rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-4415 
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS Mojave 10.14.1.
Problem types: description: An application may be able to execute arbitrary code with system privileges
Affected products: vendor: n/a
product: macOS
Published: 2019-04-03T17:43:18.000Z
CVE-2018-4416 
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12.1, tvOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8.
Problem types: description: Processing maliciously crafted web content may lead to arbitrary code execution
Affected products: vendor: n/a
product: iOS, tvOS, watchOS, Safari,  iTunes for Windows, iCloud for Windows
Published: 2019-04-03T17:43:18.000Z
CVE-2018-4417 
A validation issue was addressed with improved input sanitization. This issue affected versions prior to macOS Mojave 10.14.
Problem types: description: An application may be able to read restricted memory
Affected products: vendor: n/a
product: macOS
Published: 2019-04-03T17:43:18.000Z
CVE-2018-4418 
A validation issue was addressed with improved input sanitization. This issue affected versions prior to macOS Mojave 10.14.
Problem types: description: An application may be able to read restricted memory
Affected products: vendor: n/a
product: macOS
Published: 2019-04-03T17:43:18.000Z
CVE-2018-4419 
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1, macOS Mojave 10.14.1, tvOS 12.1, watchOS 5.1.
Problem types: description: An application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: n/a
product: iOS, macOS, tvOS, watchOS
Published: 2019-04-03T17:43:18.000Z
CVE-2018-4420 
A memory corruption issue was addressed by removing the vulnerable code. This issue affected versions prior to iOS 12.1, macOS Mojave 10.14.1, tvOS 12.1, watchOS 5.1.
Problem types: description: An application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: n/a
product: iOS, macOS, tvOS, watchOS
Published: 2019-04-03T17:43:18.000Z
CVE-2018-4421 
A memory initialization issue was addressed with improved memory handling. This issue affected versions prior to macOS Mojave 10.14.1.
Problem types: description: An application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: n/a
product: macOS
Published: 2019-04-03T17:43:18.000Z
CVE-2018-4422 
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS Mojave 10.14.1.
Problem types: description: An application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: n/a
product: macOS
Published: 2019-04-03T17:43:18.000Z
CVE-2018-4423 
A logic issue was addressed with improved validation. This issue affected versions prior to macOS Mojave 10.14.1.
Problem types: description: A malicious application may be able to elevate privileges
Affected products: vendor: n/a
product: macOS
Published: 2019-04-03T17:43:18.000Z
CVE-2018-4424 
A buffer overflow was addressed with improved size validation. This issue affected versions prior to macOS Mojave 10.14.1.
Problem types: description: An application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: n/a
product: macOS
Published: 2019-04-03T17:43:18.000Z
CVE-2018-4425 
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.
Problem types: description: An application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: n/a
product: iOS, macOS, tvOS, watchOS
Published: 2019-04-03T17:43:18.000Z
CVE-2018-4426 
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.
Problem types: description: An application may be able to execute arbitrary code with system privileges
Affected products: vendor: n/a
product: iOS, macOS, tvOS, watchOS
Published: 2019-04-03T17:43:18.000Z
CVE-2018-4427 
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to: iOS 12.1, watchOS 5.1.2, tvOS 12.1.1, macOS High Sierra 10.13.6 Security Update 2018-003 High Sierra, macOS Sierra 10.12.6 Security Update 2018-006.
Problem types: description: An application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: n/a
product: watchOS, tvOS, macOS
Published: 2019-04-03T17:43:20.000Z
CVE-2018-4428 
A lock screen issue allowed access to the share function on a locked device. This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 12.1.1. A local attacker may be able to share items from the lock screen.
Problem types: description: A local attacker may be able to share items from the lock screen
Affected products: vendor: Apple
product: iOS
Published: 2020-10-27T19:19:03.000Z
CVE-2018-4429 
A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue affected versions prior to iOS 12.1.1, watchOS 5.1.2.
Problem types: description: Processing a maliciously crafted email may lead to user interface spoofing
Affected products: vendor: n/a
product: iOS, watchOS
Published: 2019-04-03T17:43:18.000Z
CVE-2018-4430 
A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state management. This issue affected versions prior to iOS 12.1.1.
