[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1038?

[Assistant] {'name': 'openSUSE-SU-2015:1162', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2015-07/msg00000.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774660'}, {'name': 'FEDORA-2015-d5cc306730', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174245.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1179505'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html'}, {'name': '71890', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/71890'}, {'name': 'DSA-3289', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2015/dsa-3289'}, {'name': '[oss-security] 20150111 Re: CVE request for directory traversal flaw in p7zip', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2015/01/11/2'}, {'name': 'FEDORA-2015-fadaa9953e', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-December/173245.html'}, {'name': 'p7zip-cve20151038-symlink(99970)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/99970'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1038?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1039 mean in the context of cybersecurity?

[Assistant] CVE-2015-1039


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1039.

[Assistant] Cross-site scripting (XSS) vulnerability in user/login.phtml in ZF-Commons ZfcUser before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the redirect parameter.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1039?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/ZF-Commons/ZfcUser/issues/550'}, {'name': '[oss-security] 20150111 Re: CVE request', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2015/01/11/4'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/ZF-Commons/ZfcUser/commit/baf0e460'}, {'name': '71931', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/71931'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1039?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1040 mean in the context of cybersecurity?

[Assistant] CVE-2015-1040


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1040.

[Assistant] Multiple cross-site scripting (XSS) vulnerabilities in the administrative backend in BEdita 3.4.0 allow remote authenticated users to inject arbitrary web script or HTML via the (1) lrealname field in the editProfile form to index.php/home/profile; the (2) data[title] or (3) data[description] field in the addQuickItem form to index.php; the (4) "note text" field in the saveNote form to index.php/areas; or the (5) titleBEObject or (6) tagsArea field in the updateForm form to index.php/documents/view.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1040?

[Assistant] {'name': '20150108 Multiple persistent XSS vulnerabilites in CMS BEdita v. 3.4.0', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2015/Jan/16'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/129865/CMS-BEdita-3.4.0-Cross-Site-Scripting.html'}, {'name': '[oss-security] 20150111 Re: CVE Request -- CMS BEdita v. 3.4.0 -- Multiple stored XSS vulnerabilities', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://seclists.org/oss-sec/2015/q1/115'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/bedita/bedita/issues/566'}, {'tags': ['x_refsource_MISC'], 'url': 'http://sroesemann.blogspot.de/2014/12/sroeadv-2014-10.html'}, {'name': '71949', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/71949'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1040?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1041 mean in the context of cybersecurity?

[Assistant] CVE-2015-1041


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1041.

[Assistant] Cross-site scripting (XSS) vulnerability in e107_admin/filemanager.php in e107 1.0.4 allows remote attackers to inject arbitrary web script or HTML via the e107_files/ file path in the QUERY_STRING.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1041?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'http://sroesemann.blogspot.de/2015/01/report-for-advisory-sroeadv-2014-05.html'}, {'name': 'e107-filemanager-xss(99898)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/99898'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/e107inc/e107v1/issues/2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/129872/CMS-e107-1.0.4-Cross-Site-Scripting.html'}, {'name': '[oss-security] 20150111 Re: CVE Request -- CMS e107 v.1.0.4 -- Reflecting  XSS vulnerability in filemanager functionality', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2015/01/11/6'}, {'name': '71977', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/71977'}, {'tags': ['x_refsource_MISC'], 'url': 'http://sroesemann.blogspot.de/2014/12/sroeadv-2014-05.html'}, {'name': '20150109 Reflecting XSS vulnerability in CMS e107 v. 1.0.4', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2015/Jan/18'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1041?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1042 mean in the context of cybersecurity?

[Assistant] CVE-2015-1042


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1042.

[Assistant] The string_sanitize_url function in core/string_api.php in MantisBT 1.2.0a3 through 1.2.18 uses an incorrect regular expression, which allows remote attackers to conduct open redirect and phishing attacks via a URL with a ":/" (colon slash) separator in the return parameter to login_page.php, a different vulnerability than CVE-2014-6316.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1042?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.mantisbt.org/bugs/view.php?id=17997'}, {'name': '1031633', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031633'}, {'name': '[oss-security] 20150110 Re: CVE-2014-6316: URL redirection issue in MantisBT', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2015/01/10/5'}, {'name': '[oss-security] 20150111 Re: Re: CVE-2014-6316: URL redirection issue in MantisBT', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2015/01/11/8'}, {'name': "20150128 CVE-2015-1042 - Mantis BugTracker 1.2.19 - URL Redirection to Untrusted Site ('Open Redirect')", 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2015/Jan/110'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/130142/Mantis-BugTracker-1.2.19-Open-Redirect.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1042?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1043 mean in the context of cybersecurity?

