.000Z
CVE-2016-4728 
WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 mishandles error prototypes, which allows remote attackers to execute arbitrary code via a crafted web site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-25T10:00:00.000Z
CVE-2016-4729 
WebKit in Apple iOS before 10 and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4731.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-25T10:00:00.000Z
CVE-2016-4730 
WebKit in Apple iOS before 10, Safari before 10, and tvOS before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4611, CVE-2016-4733, CVE-2016-4734, and CVE-2016-4735.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-25T10:00:00.000Z
CVE-2016-4731 
WebKit in Apple iOS before 10 and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4729.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-25T10:00:00.000Z
CVE-2016-4733 
WebKit in Apple iOS before 10, Safari before 10, and tvOS before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4611, CVE-2016-4730, CVE-2016-4734, and CVE-2016-4735.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-25T10:00:00.000Z
CVE-2016-4734 
WebKit in Apple iOS before 10, Safari before 10, and tvOS before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4611, CVE-2016-4730, CVE-2016-4733, and CVE-2016-4735.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-25T10:00:00.000Z
CVE-2016-4735 
WebKit in Apple iOS before 10, Safari before 10, and tvOS before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4611, CVE-2016-4730, CVE-2016-4733, and CVE-2016-4734.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-25T10:00:00.000Z
CVE-2016-4736 
libarchive in Apple OS X before 10.12 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-25T10:00:00.000Z
CVE-2016-4737 
WebKit in Apple iOS before 10, Safari before 10, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-25T10:00:00.000Z
CVE-2016-4738 
libxslt in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-25T10:00:00.000Z
CVE-2016-4739 
mDNSResponder in Apple OS X before 10.12, when VMnet.framework is used, arranges for a DNS proxy to listen on all interfaces, which allows remote attackers to obtain sensitive information by sending a DNS query to an unintended interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-25T10:00:00.000Z
CVE-2016-4740 
Apple iOS before 10, when Handoff for Messages is used, does not ensure that a Messages signin has occurred before displaying messages, which might allow attackers to obtain sensitive information via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-18T22:00:00.000Z
CVE-2016-4741 
The Assets component in Apple iOS before 10 allows man-in-the-middle attackers to block software updates via vectors related to lack of an HTTPS session for retrieving updates.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-18T22:00:00.000Z
CVE-2016-4742 
NSSecureTextField in Apple OS X before 10.12 does not enable Secure Input, which allows attackers to discover credentials via a crafted app.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-25T10:00:00.000Z
CVE-2016-4743 
An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to obtain sensitive information from process memory or cause a denial of service (memory corruption and application crash) via a crafted web site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-20T08:35:00.000Z
CVE-2016-4745 
The Kerberos 5 (aka krb5) PAM module in Apple OS X before 10.12 does not use constant-time operations for determining username validity, which makes it easier for remote attackers to enumerate user accounts via a timing side-channel attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-25T10:00:00.000Z
CVE-2016-4746 
The Keyboards component in Apple iOS before 10 does not properly use a cache for auto-correct suggestions, which allows remote attackers to obtain sensitive information in opportunistic circumstances by leveraging an unintended correction.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-18T22:00:00.000Z
CVE-2016-4747 
Mail in Apple iOS before 10 mishandles certificates, which makes it easier for man-in-the-middle attackers to discover mail credentials via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-18T22:00:00.000Z
CVE-2016-4748 
Perl in Apple OS X before 10.12 allows local users to bypass the taint-mode protection mechanism via a crafted environment variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-25T10:00:00.000Z
CVE-2016-4749 
Printing UIKit in Apple iOS before 10 mishandles environment variables, which allows local users to discover cleartext AirPrint preview content by reading a temporary file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-18T22:00:00.000Z