rainbutterfly/cve_corpus huggingface dataset:
CVE-2015-5823 
WebKit, as used in JavaScriptCore in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-18T10:00:00.000Z
CVE-2015-5824 
The NSURL implementation in the CFNetwork SSL component in Apple iOS before 9 does not properly verify X.509 certificates from SSL servers after a certificate change, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-18T10:00:00.000Z
CVE-2015-5825 
WebKit in Apple iOS before 9 does not properly restrict the availability of Performance API times, which allows remote attackers to obtain sensitive information about the browser history, mouse movement, or network traffic via crafted JavaScript code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-18T10:00:00.000Z
CVE-2015-5826 
WebKit in Apple iOS before 9 does not properly select the cases in which a Cascading Style Sheets (CSS) document is required to have the text/css content type, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-18T10:00:00.000Z
CVE-2015-5827 
WebKit in Apple iOS before 9 allows remote attackers to bypass the Same Origin Policy and obtain an object reference via vectors involving a (1) custom event, (2) message event, or (3) pop state event.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-18T10:00:00.000Z
CVE-2015-5828 
The API in the WebKit Plug-ins component in Apple Safari before 9 does not provide notification of an HTTP Redirection (aka 3xx) status code to a plugin, which allows remote attackers to bypass intended request restrictions via a crafted web site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-09T01:00:00.000Z
CVE-2015-5829 
Data Detectors Engine in Apple iOS before 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted text file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-18T10:00:00.000Z
CVE-2015-5830 
The Intel Graphics Driver component in Apple OS X before 10.11 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5877.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-09T01:00:00.000Z
CVE-2015-5831 
NetworkExtension in the kernel in Apple iOS before 9 does not properly initialize an unspecified data structure, which allows attackers to obtain sensitive memory-layout information via a crafted app.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-18T10:00:00.000Z
CVE-2015-5832 
The iTunes Store component in Apple iOS before 9 does not properly delete AppleID credentials from the keychain upon a signout action, which might allow physically proximate attackers to obtain sensitive information via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-18T10:00:00.000Z
CVE-2015-5833 
The Login Window component in Apple OS X before 10.11 does not ensure that the screen is locked at the intended time, which allows physically proximate attackers to obtain access by visiting an unattended workstation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-09T01:00:00.000Z
CVE-2015-5834 
IOAcceleratorFamily in Apple iOS before 9 allows attackers to obtain sensitive kernel memory-layout information via a crafted app.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-18T10:00:00.000Z
CVE-2015-5835 
Apple iOS before 9 allows attackers to obtain sensitive information about inter-app communication via a crafted app that conducts an interception attack involving an unspecified URL scheme.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-18T10:00:00.000Z
CVE-2015-5836 
Apple Online Store Kit in Apple OS X before 10.11 improperly validates iCloud keychain item ACLs, which allows attackers to obtain access to keychain items via a crafted app.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-09T01:00:00.000Z
CVE-2015-5837 
PluginKit in Apple iOS before 9 allows attackers to bypass an intended app-trust requirement and install arbitrary extensions via a crafted enterprise app.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-18T10:00:00.000Z
CVE-2015-5838 
SpringBoard in Apple iOS before 9 does not properly restrict access to privileged API calls, which allows attackers to spoof the dialog windows of an arbitrary app via a crafted app.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-18T10:00:00.000Z
CVE-2015-5839 
dyld in Apple iOS before 9 allows attackers to bypass a code-signing protection mechanism via an app that places a crafted signature in an executable file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-18T10:00:00.000Z
CVE-2015-5840 
The checkint division routines in removefile in Apple iOS before 9 allow attackers to cause a denial of service (overflow fault and app crash) via crafted data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-18T10:00:00.000Z
CVE-2015-5841 
The CFNetwork Proxies component in Apple iOS before 9 does not properly handle a Set-Cookie header within a response to an HTTP CONNECT request, which allows remote proxy servers to conduct cookie-injection attacks via a crafted response.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-18T10:00:00.000Z
CVE-2015-5842 
XNU in the kernel in Apple iOS before 9 does not properly initialize an unspecified data structure, which allows local users to obtain sensitive memory-layout information via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-18T10:00:00.000Z
CVE-2015-5843 
IOMobileFrameBuffer in Apple iOS before 9 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-18T10:00:00.000Z
CVE-2015-5844 
IOKit in the kernel in Apple iOS before 9 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2015-5845 and CVE-2015-5846.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-18T10:00:00.000Z
CVE-2015-5845 
IOKit in the kernel in Apple iOS before 9 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2015-5844 and CVE-2015-5846.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-18T10:00:00.000Z
CVE-2015-5846 
IOKit in the kernel in Apple iOS before 9 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2015-5844 and CVE-2015-5845.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-18T10:00:00.000Z
CVE-2015-5847 