[Assistant] CVE-2015-1043


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1043.

[Assistant] The Host Guest File System (HGFS) in VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.5, and VMware Fusion 6.x before 6.0.5 and 7.x before 7.0.1 allows guest OS users to cause a guest OS denial of service via unspecified vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1043?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vmware.com/security/advisories/VMSA-2015-0001.html'}, {'name': '1031644', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031644'}, {'name': 'vmware-cve20151043-dos(100934)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/100934'}, {'name': '62551', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62551'}, {'name': '72337', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72337'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1043?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1044 mean in the context of cybersecurity?

[Assistant] CVE-2015-1044


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1044.

[Assistant] vmware-authd (aka the Authorization process) in VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.5, and VMware ESXi 5.0 through 5.5 allows attackers to cause a host OS denial of service via unspecified vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1044?

[Assistant] {'name': '1031645', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031645'}, {'name': '72336', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72336'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vmware.com/security/advisories/VMSA-2015-0001.html'}, {'name': '62569', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62569'}, {'name': 'vmware-cve20151044-dos(100935)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/100935'}, {'name': '1031646', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031646'}, {'name': '62551', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62551'}, {'name': '62669', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62669'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1044?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1045 mean in the context of cybersecurity?

[Assistant] CVE-2015-1045


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1045.

[Assistant] N\A


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1045?

[Assistant] N\A


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1045?

[Assistant] REJECTED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1046 mean in the context of cybersecurity?

[Assistant] CVE-2015-1046


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1046.

[Assistant] N\A


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1046?

[Assistant] N\A


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1046?

[Assistant] REJECTED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1047 mean in the context of cybersecurity?

[Assistant] CVE-2015-1047


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1047.

[Assistant] vpxd in VMware vCenter Server 5.0 before u3e, 5.1 before u3, and 5.5 before u2 allows remote attackers to cause a denial of service via a long heartbeat message.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1047?

[Assistant] {'name': '76932', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/76932'}, {'name': '1033720', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1033720'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vmware.com/security/advisories/VMSA-2015-0007.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1047?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1048 mean in the context of cybersecurity?

[Assistant] CVE-2015-1048


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1048.

[Assistant] Open redirect vulnerability in the integrated web server on Siemens SIMATIC S7-1200 CPU devices with firmware before 4.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1048?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-597212.pdf'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://cert-portal.siemens.com/productcert/pdf/ssa-597212.pdf'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1048?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1049 mean in the context of cybersecurity?

[Assistant] CVE-2015-1049


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1049.

[Assistant] The web server on Siemens SCALANCE X-200IRT switches with firmware before 5.2.0 allows remote attackers to hijack sessions via unspecified vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1049?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-954136.pdf'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://cert-portal.siemens.com/productcert/pdf/ssa-954136.pdf'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1049?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1050 mean in the context of cybersecurity?

[Assistant] CVE-2015-1050


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1050.

[Assistant] Cross-site scripting (XSS) vulnerability in F5 BIG-IP Application Security Manager (ASM) before 11.6 allows remote attackers to inject arbitrary web script or HTML via the Response Body field when creating a new user account.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1050?

[Assistant] {'name': '20150113 [Corrected] Stored XSS Vulnerability in F5 BIG-IP Application Security Manager', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/534459/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/129911/F5-BIG-IP-Application-Security-Manager-ASM-XSS.html'}, {'name': 'f5bigip-responsebody-xss(99907)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/99907'}, {'name': '20150113 [Corrected] Stored XSS Vulnerability in F5 BIG-IP Application Security Manager', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2015/Jan/43'}, {'name': '1031551', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031551'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1050?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1051 mean in the context of cybersecurity?

[Assistant] CVE-2015-1051


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1051.

[Assistant] Open redirect vulnerability in the Context UI module in the Context module 7.x-3.x before 7.x-3.6 for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the destination parameter.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1051?

[Assistant] {'name': 'FEDORA-2015-0726', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148800.html'}, {'name': '71925', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/71925'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.drupal.org/node/2402779'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.drupal.org/node/2403351'}, {'name': 'FEDORA-2015-0717', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148782.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1051?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1052 mean in the context of cybersecurity?