Problem types: description: A local attacker may be able to view contacts from the lock screen
Affected products: vendor: n/a
product: iOS
Published: 2019-04-03T17:43:18.000Z
CVE-2018-4431 
A memory initialization issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1, macOS Mojave 10.14.2, tvOS 12.1.1, watchOS 5.1.2.
Problem types: description: A local user may be able to read kernel memory
Affected products: vendor: n/a
product: iOS, macOS, tvOS, watchOS
Published: 2019-04-03T17:43:18.000Z
CVE-2018-4433 
A configuration issue was addressed with additional restrictions. This issue is fixed in macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra, watchOS 5, iOS 12, tvOS 12, macOS Mojave 10.14. A malicious application may be able to modify protected parts of the file system.
Problem types: description: A malicious application may be able to modify protected parts of the file system
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: tvOS
vendor: Apple
product: watchOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2020-10-27T19:19:59.000Z
CVE-2018-4434 
An out-of-bounds read was addressed with improved input validation. This issue affected versions prior to macOS Mojave 10.14.2.
Problem types: description: A local user may be able to cause unexpected system termination or read kernel memory
Affected products: vendor: n/a
product: macOS
Published: 2019-04-03T17:43:18.000Z
CVE-2018-4435 
A logic issue was addressed with improved restrictions. This issue affected versions prior to iOS 12.1.1, macOS Mojave 10.14.2, tvOS 12.1.1, watchOS 5.1.2.
Problem types: description: A malicious application may be able to elevate privileges
Affected products: vendor: n/a
product: iOS, macOS, tvOS, watchOS
Published: 2019-04-03T17:43:18.000Z
CVE-2018-4436 
A certificate validation issue existed in configuration profiles. This was addressed with additional checks. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1, watchOS 5.1.2.
Problem types: description: An untrusted configuration profile may be incorrectly displayed as verified
Affected products: vendor: n/a
product: iOS, tvOS, watchOS
Published: 2019-04-03T17:43:18.000Z
CVE-2018-4437 
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1, watchOS 5.1.2, Safari 12.0.2, iTunes 12.9.2 for Windows, iCloud for Windows 7.9.
Problem types: description: Processing maliciously crafted web content may lead to arbitrary code execution
Affected products: vendor: n/a
product: iOS, tvOS, watchOS, Safari,  iTunes for Windows, iCloud for Windows
Published: 2019-04-03T17:43:19.000Z
CVE-2018-4438 
A logic issue existed resulting in memory corruption. This was addressed with improved state management. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1, watchOS 5.1.2, Safari 12.0.2, iTunes 12.9.2 for Windows, iCloud for Windows 7.9.
Problem types: description: Processing maliciously crafted web content may lead to arbitrary code execution
Affected products: vendor: n/a
product: iOS, tvOS, watchOS, Safari,  iTunes for Windows, iCloud for Windows
Published: 2019-04-03T17:43:19.000Z
CVE-2018-4439 
A logic issue was addressed with improved validation. This issue affected versions prior to iOS 12.1.1, Safari 12.0.2, iTunes 12.9.2 for Windows, iCloud for Windows 7.9.
Problem types: description: Visiting a malicious website may lead to user interface spoofing
Affected products: vendor: n/a
product: iOS, Safari,  iTunes for Windows, iCloud for Windows
Published: 2019-04-03T17:43:19.000Z
CVE-2018-4440 
A logic issue was addressed with improved state management. This issue affected versions prior to iOS 12.1.1, Safari 12.0.2, iTunes 12.9.2 for Windows, iCloud for Windows 7.9.
Problem types: description: Visiting a malicious website may lead to address bar spoofing
Affected products: vendor: n/a
product: iOS, Safari,  iTunes for Windows, iCloud for Windows
Published: 2019-04-03T17:43:19.000Z
CVE-2018-4441 
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1, watchOS 5.1.2, Safari 12.0.2, iTunes 12.9.2 for Windows, iCloud for Windows 7.9.