The Disk Images component in Apple iOS before 9 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-18T10:00:00.000Z
CVE-2015-5848 
IOAcceleratorFamily in Apple iOS before 9 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-18T10:00:00.000Z
CVE-2015-5849 
The filtering implementation in AppleEvents in Apple OS X before 10.11 mishandles attempts to send events to a different user, which allows attackers to bypass intended access restrictions by leveraging a screen-sharing connection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-09T01:00:00.000Z
CVE-2015-5850 
AppleKeyStore in Apple iOS before 9 allows physically proximate attackers to reset the count of incorrect passcode attempts via a device backup.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-18T10:00:00.000Z
CVE-2015-5851 
The convenience initializer in the Multipeer Connectivity component in Apple iOS before 9 does not require an encrypted session, which allows local users to obtain cleartext multipeer data via an encrypted-to-unencrypted downgrade attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-18T10:00:00.000Z
CVE-2015-5853 
AirScan in Apple OS X before 10.11 allows man-in-the-middle attackers to obtain eSCL packet payload data via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-09T01:00:00.000Z
CVE-2015-5854 
The backup implementation in Time Machine in Apple OS X before 10.11 allows local users to obtain access to keychain items via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-09T01:00:00.000Z
CVE-2015-5855 
Apple iOS before 9 allows attackers to discover the e-mail address of a player via a crafted Game Center app.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-18T10:00:00.000Z
CVE-2015-5856 
The Application Store component in Apple iOS before 9 allows remote attackers to cause a denial of service to an enterprise-signed app via a crafted ITMS URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-18T10:00:00.000Z
CVE-2015-5857 
Mail in Apple iOS before 9 allows remote attackers to use an address-book contact as a spoofed e-mail sender address via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-18T10:00:00.000Z
CVE-2015-5858 
The CFNetwork HTTPProtocol component in Apple iOS before 9 allows remote attackers to bypass the HSTS protection mechanism, and consequently obtain sensitive information, via a crafted URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-18T10:00:00.000Z
CVE-2015-5859 
The CFNetwork HTTPProtocol component in Apple iOS before 9 and OS X before 10.11 does not properly recognize the HSTS preload list during a Safari private-browsing session, which makes it easier for remote attackers to obtain sensitive information by sniffing the network.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-22T02:00:00.000Z
CVE-2015-5860 
The CFNetwork HTTPProtocol component in Apple iOS before 9 mishandles HSTS state, which allows remote attackers to bypass the Safari private-browsing protection mechanism and track users via a crafted web site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-18T10:00:00.000Z
CVE-2015-5861 
SpringBoard in Apple iOS before 9 allows physically proximate attackers to bypass a lock-screen preview-disabled setting, and reply to an audio message, via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-18T10:00:00.000Z
CVE-2015-5862 
The Audio component in Apple iOS before 9 allows remote attackers to cause a denial of service (memory corruption and application crash) via a crafted audio file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-18T10:00:00.000Z
CVE-2015-5863 
IOStorageFamily in Apple iOS before 9 does not properly initialize an unspecified data structure, which allows local users to obtain sensitive information from kernel memory via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-18T10:00:00.000Z
CVE-2015-5864 
IOAudioFamily in Apple OS X before 10.11 allows local users to obtain sensitive kernel memory-layout information via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-09T01:00:00.000Z
CVE-2015-5865 
IOGraphics in Apple OS X before 10.11 allows attackers to obtain sensitive kernel memory-layout information via a crafted app.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-09T01:00:00.000Z
CVE-2015-5866 
IOHIDFamily in Apple OS X before 10.11 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-09T01:00:00.000Z
CVE-2015-5867 
IOHIDFamily in Apple iOS before 9 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-18T10:00:00.000Z
CVE-2015-5868 
The kernel in Apple iOS before 9 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5896 and CVE-2015-5903.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-18T10:00:00.000Z
CVE-2015-5869 
The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Apple iOS before 9 allows remote attackers to reconfigure a hop-limit setting via a small hop_limit value in a Router Advertisement (RA) message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-18T10:00:00.000Z
CVE-2015-5870 
The debugging interfaces in the kernel in Apple OS X before 10.11 allow local users to obtain sensitive memory-layout information via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-09T01:00:00.000Z
CVE-2015-5871 
IOGraphics in Apple OS X before 10.11 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5872, CVE-2015-5873, and CVE-2015-5890.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-09T01:00:00.000Z
CVE-2015-5872 
IOGraphics in Apple OS X before 10.11 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5871, CVE-2015-5873, and CVE-2015-5890.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-09T01:00:00.000Z
CVE-2015-5873 
IOGraphics in Apple OS X before 10.11 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5871, CVE-2015-5872, and CVE-2015-5890.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-09T01:00:00.000Z
CVE-2015-5874 
CoreText in Apple iOS before 9 and iTunes before 12.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-18T10:00:00.000Z
CVE-2015-5875 