[Assistant] CVE-2015-1052


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1052.

[Assistant] Cross-site scripting (XSS) vulnerability in the poll archive in PHPKIT 1.6.6 (Build 160014) allows remote attackers to inject arbitrary web script or HTML via the result parameter to upload_files/pk/include.php.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1052?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'http://sroesemann.blogspot.de/2014/12/sroeadv-2014-07.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://sroesemann.blogspot.de/2015/01/report-for-advisory-sroeadv-2014-07.html'}, {'name': '72001', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72001'}, {'name': '20150112 Reflecting XSS vulnerability in CMS PHPKit WCMS v. 1.6.6', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2015/Jan/25'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/129917/CMS-PHPKit-WCMS-1.6.6-Cross-Site-Scripting.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1052?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1053 mean in the context of cybersecurity?

[Assistant] CVE-2015-1053


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1053.

[Assistant] Cross-site scripting (XSS) vulnerability in the administrative backend in Croogo before 2.2.1 allows remote attackers to inject arbitrary web script or HTML via the path parameter to admin/file_manager/file_manager/editfile.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1053?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/129916/CMS-Croogo-2.2.0-Cross-Site-Scripting.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://sroesemann.blogspot.de/2015/01/report-for-advisory-sroeadv-2015-02.html'}, {'name': 'croogo-filemanagereditfile-xss(99890)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/99890'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/croogo/croogo/issues/599'}, {'name': '20150112 Reflecting XSS vulnerability in CMS Croogo v.2.2.0', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2015/Jan/24'}, {'name': '71999', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/71999'}, {'tags': ['x_refsource_MISC'], 'url': 'http://sroesemann.blogspot.de/2015/01/sroeadv-2015-02.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://blog.croogo.org/blog/croogo-221-released'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1053?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1054 mean in the context of cybersecurity?

[Assistant] CVE-2015-1054


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1054.

[Assistant] Cross-site scripting (XSS) vulnerability in the Games feature in Crea8Social 2.0 allows remote authenticated users to inject arbitrary web script or HTML via the Game Content field in Add Game.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1054?

[Assistant] {'name': 'crea8social-game-xss(99615)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/99615'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://codecanyon.net/item/crea8social-php-social-networking-platform-v31/9211270/support'}, {'name': '35691', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/35691'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://codecanyon.net/item/crea8social-php-social-networking-platform-v31/9211270'}, {'name': '116732', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/show/osvdb/116732'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/129816/Crea8Social-2.0-Cross-Site-Scripting.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1054?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1055 mean in the context of cybersecurity?

[Assistant] CVE-2015-1055


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1055.

[Assistant] SQL injection vulnerability in the Photo Gallery plugin 1.2.7 for WordPress allows remote attackers to execute arbitrary SQL commands via the order_by parameter in a GalleryBox action to wp-admin/admin-ajax.php.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1055?

[Assistant] {'name': '72015', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72015'}, {'name': '20150112 Wordpress Photo Gallery 1.2.7 unauthenticated SQL injection', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2015/Jan/36'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1055?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1056 mean in the context of cybersecurity?

[Assistant] CVE-2015-1056


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1056.

[Assistant] Cross-site scripting (XSS) vulnerability in Brother MFC-J4410DW printer with firmware before L allows remote attackers to inject arbitrary web script or HTML via the url parameter to general/status.html and possibly other pages.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1056?

[Assistant] {'name': 'mfcj4410dw-url-xss(99906)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/99906'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/129841/Brother-MFC-J4410DW-Cross-Site-Scripting.html'}, {'name': '20150107 Brother MFC Administration Reflected Cross-Site Scripting', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/534398/100/0/threaded'}, {'name': '71911', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/71911'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1056?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1057 mean in the context of cybersecurity?

[Assistant] CVE-2015-1057


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1057.

[Assistant] Cross-site scripting (XSS) vulnerability in usersettings.php in e107 2.0.0 allows remote attackers to inject arbitrary web script or HTML via the "Real Name" value.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1057?

[Assistant] {'name': '116692', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/show/osvdb/116692'}, {'name': 'bootstrapcms-usersettings-xss(99627)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/99627'}, {'name': '35679', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/35679'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1057?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1058 mean in the context of cybersecurity?

[Assistant] CVE-2015-1058


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1058.