Problem types: description: Processing maliciously crafted web content may lead to arbitrary code execution
Affected products: vendor: n/a
product: iOS, tvOS, watchOS, Safari,  iTunes for Windows, iCloud for Windows
Published: 2019-04-03T17:43:19.000Z
CVE-2018-4442 
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1, watchOS 5.1.2, Safari 12.0.2, iTunes 12.9.2 for Windows, iCloud for Windows 7.9.
Problem types: description: Processing maliciously crafted web content may lead to arbitrary code execution
Affected products: vendor: n/a
product: iOS, tvOS, watchOS, Safari,  iTunes for Windows, iCloud for Windows
Published: 2019-04-03T17:43:19.000Z
CVE-2018-4443 
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1, watchOS 5.1.2, Safari 12.0.2, iTunes 12.9.2 for Windows, iCloud for Windows 7.9.
Problem types: description: Processing maliciously crafted web content may lead to arbitrary code execution
Affected products: vendor: n/a
product: iOS, tvOS, watchOS, Safari,  iTunes for Windows, iCloud for Windows
Published: 2019-04-03T17:43:19.000Z
CVE-2018-4444 
A logic issue was addressed with improved state management. This issue is fixed in Safari 12.0.2, iOS 12.1.1, tvOS 12.1.1, iTunes 12.9.2 for Windows. Processing maliciously crafted web content may disclose sensitive user information.
Problem types: description: Processing maliciously crafted web content may disclose sensitive user information
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: tvOS
vendor: Apple
product: Safari
vendor: Apple
product: iTunes for Windows
Published: 2020-10-27T19:19:49.000Z
CVE-2018-4445 
"Clear History and Website Data" did not clear the history. The issue was addressed with improved data deletion. This issue affected versions prior to iOS 12.1.1, Safari 12.0.2.
Problem types: description: A user may be unable to fully delete browsing history
Affected products: vendor: n/a
product: iOS, Safari
Published: 2019-04-03T17:43:19.000Z
CVE-2018-4446 
This issue was addressed with improved entitlements. This issue affected versions prior to iOS 12.1.1.
Problem types: description: A malicious application may be able to learn presence of and location of other applications on the device
Affected products: vendor: n/a
product: iOS
Published: 2019-04-03T17:43:19.000Z
CVE-2018-4447 
A memory corruption issue was addressed with improved state management. This issue affected versions prior to iOS 12.1.1, macOS Mojave 10.14.2, tvOS 12.1.1, watchOS 5.1.2.
Problem types: description: An application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: n/a
product: iOS, macOS, tvOS, watchOS
Published: 2019-04-03T17:43:19.000Z
CVE-2018-4448 
A memory initialization issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra, iOS 12.1.1, watchOS 5.1.2, macOS Mojave 10.14.2, Security Update 2018-003 High Sierra, Security Update 2018-006 Sierra, tvOS 12.1.1. A local user may be able to read kernel memory.
Problem types: description: A local user may be able to read kernel memory
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2020-10-27T19:21:41.000Z
CVE-2018-4449 
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS Mojave 10.14.2.
Problem types: description: An application may be able to execute arbitrary code with system privileges
Affected products: vendor: n/a
product: macOS
Published: 2019-04-03T17:43:19.000Z
CVE-2018-4450 
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS Mojave 10.14.2.
Problem types: description: An application may be able to execute arbitrary code with system privileges
Affected products: vendor: n/a
product: macOS
Published: 2019-04-03T17:43:19.000Z
CVE-2018-4451 
This issue is fixed in macOS Mojave 10.14. A memory corruption issue was addressed with improved input validation.
Problem types: description: Description: A memory corruption issue was addressed with improved input validation.
Affected products: vendor: Apple
product: macOS
Published: 2020-10-27T19:20:31.000Z
CVE-2018-4452 
A memory consumption issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.3, Security Update 2019-001 High Sierra, Security Update 2019-001 Sierra, macOS Mojave 10.14.2, Security Update 2018-003 High Sierra, Security Update 2018-006 Sierra. A malicious application may be able to execute arbitrary code with system privileges.
Problem types: description: A malicious application may be able to execute arbitrary code with system privileges
Affected products: vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2020-10-27T19:21:30.000Z
CVE-2018-4456 
A memory corruption issue was addressed with improved input validation. This issue affected versions prior to macOS High Sierra 10.13.6, macOS Mojave 10.14.