Cross-site scripting (XSS) vulnerability in Notes in Apple OS X before 10.11 allows local users to inject arbitrary web script or HTML via crafted text.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-09T01:00:00.000Z
CVE-2015-5876 
dyld in Dev Tools in Apple iOS before 9 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-18T10:00:00.000Z
CVE-2015-5877 
The Intel Graphics Driver component in Apple OS X before 10.11 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5830.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-09T01:00:00.000Z
CVE-2015-5878 
Notes in Apple OS X before 10.11 misparses links, which allows local users to obtain sensitive information via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-09T01:00:00.000Z
CVE-2015-5879 
XNU in the kernel in Apple iOS before 9 does not properly validate the headers of TCP packets, which allows remote attackers to bypass the sequence-number protection mechanism and cause a denial of service (TCP connection disruption) via a crafted header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-18T10:00:00.000Z
CVE-2015-5880 
CoreAnimation in Apple iOS before 9 allows attackers to bypass intended IOSurface restrictions and obtain screen-framebuffer access via a crafted background app.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-18T10:00:00.000Z
CVE-2015-5882 
The processor_set_tasks API implementation in Apple iOS before 9 allows local users to bypass an entitlement protection mechanism and obtain access to the task ports of arbitrary processes by leveraging root privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-18T10:00:00.000Z
CVE-2015-5883 
The bidirectional text-display and text-selection implementations in Terminal in Apple OS X before 10.11 interpret directional override formatting characters differently, which allows remote attackers to spoof the content of a text document via a crafted character sequence.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-09T01:00:00.000Z
CVE-2015-5884 
The Mail Drop feature in Mail in Apple OS X before 10.11 mishandles encryption parameters for attachments, which makes it easier for remote attackers to obtain sensitive information by sniffing the network during transmission of an S/MIME e-mail message with a large attachment.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-09T01:00:00.000Z
CVE-2015-5885 
The CFNetwork Cookies component in Apple iOS before 9 allows remote attackers to track users via vectors involving a cookie for a top-level domain.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-18T10:00:00.000Z
CVE-2015-5887 
The TLS Handshake Protocol implementation in Secure Transport in Apple OS X before 10.11 accepts a Certificate Request message within a session in which no Server Key Exchange message has been sent, which allows remote attackers to have an unspecified impact via crafted TLS data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-09T01:00:00.000Z
CVE-2015-5888 
The Install Framework Legacy component in Apple OS X before 10.11 allows local users to obtain root privileges via vectors involving a privileged executable file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-09T01:00:00.000Z
CVE-2015-5889 
rsh in the remote_cmds component in Apple OS X before 10.11 allows local users to obtain root privileges via vectors involving environment variables.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-09T01:00:00.000Z
CVE-2015-5890 
IOGraphics in Apple OS X before 10.11 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5871, CVE-2015-5872, and CVE-2015-5873.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-09T01:00:00.000Z
CVE-2015-5891 
The SMB implementation in the kernel in Apple OS X before 10.11 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-09T01:00:00.000Z
CVE-2015-5892 
Siri in Apple iOS before 9 allows physically proximate attackers to bypass an intended client-side protection mechanism and obtain sensitive content-notification information by listening to a device in the lock-screen state.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-18T10:00:00.000Z
CVE-2015-5893 
SMBClient in SMB in Apple OS X before 10.11 allows local users to obtain sensitive kernel memory-layout information via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-09T01:00:00.000Z
CVE-2015-5894 
The X.509 certificate-trust implementation in Apple OS X before 10.11 does not recognize that the kSecRevocationRequirePositiveResponse flag implies a revocation-checking requirement, which makes it easier for man-in-the-middle attackers to spoof endpoints by leveraging access to a revoked certificate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-09T01:00:00.000Z
CVE-2015-5895 
Multiple unspecified vulnerabilities in SQLite before 3.8.10.2, as used in Apple iOS before 9, have unknown impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-18T10:00:00.000Z
CVE-2015-5896 
The kernel in Apple iOS before 9 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5868 and CVE-2015-5903.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-18T10:00:00.000Z
CVE-2015-5897 
The Address Book framework in Apple OS X before 10.11 allows local users to gain privileges by using an environment variable to inject code into processes that rely on this framework.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-09T01:00:00.000Z
CVE-2015-5898 
CFNetwork in Apple iOS before 9 relies on the hardware UID for its cache encryption key, which makes it easier for physically proximate attackers to obtain sensitive information by obtaining this UID.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-18T10:00:00.000Z
CVE-2015-5899 
libpthread in the kernel in Apple iOS before 9 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-18T10:00:00.000Z
CVE-2015-5900 
The protected range register in the EFI component in Apple OS X before 10.11 has an incorrect value, which allows attackers to cause a denial of service (boot failure) via a crafted app that writes to an unintended address.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-09T01:00:00.000Z