[Assistant] Multiple cross-site scripting (XSS) vulnerabilities in AdaptCMS 3.0.3 allow remote attackers to inject arbitrary web script or HTML via the (1) data[Category][title] parameter to admin/categories/add, (2) data[Field][title] parameter to admin/fields/ajax_fields/, (3) name property in a basicInfo JSON object to admin/tools/create_theme, (4) data[Link][link_title] parameter to admin/links/links/add, or (5) data[ForumTopic][subject] parameter to forums/off-topic/new.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1058?

[Assistant] {'name': '116718', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/show/osvdb/116718'}, {'name': '116719', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/show/osvdb/116719'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/129812/AdaptCMS-3.0.3-Cross-Site-Scripting.html'}, {'name': 'adaptcms-multiple-data-xss(99617)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/99617'}, {'name': '116716', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/show/osvdb/116716'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zeroscience.mk/en/vulnerabilities/ZSL-2015-5218.php'}, {'name': '116720', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/show/osvdb/116720'}, {'name': '116717', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/show/osvdb/116717'}, {'name': '35710', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/35710'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1058?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1059 mean in the context of cybersecurity?

[Assistant] CVE-2015-1059


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1059.

[Assistant] Unrestricted file upload vulnerability in admin/files/add in AdaptCMS 3.0.3 allows remote authenticated users to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a direct request to the file in /app/webroot/uploads.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1059?

[Assistant] {'name': '116722', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/show/osvdb/116722'}, {'tags': ['x_refsource_MISC'], 'url': 'http://zeroscience.mk/en/vulnerabilities/ZSL-2015-5220.php'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/129814/AdaptCMS-3.0.3-Remote-Command-Execution.html'}, {'name': 'adaptcms-appwebrootuploads-file-upload(99616)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/99616'}, {'name': '35710', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/35710'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1059?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1060 mean in the context of cybersecurity?

[Assistant] CVE-2015-1060


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1060.

[Assistant] Open redirect vulnerability in lib/Cake/Controller/Controller.php in AdaptCMS 3.0.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the HTTP Referer header.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1060?

[Assistant] {'name': 'adaptcms-referer-open-redirect(99618)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/99618'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zeroscience.mk/en/vulnerabilities/ZSL-2015-5219.php'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/129813/AdaptCMS-3.0.3-HTTP-Referer-Header-Open-Redirect.html'}, {'name': '116721', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/show/osvdb/116721'}, {'name': '35710', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/35710'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1060?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1061 mean in the context of cybersecurity?

[Assistant] CVE-2015-1061


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1061.

[Assistant] IOSurface in Apple iOS before 8.2, Apple OS X through 10.10.2, and Apple TV before 7.1 allows attackers to execute arbitrary code in a privileged context via a crafted app that leverages "type confusion" during serialized-object handling.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1061?

[Assistant] {'name': 'APPLE-SA-2015-03-09-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Mar/msg00001.html'}, {'name': 'APPLE-SA-2015-03-09-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Mar/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204426'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204413'}, {'name': 'APPLE-SA-2015-03-09-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Mar/msg00000.html'}, {'name': '1031864', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031864'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/kb/HT204563'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204423'}, {'name': '73004', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/73004'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1061?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1062 mean in the context of cybersecurity?

[Assistant] CVE-2015-1062


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1062.

[Assistant] MobileStorageMounter in Apple iOS before 8.2 and Apple TV before 7.1 does not delete invalid disk-image folders, which allows attackers to create folders in arbitrary filesystem locations via a crafted app.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1062?

[Assistant] {'name': 'APPLE-SA-2015-03-09-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Mar/msg00001.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204426'}, {'name': 'APPLE-SA-2015-03-09-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Mar/msg00000.html'}, {'name': '1031864', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031864'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204423'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1062?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1063 mean in the context of cybersecurity?

[Assistant] CVE-2015-1063


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1063.

[Assistant] CoreTelephony in Apple iOS before 8.2 allows remote attackers to cause a denial of service (NULL pointer dereference and device restart) via a Class 0 SMS message.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1063?

[Assistant] {'name': 'APPLE-SA-2015-03-09-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Mar/msg00000.html'}, {'name': '1031864', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031864'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204423'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1063?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1064 mean in the context of cybersecurity?

[Assistant] CVE-2015-1064


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1064.

[Assistant] Springboard in Apple iOS before 8.2 allows physically proximate attackers to bypass an intended activation requirement and read the home screen by leveraging an application crash during the activation process.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1064?

