rainbutterfly/cve_corpus huggingface dataset:
CVE-2016-4536 
The client in OpenAFS before 1.6.17 does not properly initialize the (1) AFSStoreStatus, (2) AFSStoreVolumeStatus, (3) VldbListByAttributes, and (4) ListAddrByAttributes structures, which might allow remote attackers to obtain sensitive memory information by leveraging access to RPC call traffic.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-13T16:00:00.000Z
CVE-2016-4537 
The bcpowmod function in ext/bcmath/bcmath.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 accepts a negative integer for the scale argument, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-22T01:00:00.000Z
CVE-2016-4538 
The bcpowmod function in ext/bcmath/bcmath.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 modifies certain data structures without considering whether they are copies of the _zero_, _one_, or _two_ global variable, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-22T01:00:00.000Z
CVE-2016-4539 
The xml_parse_into_struct function in ext/xml/xml.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers to cause a denial of service (buffer under-read and segmentation fault) or possibly have unspecified other impact via crafted XML data in the second argument, leading to a parser level of zero.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-22T01:00:00.000Z
CVE-2016-4540 
The grapheme_stripos function in ext/intl/grapheme/grapheme_string.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a negative offset.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-22T01:00:00.000Z
CVE-2016-4541 
The grapheme_strpos function in ext/intl/grapheme/grapheme_string.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a negative offset.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-22T01:00:00.000Z
CVE-2016-4542 
The exif_process_IFD_TAG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 does not properly construct spprintf arguments, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted header data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-22T01:00:00.000Z
CVE-2016-4543 
The exif_process_IFD_in_JPEG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 does not validate IFD sizes, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted header data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-22T01:00:00.000Z
CVE-2016-4544 
The exif_process_TIFF_in_JPEG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 does not validate TIFF start data, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted header data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-22T01:00:00.000Z
CVE-2016-4545 
Virtual servers in F5 BIG-IP 11.5.4, when SSL profiles are enabled, allow remote attackers to cause a denial of service (resource consumption and Traffic Management Microkernel restart) via an SSL alert during the handshake.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-07T18:00:00.000Z
CVE-2016-4546 
Samsung devices with Android KK(4.4) or L(5.0/5.1) allow local users to cause a denial of service (IAndroidShm service crash) via crafted data in a service call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-13T18:00:00.000Z
CVE-2016-4547 
Samsung devices with Android KK(4.4), L(5.0/5.1), or M(6.0) allow attackers to cause a denial of service (system crash) via a crafted system call to TvoutService_C.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-13T18:00:00.000Z
CVE-2016-4551 
The (1) SAP_BASIS and (2) SAP_ABA components 7.00 SP Level 0031 in SAP NetWeaver 2004s might allow remote attackers to spoof IP addresses written to the Security Audit Log via vectors related to the network landscape, aka SAP Security Note 2190621.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-05T16:00:00.000Z
CVE-2016-4552 
Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the href attribute in an area tag in an e-mail message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-12-20T22:00:00.000Z
CVE-2016-4553 
client_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host header when absolute-URI is provided, which allows remote attackers to conduct cache-poisoning attacks via an HTTP request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-10T19:00:00.000Z
CVE-2016-4554 
mime_header.cc in Squid before 3.5.18 allows remote attackers to bypass intended same-origin restrictions and possibly conduct cache-poisoning attacks via a crafted HTTP Host header, aka a "header smuggling" issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-10T19:00:00.000Z
CVE-2016-4555 
client_side_request.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a denial of service (crash) via crafted Edge Side Includes (ESI) responses.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-10T19:00:00.000Z
CVE-2016-4556 
Double free vulnerability in Esi.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a denial of service (crash) via a crafted Edge Side Includes (ESI) response.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-10T19:00:00.000Z
CVE-2016-4557 
The replace_map_fd_with_map_ptr function in kernel/bpf/verifier.c in the Linux kernel before 4.5.5 does not properly maintain an fd data structure, which allows local users to gain privileges or cause a denial of service (use-after-free) via crafted BPF instructions that reference an incorrect file descriptor.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-23T10:00:00.000Z
CVE-2016-4558 
The BPF subsystem in the Linux kernel before 4.5.5 mishandles reference counts, which allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted application on (1) a system with more than 32 Gb of memory, related to the program reference count or (2) a 1 Tb system, related to the map reference count.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-23T10:00:00.000Z
CVE-2016-4560 