Problem types: description: An application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: n/a
product: macOS
Published: 2019-04-03T17:43:19.000Z
CVE-2018-4460 
A denial of service issue was addressed by removing the vulnerable code. This issue affected versions prior to iOS 12.1.1, macOS Mojave 10.14.2, tvOS 12.1.1, watchOS 5.1.2.
Problem types: description: An attacker in a privileged position may be able to perform a denial of service attack
Affected products: vendor: n/a
product: iOS, macOS, tvOS, watchOS
Published: 2019-04-03T17:43:19.000Z
CVE-2018-4461 
A memory corruption issue was addressed with improved input validation. This issue affected versions prior to iOS 12.1.1, macOS Mojave 10.14.2, tvOS 12.1.1, watchOS 5.1.2.
Problem types: description: An application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: n/a
product: iOS, macOS, tvOS, watchOS
Published: 2019-04-03T17:43:19.000Z
CVE-2018-4462 
A validation issue was addressed with improved input sanitization. This issue affected versions prior to macOS Mojave 10.14.2.
Problem types: description: An application may be able to read restricted memory
Affected products: vendor: n/a
product: macOS
Published: 2019-04-03T17:43:19.000Z
CVE-2018-4463 
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS Mojave 10.14.2.
Problem types: description: An application may be able to execute arbitrary code with system privileges
Affected products: vendor: n/a
product: macOS
Published: 2019-04-03T17:43:19.000Z
CVE-2018-4464 
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1, watchOS 5.1.2, Safari 12.0.2, iTunes 12.9.2 for Windows, iCloud for Windows 7.9.
Problem types: description: Processing maliciously crafted web content may lead to arbitrary code execution
Affected products: vendor: n/a
product: iOS, tvOS, watchOS, Safari,  iTunes for Windows, iCloud for Windows
Published: 2019-04-03T17:43:19.000Z
CVE-2018-4465 
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1, macOS Mojave 10.14.2, tvOS 12.1.1, watchOS 5.1.2.
Problem types: description: An application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: n/a
product: iOS, macOS, tvOS, watchOS
Published: 2019-04-03T17:43:19.000Z
CVE-2018-4467 
A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.3, Security Update 2019-001 High Sierra, Security Update 2019-001 Sierra, macOS Mojave 10.14.2, Security Update 2018-003 High Sierra, Security Update 2018-006 Sierra. A malicious application may be able to elevate privileges.
Problem types: description: A malicious application may be able to elevate privileges
Affected products: vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2020-10-27T19:21:59.000Z
CVE-2018-4468 
This issue was addressed by removing additional entitlements. This issue is fixed in macOS Mojave 10.14.1, Security Update 2018-002 High Sierra, Security Update 2018-005 Sierra. A malicious application may be able to access restricted files.
Problem types: description: A malicious application may be able to access restricted files
Affected products: vendor: Apple
product: macOS
Published: 2020-10-27T19:20:51.000Z
CVE-2018-4470 
A privacy issue in the handling of Open Directory records was addressed with improved indexing. This issue affected versions prior to macOS High Sierra 10.13.6.
Problem types: description: A malicious application may be able to access local users AppleIDs
Affected products: vendor: n/a
product: macOS
Published: 2019-04-03T17:43:19.000Z
CVE-2018-4474 
A memory consumption issue was addressed with improved memory handling. This issue is fixed in iCloud for Windows 7.7, watchOS 5, Safari 12, iOS 12, iTunes 12.9 for Windows, tvOS 12. Unexpected interaction causes an ASSERT failure.
Problem types: description: Unexpected interaction causes an ASSERT failure
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: tvOS
vendor: Apple
product: watchOS
vendor: Apple
product: Safari
vendor: Apple
product: iTunes for Windows
vendor: Apple
product: iCloud for Windows
Published: 2020-10-27T19:23:00.000Z
CVE-2018-4478 
A validation issue was addressed with improved logic. This issue is fixed in macOS High Sierra 10.13.5, Security Update 2018-003 Sierra, Security Update 2018-003 El Capitan. An attacker with physical access to a device may be able to elevate privileges.