[Assistant] {'name': 'APPLE-SA-2015-03-09-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Mar/msg00000.html'}, {'name': '1031864', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031864'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204423'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1064?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1065 mean in the context of cybersecurity?

[Assistant] CVE-2015-1065


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1065.

[Assistant] Multiple buffer overflows in iCloud Keychain in Apple iOS before 8.2 and Apple OS X through 10.10.2 allow man-in-the-middle attackers to execute arbitrary code by modifying the client-server data stream during keychain recovery.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1065?

[Assistant] {'name': 'APPLE-SA-2015-03-09-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Mar/msg00002.html'}, {'name': '73007', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/73007'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204413'}, {'name': 'APPLE-SA-2015-03-09-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Mar/msg00000.html'}, {'name': '1031864', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031864'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/kb/HT204563'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204423'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1065?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1066 mean in the context of cybersecurity?

[Assistant] CVE-2015-1066


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1066.

[Assistant] Off-by-one error in IOAcceleratorFamily in Apple OS X through 10.10.2 allows attackers to execute arbitrary code in a privileged context via a crafted app.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1066?

[Assistant] {'name': 'APPLE-SA-2015-03-09-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Mar/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204413'}, {'name': '1031869', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031869'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1066?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1067 mean in the context of cybersecurity?

[Assistant] CVE-2015-1067


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1067.

[Assistant] Secure Transport in Apple iOS before 8.2, Apple OS X through 10.10.2, and Apple TV before 7.1 does not properly restrict TLS state transitions, which makes it easier for remote attackers to conduct cipher-downgrade attacks to EXPORT_RSA ciphers via crafted TLS traffic, related to the "FREAK" issue, a different vulnerability than CVE-2015-0204 and CVE-2015-1637.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1067?

[Assistant] {'name': '73009', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/73009'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204659'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/kb/HT204870'}, {'name': 'APPLE-SA-2015-03-09-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Mar/msg00001.html'}, {'name': '1031829', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031829'}, {'name': '1031830', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031830'}, {'name': 'APPLE-SA-2015-03-09-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Mar/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204426'}, {'tags': ['x_refsource_MISC'], 'url': 'https://freakattack.com/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204413'}, {'name': 'APPLE-SA-2015-04-08-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html'}, {'name': 'APPLE-SA-2015-03-09-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Mar/msg00000.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204423'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1067?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1068 mean in the context of cybersecurity?

[Assistant] CVE-2015-1068


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1068.

[Assistant] WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2015-03-17-1.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1068?

[Assistant] {'name': 'APPLE-SA-2015-04-08-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html'}, {'name': 'APPLE-SA-2015-06-30-6', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Jun/msg00006.html'}, {'name': 'APPLE-SA-2015-03-17-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Mar/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/kb/HT204949'}, {'name': '1031936', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031936'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204662'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204560'}, {'name': 'APPLE-SA-2015-04-08-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204661'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1068?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1069 mean in the context of cybersecurity?

[Assistant] CVE-2015-1069


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1069.

[Assistant] WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2015-03-17-1.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1069?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204659'}, {'name': 'APPLE-SA-2015-04-08-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html'}, {'name': 'APPLE-SA-2015-06-30-6', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Jun/msg00006.html'}, {'name': 'APPLE-SA-2015-03-17-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Mar/msg00004.html'}, {'name': 'APPLE-SA-2015-04-08-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/kb/HT204949'}, {'name': '1031936', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031936'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204662'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204560'}, {'name': 'APPLE-SA-2015-04-08-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204661'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1069?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1070 mean in the context of cybersecurity?

[Assistant] CVE-2015-1070


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1070.

[Assistant] WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2015-03-17-1.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1070?

[Assistant] {'name': 'APPLE-SA-2015-04-08-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html'}, {'name': 'APPLE-SA-2015-06-30-6', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Jun/msg00006.html'}, {'name': 'APPLE-SA-2015-03-17-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Mar/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/kb/HT204949'}, {'name': '1031936', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031936'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204662'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204560'}, {'name': 'APPLE-SA-2015-04-08-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204661'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1070?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1071 mean in the context of cybersecurity?

[Assistant] CVE-2015-1071


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1071.

[Assistant] WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2015-03-17-1.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1071?