Untrusted search path vulnerability in Flexera InstallAnywhere allows local users to gain privileges via a Trojan horse DLL in the current working directory of a setup-launcher executable file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-02T14:00:00.000Z
CVE-2016-4561 
Cross-site scripting (XSS) vulnerability in the cgierror function in CGI.pm in ikiwiki before 3.20160506 might allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-10T19:00:00.000Z
CVE-2016-4562 
The DrawDashPolygon function in MagickCore/draw.c in ImageMagick before 6.9.4-0 and 7.x before 7.0.1-2 mishandles calculations of certain vertices integer data, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-04T16:00:00.000Z
CVE-2016-4563 
The TraceStrokePolygon function in MagickCore/draw.c in ImageMagick before 6.9.4-0 and 7.x before 7.0.1-2 mishandles the relationship between the BezierQuantum value and certain strokes data, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-04T16:00:00.000Z
CVE-2016-4564 
The DrawImage function in MagickCore/draw.c in ImageMagick before 6.9.4-0 and 7.x before 7.0.1-2 makes an incorrect function call in attempting to locate the next token, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-04T16:00:00.000Z
CVE-2016-4565 
The InfiniBand (aka IB) stack in the Linux kernel before 4.5.3 incorrectly relies on the write system call, which allows local users to cause a denial of service (kernel memory write operation) or possibly have unspecified other impact via a uAPI interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-23T10:00:00.000Z
CVE-2016-4566 
Cross-site scripting (XSS) vulnerability in plupload.flash.swf in Plupload before 2.1.9, as used in WordPress before 4.5.2, allows remote attackers to inject arbitrary web script or HTML via a Same-Origin Method Execution (SOME) attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-22T01:00:00.000Z
CVE-2016-4567 
Cross-site scripting (XSS) vulnerability in flash/FlashMediaElement.as in MediaElement.js before 2.21.0, as used in WordPress before 4.5.2, allows remote attackers to inject arbitrary web script or HTML via an obfuscated form of the jsinitfunction parameter, as demonstrated by "jsinitfunctio%gn."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-22T01:00:00.000Z
CVE-2016-4568 
drivers/media/v4l2-core/videobuf2-v4l2.c in the Linux kernel before 4.5.3 allows local users to cause a denial of service (kernel memory write operation) or possibly have unspecified other impact via a crafted number of planes in a VIDIOC_DQBUF ioctl call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-23T10:00:00.000Z
CVE-2016-4569 
The snd_timer_user_params function in sound/core/timer.c in the Linux kernel through 4.6 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via crafted use of the ALSA timer interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-23T10:00:00.000Z
CVE-2016-4570 
The mxmlDelete function in mxml-node.c in mxml 2.9, 2.7, and possibly earlier allows remote attackers to cause a denial of service (stack consumption) via crafted xml file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-03T15:00:00.000Z
CVE-2016-4571 
The mxml_write_node function in mxml-file.c in mxml 2.9, 2.7, and possibly earlier allows remote attackers to cause a denial of service (stack consumption) via crafted xml file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-03T15:00:00.000Z
CVE-2016-4572 
In Cloudera CDH before 5.7.1, Impala REVOKE ALL ON SERVER commands do not revoke all privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-26T13:51:20.000Z
CVE-2016-4573 
Fortinet FortiSwitch FSW-108D-POE, FSW-124D, FSW-124D-POE, FSW-224D-POE, FSW-224D-FPOE, FSW-248D-POE, FSW-248D-FPOE, FSW-424D, FSW-424D-POE, FSW-424D-FPOE, FSW-448D, FSW-448D-POE, FSW-448D-FPOE, FSW-524D, FSW-524D-FPOE, FSW-548D, FSW-548D-FPOE, FSW-1024D, FSW-1048D, FSW-3032D, and FSW-R-112D-POE models, when in FortiLink managed mode and upgraded to 3.4.1, might allow remote attackers to bypass authentication and gain administrative access via an empty password for the rest_admin account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-09T14:00:00.000Z
CVE-2016-4574 
Off-by-one error in the append_utf8_value function in the DN decoder (dn.c) in Libksba before 1.3.4 allows remote attackers to cause a denial of service (out-of-bounds read) via invalid utf-8 encoded data. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-4356.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-13T19:00:00.000Z
CVE-2016-4575 
Cross-site scripting (XSS) vulnerability in the email APP in Huawei PLK smartphones with software AL10C00 before AL10C00B211 and AL10C92 before AL10C92B211; ATH smartphones with software AL00C00 before AL00C00B361, CL00C92 before CL00C92B361, TL00HC01 before TL00HC01B361, and UL00C00 before UL00C00B361; CherryPlus smartphones with software TL00C00 before TL00C00B553, UL00C00 before UL00C00B553, and TL00MC01 before TL00MC01B553; and RIO smartphones with software AL00C00 before AL00C00B360 allows remote attackers to inject arbitrary web script or HTML via an email message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-25T15:00:00.000Z
CVE-2016-4576 
Buffer overflow in the Application Specific Packet Filtering (ASPF) functionality in the Huawei IPS Module, NGFW Module, NIP6300, NIP6600, Secospace USG6300, USG6500, USG6600, USG9500, and AntiDDoS8000 devices with software before V500R001C20SPC100 allows remote attackers to cause a denial of service or execute arbitrary code via a crafted packet, related to "illegitimate parameters."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-23T19:00:00.000Z
CVE-2016-4577 
Buffer overflow in the Smart DNS functionality in the Huawei NGFW Module and Secospace USG6300, USG6500, USG6600, and USG9500 firewalls with software before V500R001C20SPC100 allows remote attackers to cause a denial of service or execute arbitrary code via a crafted packet, related to "illegitimate parameters."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-23T19:00:00.000Z