Problem types: description: An attacker with physical access to a device may be able to elevate privileges
Affected products: vendor: Apple
product: macOS
Published: 2021-12-23T19:48:27.000Z
CVE-2018-4833 
A vulnerability has been identified in RFID 181EIP (All versions), RUGGEDCOM Win (V4.4, V4.5, V5.0, and V5.1), SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.3), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.4.1), SCALANCE X-200RNA switch family (All versions < V3.2.6), SCALANCE X-300 switch family (incl. SIPLUS NET variants) (All versions < V4.1.3), SCALANCE X408 (All versions < V4.1.3), SCALANCE X414 (All versions), SIMATIC RF182C (All versions). Unprivileged remote attackers located in the same local network segment (OSI Layer 2) could gain remote code execution on the affected products by sending a specially crafted DHCP response to a client's DHCP request.
Problem types: cwe_id: CWE-122
description: CWE-122: Heap-based Buffer Overflow
Affected products: vendor: Siemens
product: RFID 181EIP
vendor: Siemens
product: RUGGEDCOM Win
vendor: Siemens
product: SCALANCE X-200 switch family (incl. SIPLUS NET variants)
vendor: Siemens
product: SCALANCE X-200IRT switch family (incl. SIPLUS NET variants)
vendor: Siemens
product: SCALANCE X-200RNA switch family
vendor: Siemens
product: SCALANCE X-300 switch family (incl. SIPLUS NET variants)
vendor: Siemens
product: SCALANCE X408
vendor: Siemens
product: SCALANCE X414
vendor: Siemens
product: SIMATIC RF182C
Published: 2018-06-14T16:00:00.000Z
CVE-2018-4835 
A vulnerability has been identified in TeleControl Server Basic < V3.1. An attacker with network access to the TeleControl Server Basic's port 8000/tcp could bypass the authentication mechanism and read limited information.
Problem types: cwe_id: CWE-287
description: CWE-287: Improper Authentication
Affected products: vendor: Siemens AG
product: TeleControl Server Basic
Published: 2018-01-25T14:00:00.000Z
CVE-2018-4836 
A vulnerability has been identified in TeleControl Server Basic < V3.1. An authenticated attacker with a low-privileged account to the TeleControl Server Basic's port 8000/tcp could escalate his privileges and perform administrative operations.
Problem types: cwe_id: CWE-287
description: CWE-287: Improper Authentication
Affected products: vendor: Siemens AG
product: TeleControl Server Basic
Published: 2018-01-25T14:00:00.000Z
CVE-2018-4837 
A vulnerability has been identified in TeleControl Server Basic < V3.1. An attacker with access to the TeleControl Server Basic's webserver (port 80/tcp or 443/tcp) could cause a Denial-of-Service condition on the web server. The remaining functionality of the TeleControl Server Basic is not affected by the Denial-of-Service condition.
Problem types: cwe_id: CWE-400
description: CWE-400: Uncontrolled Resource Consumption ('Resource Exhaustion')
Affected products: vendor: Siemens AG
product: TeleControl Server Basic
Published: 2018-01-25T14:00:00.000Z
CVE-2018-4838 
A vulnerability has been identified in EN100 Ethernet module IEC 61850 variant (All versions < V4.30), EN100 Ethernet module DNP3 variant (All versions < V1.04), EN100 Ethernet module PROFINET IO variant (All versions), EN100 Ethernet module Modbus TCP variant (All versions), EN100 Ethernet module IEC 104 variant (All versions < V1.22). The web interface (TCP/80) of affected devices allows an unauthenticated user to upgrade or downgrade the firmware of the device, including to older versions with known vulnerabilities.
Problem types: description: Other
Affected products: vendor: Siemens AG
product: EN100 Ethernet module IEC 61850 variant
vendor: Siemens AG
product: EN100 Ethernet module DNP3 variant
vendor: Siemens AG
product: EN100 Ethernet module PROFINET IO variant
vendor: Siemens AG
product: EN100 Ethernet module Modbus TCP variant
vendor: Siemens AG
product: EN100 Ethernet module IEC 104 variant
Published: 2018-03-08T17:00:00.000Z