[Assistant] {'name': 'APPLE-SA-2015-04-08-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html'}, {'name': 'APPLE-SA-2015-06-30-6', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Jun/msg00006.html'}, {'name': 'APPLE-SA-2015-03-17-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Mar/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/kb/HT204949'}, {'name': '1031936', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031936'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204662'}, {'name': 'openSUSE-SU-2016:0915', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2016-03/msg00132.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204560'}, {'name': 'APPLE-SA-2015-04-08-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204661'}, {'name': 'USN-2937-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2937-1'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1071?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1072 mean in the context of cybersecurity?

[Assistant] CVE-2015-1072


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1072.

[Assistant] WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2015-03-17-1.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1072?

[Assistant] {'name': 'APPLE-SA-2015-04-08-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html'}, {'name': 'APPLE-SA-2015-06-30-6', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Jun/msg00006.html'}, {'name': 'APPLE-SA-2015-03-17-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Mar/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/kb/HT204949'}, {'name': '1031936', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031936'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204662'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204560'}, {'name': 'APPLE-SA-2015-04-08-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204661'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1072?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1073 mean in the context of cybersecurity?

[Assistant] CVE-2015-1073


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1073.

[Assistant] WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2015-03-17-1.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1073?

[Assistant] {'name': 'APPLE-SA-2015-04-08-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html'}, {'name': 'APPLE-SA-2015-06-30-6', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Jun/msg00006.html'}, {'name': 'APPLE-SA-2015-03-17-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Mar/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/kb/HT204949'}, {'name': '1031936', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031936'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204662'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204560'}, {'name': 'APPLE-SA-2015-04-08-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204661'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1073?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1074 mean in the context of cybersecurity?

[Assistant] CVE-2015-1074


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1074.

[Assistant] WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2015-03-17-1.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1074?

[Assistant] {'name': 'APPLE-SA-2015-04-08-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html'}, {'name': 'APPLE-SA-2015-06-30-6', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Jun/msg00006.html'}, {'name': 'APPLE-SA-2015-03-17-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Mar/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/kb/HT204949'}, {'name': '1031936', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031936'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204662'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204560'}, {'name': 'APPLE-SA-2015-04-08-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204661'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1074?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1075 mean in the context of cybersecurity?

[Assistant] CVE-2015-1075


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1075.

[Assistant] WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2015-03-17-1.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1075?

[Assistant] {'name': 'APPLE-SA-2015-06-30-6', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Jun/msg00006.html'}, {'name': 'APPLE-SA-2015-03-17-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Mar/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/kb/HT204949'}, {'name': '1031936', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031936'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204560'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1075?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1076 mean in the context of cybersecurity?

[Assistant] CVE-2015-1076


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1076.

[Assistant] WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2015-03-17-1.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1076?

[Assistant] {'name': 'APPLE-SA-2015-04-08-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html'}, {'name': 'APPLE-SA-2015-06-30-6', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Jun/msg00006.html'}, {'name': 'APPLE-SA-2015-03-17-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Mar/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/kb/HT204949'}, {'name': '1031936', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031936'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204662'}, {'name': 'openSUSE-SU-2016:0915', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2016-03/msg00132.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204560'}, {'name': 'APPLE-SA-2015-04-08-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204661'}, {'name': 'USN-2937-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2937-1'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1076?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1077 mean in the context of cybersecurity?

[Assistant] CVE-2015-1077


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1077.

[Assistant] WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2015-03-17-1.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1077?

[Assistant] {'name': 'APPLE-SA-2015-04-08-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html'}, {'name': 'APPLE-SA-2015-06-30-6', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Jun/msg00006.html'}, {'name': 'APPLE-SA-2015-03-17-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Mar/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/kb/HT204949'}, {'name': '1031936', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031936'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204662'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204560'}, {'name': 'APPLE-SA-2015-04-08-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204661'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1077?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1078 mean in the context of cybersecurity?

[Assistant] CVE-2015-1078


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1078.

[Assistant] WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2015-03-17-1.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1078?

[Assistant] {'name': 'APPLE-SA-2015-04-08-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html'}, {'name': 'APPLE-SA-2015-06-30-6', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Jun/msg00006.html'}, {'name': 'APPLE-SA-2015-03-17-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Mar/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/kb/HT204949'}, {'name': '1031936', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031936'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204662'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204560'}, {'name': 'APPLE-SA-2015-04-08-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204661'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1078?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1079 mean in the context of cybersecurity?

[Assistant] CVE-2015-1079


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1079.

[Assistant] WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2015-03-17-1.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1079?