CVE-2016-4578 
sound/core/timer.c in the Linux kernel through 4.6 does not initialize certain r1 data structures, which allows local users to obtain sensitive information from kernel stack memory via crafted use of the ALSA timer interface, related to the (1) snd_timer_user_ccallback and (2) snd_timer_user_tinterrupt functions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-23T10:00:00.000Z
CVE-2016-4579 
Libksba before 1.3.4 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via unspecified vectors, related to the "returned length of the object from _ksba_ber_parse_tl."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-13T19:00:00.000Z
CVE-2016-4580 
The x25_negotiate_facilities function in net/x25/x25_facilities.c in the Linux kernel before 4.5.5 does not properly initialize a certain data structure, which allows attackers to obtain sensitive information from kernel stack memory via an X.25 Call Request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-23T10:00:00.000Z
CVE-2016-4581 
fs/pnode.c in the Linux kernel before 4.5.4 does not properly traverse a mount propagation tree in a certain case involving a slave mount, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) via a crafted series of mount system calls.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-23T10:00:00.000Z
CVE-2016-4582 
The kernel in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1863 and CVE-2016-4653.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-22T01:00:00.000Z
CVE-2016-4583 
WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to bypass the Same Origin Policy and obtain image date from an unintended web site via a timing attack involving an SVG document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-22T01:00:00.000Z
CVE-2016-4584 
The WebKit Page Loading implementation in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-22T01:00:00.000Z
CVE-2016-4585 
Cross-site scripting (XSS) vulnerability in the WebKit Page Loading implementation in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to inject arbitrary web script or HTML via an HTTP response specifying redirection that is mishandled by Safari.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-22T01:00:00.000Z
CVE-2016-4586 
WebKit in Apple Safari before 9.1.2 and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-22T01:00:00.000Z
CVE-2016-4587 
WebKit in Apple iOS before 9.3.3 and tvOS before 9.2.2 allows remote attackers to obtain sensitive information from uninitialized process memory via a crafted web site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-22T01:00:00.000Z
CVE-2016-4588 
WebKit in Apple tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-22T01:00:00.000Z
CVE-2016-4589 
WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4622, CVE-2016-4623, and CVE-2016-4624.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-22T01:00:00.000Z
CVE-2016-4590 
WebKit in Apple iOS before 9.3.3 and Safari before 9.1.2 mishandles about: URLs, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-22T01:00:00.000Z
CVE-2016-4591 
WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 mishandles the location variable, which allows remote attackers to access the local filesystem via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-22T01:00:00.000Z
CVE-2016-4592 
WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to cause a denial of service (memory consumption) via a crafted web site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-22T01:00:00.000Z
CVE-2016-4593 
The Siri Contacts component in Apple iOS before 9.3.3 allows physically proximate attackers to read arbitrary Contact card information via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-22T01:00:00.000Z
CVE-2016-4594 
The Sandbox Profiles component in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows attackers to access the process list via a crafted app that makes an API call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-22T01:00:00.000Z
CVE-2016-4595 
Safari Login AutoFill in Apple OS X before 10.11.6 allows physically proximate attackers to discover passwords by reading the screen during the login procedure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-22T01:00:00.000Z
CVE-2016-4596 
QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FlashPix bitmap image, a different vulnerability than CVE-2016-4597, CVE-2016-4600, and CVE-2016-4602.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-22T01:00:00.000Z
CVE-2016-4597 
QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FlashPix bitmap image, a different vulnerability than CVE-2016-4596, CVE-2016-4600, and CVE-2016-4602.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-22T01:00:00.000Z
CVE-2016-4598 
QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-22T01:00:00.000Z
CVE-2016-4599 
QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Photoshop document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-22T01:00:00.000Z
CVE-2016-4600 
QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FlashPix bitmap image, a different vulnerability than CVE-2016-4596, CVE-2016-4597, and CVE-2016-4602.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-22T01:00:00.000Z
CVE-2016-4601 
QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted SGI image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-22T01:00:00.000Z
CVE-2016-4602 
QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FlashPix bitmap image, a different vulnerability than CVE-2016-4596, CVE-2016-4597, and CVE-2016-4600.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-22T01:00:00.000Z
CVE-2016-4603 
Web Media in Apple iOS before 9.3.3 allows attackers to bypass the Private Browsing protection mechanism and obtain sensitive video URL information by leveraging Safari View Controller misbehavior.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-22T01:00:00.000Z