[Assistant] {'name': 'APPLE-SA-2015-04-08-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html'}, {'name': 'APPLE-SA-2015-06-30-6', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Jun/msg00006.html'}, {'name': 'APPLE-SA-2015-03-17-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Mar/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/kb/HT204949'}, {'name': '1031936', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031936'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204662'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204560'}, {'name': 'APPLE-SA-2015-04-08-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204661'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1079?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1080 mean in the context of cybersecurity?

[Assistant] CVE-2015-1080


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1080.

[Assistant] WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2015-03-17-1.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1080?

[Assistant] {'name': 'APPLE-SA-2015-04-08-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html'}, {'name': 'APPLE-SA-2015-06-30-6', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Jun/msg00006.html'}, {'name': 'APPLE-SA-2015-03-17-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Mar/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/kb/HT204949'}, {'name': '1031936', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031936'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204662'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204560'}, {'name': 'APPLE-SA-2015-04-08-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204661'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1080?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1081 mean in the context of cybersecurity?

[Assistant] CVE-2015-1081


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1081.

[Assistant] WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2015-03-17-1.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1081?

[Assistant] {'name': 'APPLE-SA-2015-04-08-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html'}, {'name': 'APPLE-SA-2015-06-30-6', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Jun/msg00006.html'}, {'name': 'APPLE-SA-2015-03-17-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Mar/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/kb/HT204949'}, {'name': '1031936', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031936'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204662'}, {'name': 'openSUSE-SU-2016:0915', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2016-03/msg00132.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204560'}, {'name': 'APPLE-SA-2015-04-08-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204661'}, {'name': 'USN-2937-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2937-1'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1081?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1082 mean in the context of cybersecurity?

[Assistant] CVE-2015-1082


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1082.

[Assistant] WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2015-03-17-1.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1082?

[Assistant] {'name': 'APPLE-SA-2015-04-08-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html'}, {'name': 'APPLE-SA-2015-06-30-6', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Jun/msg00006.html'}, {'name': 'APPLE-SA-2015-03-17-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Mar/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/kb/HT204949'}, {'name': '1031936', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031936'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204662'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204560'}, {'name': 'APPLE-SA-2015-04-08-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204661'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1082?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1083 mean in the context of cybersecurity?

[Assistant] CVE-2015-1083


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1083.

[Assistant] WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2015-03-17-1.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1083?

[Assistant] {'name': 'APPLE-SA-2015-04-08-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html'}, {'name': 'APPLE-SA-2015-06-30-6', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Jun/msg00006.html'}, {'name': 'APPLE-SA-2015-03-17-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Mar/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/kb/HT204949'}, {'name': '1031936', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031936'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204662'}, {'name': 'openSUSE-SU-2016:0915', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2016-03/msg00132.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204560'}, {'name': 'APPLE-SA-2015-04-08-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204661'}, {'name': 'USN-2937-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2937-1'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1083?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1084 mean in the context of cybersecurity?

[Assistant] CVE-2015-1084


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1084.

[Assistant] The user interface in WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, does not display URLs consistently, which makes it easier for remote attackers to conduct phishing attacks via a crafted URL.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1084?

[Assistant] {'name': 'APPLE-SA-2015-04-08-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html'}, {'name': 'APPLE-SA-2015-03-17-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Mar/msg00004.html'}, {'name': '1031936', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031936'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204560'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204661'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1084?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1085 mean in the context of cybersecurity?

[Assistant] CVE-2015-1085


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1085.

[Assistant] AppleKeyStore in Apple iOS before 8.3 does not properly restrict a certain passcode-confirmation interface, which makes it easier for attackers to verify correct passcode guesses via a crafted app.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1085?

[Assistant] {'name': 'APPLE-SA-2015-04-08-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html'}, {'name': '1032050', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032050'}, {'name': '73978', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/73978'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204661'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1085?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1086 mean in the context of cybersecurity?

[Assistant] CVE-2015-1086


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1086.

[Assistant] The Audio Drivers subsystem in Apple iOS before 8.3 and Apple TV before 7.2 does not properly validate IOKit object metadata, which allows attackers to execute arbitrary code in a privileged context via a crafted app.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1086?

[Assistant] {'name': 'APPLE-SA-2015-04-08-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html'}, {'name': '1032050', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032050'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204662'}, {'name': 'APPLE-SA-2015-04-08-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204661'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1086?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1087 mean in the context of cybersecurity?

[Assistant] CVE-2015-1087


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1087.

[Assistant] Directory traversal vulnerability in Backup in Apple iOS before 8.3 allows attackers to read arbitrary files via a crafted relative path.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1087?

[Assistant] {'name': 'APPLE-SA-2015-04-08-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html'}, {'name': '1032050', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032050'}, {'name': '73978', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/73978'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204661'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1087?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1088 mean in the context of cybersecurity?

[Assistant] CVE-2015-1088


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1088.

[Assistant] CFURL in Apple iOS before 8.3 and Apple OS X before 10.10.3 does not properly validate URLs, which allows remote attackers to execute arbitrary code via a crafted web site.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1088?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204659'}, {'name': 'APPLE-SA-2015-04-08-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html'}, {'name': '73984', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/73984'}, {'name': '1032048', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032048'}, {'name': 'APPLE-SA-2015-04-08-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204661'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1088?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1089 mean in the context of cybersecurity?

[Assistant] CVE-2015-1089


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1089.

[Assistant] CFNetwork in Apple iOS before 8.3 and Apple OS X before 10.10.3 does not properly handle cookies during processing of redirects in HTTP responses, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1089?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204659'}, {'name': 'APPLE-SA-2015-04-08-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html'}, {'name': '73984', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/73984'}, {'name': '1032048', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032048'}, {'name': 'APPLE-SA-2015-04-08-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204661'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1089?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1090 mean in the context of cybersecurity?

[Assistant] CVE-2015-1090


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1090.

[Assistant] CFNetwork in Apple iOS before 8.3 does not delete HTTP Strict Transport Security (HSTS) state information in response to a Safari history-clearing action, which allows attackers to obtain sensitive information by reading a history file.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1090?

[Assistant] {'name': 'APPLE-SA-2015-04-08-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html'}, {'name': '1032050', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032050'}, {'name': '73978', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/73978'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204661'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1090?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1091 mean in the context of cybersecurity?

[Assistant] CVE-2015-1091


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1091.

[Assistant] The CFNetwork Session component in Apple iOS before 8.3 and Apple OS X before 10.10.3 does not properly handle request headers during processing of redirects in HTTP responses, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1091?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204659'}, {'name': 'APPLE-SA-2015-04-08-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html'}, {'name': '73984', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/73984'}, {'name': '1032048', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032048'}, {'name': 'APPLE-SA-2015-04-08-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204661'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1091?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1092 mean in the context of cybersecurity?

[Assistant] CVE-2015-1092


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1092.

[Assistant] NSXMLParser in Foundation in Apple iOS before 8.3 and Apple TV before 7.2 allows remote attackers to read arbitrary files via an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1092?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/kb/HT204870'}, {'name': 'APPLE-SA-2015-04-08-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html'}, {'name': '73983', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/73983'}, {'name': '1032050', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032050'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204662'}, {'name': 'APPLE-SA-2015-04-08-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204661'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1092?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1093 mean in the context of cybersecurity?

[Assistant] CVE-2015-1093


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1093.

[Assistant] FontParser in Apple iOS before 8.3 and Apple OS X before 10.10.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1093?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204659'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/kb/HT204870'}, {'name': 'APPLE-SA-2015-04-08-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html'}, {'name': '73984', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/73984'}, {'name': '1032048', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032048'}, {'name': 'APPLE-SA-2015-04-08-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204661'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1093?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1094 mean in the context of cybersecurity?

[Assistant] CVE-2015-1094


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1094.

[Assistant] IOAcceleratorFamily in Apple iOS before 8.3 and Apple TV before 7.2 allows attackers to obtain sensitive information about kernel memory via a crafted app.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1094?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/kb/HT204870'}, {'name': 'APPLE-SA-2015-04-08-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html'}, {'name': '73983', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/73983'}, {'name': '1032050', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032050'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204662'}, {'name': 'APPLE-SA-2015-04-08-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204661'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1094?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1095 mean in the context of cybersecurity?

[Assistant] CVE-2015-1095


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1095.

[Assistant] IOHIDFamily in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 allows physically proximate attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted HID device.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1095?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204659'}, {'name': 'APPLE-SA-2015-04-08-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html'}, {'name': '1032048', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032048'}, {'name': 'APPLE-SA-2015-04-08-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204662'}, {'name': 'APPLE-SA-2015-04-08-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204661'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1095?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1096 mean in the context of cybersecurity?

[Assistant] CVE-2015-1096


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1096.

[Assistant] IOHIDFamily in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 allows attackers to obtain sensitive information about kernel memory via a crafted app.