Provide references for further information: Can you share references or external links related to CVE-2014-1235?

{'name': 'GLSA-201702-06', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201702-06'}, {'name': '[oss-security] 20140108 Re: CVE Request: graphviz: stack-based buffer overflow in yyerror()', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://seclists.org/oss-sec/2014/q1/54'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/ellson/graphviz/commit/d266bb2b4154d11c27252b56d86963aef4434750'}, {'name': 'graphviz-cve20141235-bo(90198)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/90198'}, {'name': '64736', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/64736'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1050871'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1235?


Explain the CVE ID: What does the identifier CVE-2014-1236 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1236.

Stack-based buffer overflow in the chkNum function in lib/cgraph/scan.l in Graphviz 2.34.0 allows remote attackers to have unspecified impact via vectors related to a "badly formed number" and a "long digit list."


Provide references for further information: Can you share references or external links related to CVE-2014-1236?

{'name': '[oss-security] 20140108 Re: Re: CVE Request: graphviz: stack-based buffer overflow in yyerror()', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://seclists.org/oss-sec/2014/q1/51'}, {'name': '101851', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/101851'}, {'name': 'MDVSA-2014:024', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2014:024'}, {'name': 'GLSA-201702-06', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201702-06'}, {'name': '[oss-security] 20140108 Re: CVE Request: graphviz: stack-based buffer overflow in yyerror()', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://seclists.org/oss-sec/2014/q1/54'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/ellson/graphviz/commit/1d1bdec6318746f6f19f245db589eddc887ae8ff'}, {'name': 'DSA-2843', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2014/dsa-2843'}, {'name': '[oss-security] 20140108 Re: Re: CVE Request: graphviz: stack-based buffer overflow in yyerror()', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://seclists.org/oss-sec/2014/q1/46'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1050872'}, {'name': '64737', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/64737'}, {'name': '55666', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/55666'}, {'name': '56244', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/56244'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1236?


Explain the CVE ID: What does the identifier CVE-2014-1237 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1237.

Cross-site scripting (XSS) vulnerability in synetics i-doit pro before 1.2.4 allows remote attackers to inject arbitrary web script or HTML via the call parameter.


Provide references for further information: Can you share references or external links related to CVE-2014-1237?

{'name': '56802', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/56802'}, {'name': '65353', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/65353'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.i-doit.com/en/company/news/single-news/?tx_ttnews%5Btt_news%5D=136'}, {'name': '56834', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/56834'}, {'name': '20140205 CVE-2014-1237 (XSS in i-doit Pro)', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2014/Feb/26'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.csnc.ch/misc/files/advisories/CVE-2014-1237_i-doit_Cross-site_Scripting_-_XSS.txt'}, {'name': '102910', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/102910'}, {'name': 'idoit-cve20141237-xss(90969)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/90969'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/125062'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1237?


Explain the CVE ID: What does the identifier CVE-2014-1238 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1238.

Cross-site scripting (XSS) vulnerability in ui/common/managedlistdialog.aspx in Gael Q-Pulse 0.6 and earlier.


Provide references for further information: Can you share references or external links related to CVE-2014-1238?

{'tags': ['x_refsource_MISC'], 'url': 'https://seclists.org/bugtraq/2014/Jan/41'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1238?


Explain the CVE ID: What does the identifier CVE-2014-1242 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1242.

Apple iTunes before 11.1.4 uses HTTP for the iTunes Tutorials window, which allows man-in-the-middle attackers to spoof content by gaining control over the client-server data stream.


Provide references for further information: Can you share references or external links related to CVE-2014-1242?

{'name': '65088', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/65088'}, {'name': '1029671', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1029671'}, {'name': '102410', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/102410'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT6001'}, {'name': 'apple-itunes-cve20141242-mitm(90653)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/90653'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1242?


Explain the CVE ID: What does the identifier CVE-2014-1243 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1243.

Apple QuickTime before 7.7.5 does not initialize an unspecified pointer, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted track list in a movie file.


Provide references for further information: Can you share references or external links related to CVE-2014-1243?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT6151'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1243?


Explain the CVE ID: What does the identifier CVE-2014-1244 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1244.

Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with H.264 encoding.


Provide references for further information: Can you share references or external links related to CVE-2014-1244?

{'name': '65786', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/65786'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT6151'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1244?


Explain the CVE ID: What does the identifier CVE-2014-1245 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1245.

Integer signedness error in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted stsz atom in a movie file.


Provide references for further information: Can you share references or external links related to CVE-2014-1245?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT6150'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT6151'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1245?


Explain the CVE ID: What does the identifier CVE-2014-1246 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1246.

Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted ftab atom in a movie file.


Provide references for further information: Can you share references or external links related to CVE-2014-1246?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1246?


Explain the CVE ID: What does the identifier CVE-2014-1247 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1247.

Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted dref atom in a movie file.


Provide references for further information: Can you share references or external links related to CVE-2014-1247?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1247?


Explain the CVE ID: What does the identifier CVE-2014-1248 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1248.

Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted ldat atom in a movie file.


Provide references for further information: Can you share references or external links related to CVE-2014-1248?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1248?


Explain the CVE ID: What does the identifier CVE-2014-1249 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1249.

Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PSD image.


Provide references for further information: Can you share references or external links related to CVE-2014-1249?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1249?


Explain the CVE ID: What does the identifier CVE-2014-1250 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1250.

Apple QuickTime before 7.7.5 does not properly perform a byte-swapping operation, which allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds memory access and application crash) via a crafted ttfo element in a movie file.


Provide references for further information: Can you share references or external links related to CVE-2014-1250?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1250?


Explain the CVE ID: What does the identifier CVE-2014-1251 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1251.

Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted clef atom in a movie file.


Provide references for further information: Can you share references or external links related to CVE-2014-1251?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT6151'}, {'name': '65787', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/65787'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1251?


Explain the CVE ID: What does the identifier CVE-2014-1252 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1252.

Double free vulnerability in Apple Pages 2.x before 2.1 and 5.x before 5.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Microsoft Word file.


Provide references for further information: Can you share references or external links related to CVE-2014-1252?

{'name': 'apple-pages-cve20141252-code-exec(90672)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/90672'}, {'name': '1029683', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1029683'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT6150'}, {'name': '56630', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/56630'}, {'name': '56615', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/56615'}, {'name': '65113', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/65113'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT6162'}, {'name': '102460', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/102460'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT6117'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1252?


Explain the CVE ID: What does the identifier CVE-2014-1253 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1253.

AppleMNT.sys in Apple Boot Camp 5 before 5.1 allows local users to cause a denial of service (kernel memory corruption) or possibly have unspecified other impact via a malformed header in a Portable Executable (PE) file.


Provide references for further information: Can you share references or external links related to CVE-2014-1253?

{'name': '103267', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/103267'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT6126'}, {'name': 'APPLE-SA-2014-02-11-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://seclists.org/bugtraq/2014/Feb/47'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1253?


Explain the CVE ID: What does the identifier CVE-2014-1254 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1254.

Apple Type Services (ATS) in Apple OS X before 10.9.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Type 1 font that is embedded in a document.


Provide references for further information: Can you share references or external links related to CVE-2014-1254?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT6150'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1254?


Explain the CVE ID: What does the identifier CVE-2014-1255 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1255.

Apple Type Services (ATS) in Apple OS X before 10.9.2 does not properly validate calls to the free function, which allows attackers to bypass the App Sandbox protection mechanism via crafted Mach messages.


Provide references for further information: Can you share references or external links related to CVE-2014-1255?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1255?


Explain the CVE ID: What does the identifier CVE-2014-1256 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1256.

Buffer overflow in Apple Type Services (ATS) in Apple OS X before 10.9.2 allows attackers to bypass the App Sandbox protection mechanism via crafted Mach messages.


Provide references for further information: Can you share references or external links related to CVE-2014-1256?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1256?


Explain the CVE ID: What does the identifier CVE-2014-1257 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1257.

CFNetwork in Apple OS X through 10.8.5 does not remove session cookies upon a Safari reset action, which allows physically proximate attackers to bypass intended access restrictions by leveraging an unattended workstation.


Provide references for further information: Can you share references or external links related to CVE-2014-1257?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1257?


Explain the CVE ID: What does the identifier CVE-2014-1258 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1258.

Heap-based buffer overflow in CoreAnimation in Apple OS X before 10.9.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted image.


Provide references for further information: Can you share references or external links related to CVE-2014-1258?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1258?


Explain the CVE ID: What does the identifier CVE-2014-1259 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1259.

Buffer overflow in File Bookmark in Apple OS X before 10.9.2 allows attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted filename.


Provide references for further information: Can you share references or external links related to CVE-2014-1259?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1259?


Explain the CVE ID: What does the identifier CVE-2014-1260 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1260.

QuickLook in Apple OS X through 10.8.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted Microsoft Office document.


Provide references for further information: Can you share references or external links related to CVE-2014-1260?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1260?


Explain the CVE ID: What does the identifier CVE-2014-1261 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1261.

Integer signedness error in CoreText in Apple OS X before 10.9.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Unicode font.


Provide references for further information: Can you share references or external links related to CVE-2014-1261?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1261?


Explain the CVE ID: What does the identifier CVE-2014-1262 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1262.

Apple Type Services (ATS) in Apple OS X before 10.9.2 allows attackers to bypass the App Sandbox protection mechanism via crafted Mach messages that trigger memory corruption.


Provide references for further information: Can you share references or external links related to CVE-2014-1262?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1262?


Explain the CVE ID: What does the identifier CVE-2014-1263 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1263.

curl and libcurl 7.27.0 through 7.35.0, when using the SecureTransport/Darwinssl backend, as used in in Apple OS X 10.9.x before 10.9.2, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate when accessing a URL that uses a numerical IP address, which allows man-in-the-middle attackers to spoof servers via an arbitrary valid certificate.


Provide references for further information: Can you share references or external links related to CVE-2014-1263?

{'tags': ['x_refsource_MISC'], 'url': 'https://gist.github.com/rmoriz/fb2b0a6a0ce10550ab73'}, {'name': '57836', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/57836'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT6150'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.getchef.com/blog/2014/04/09/chef-server-11-0-12-release/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://twitter.com/agl__/statuses/437029812046422016'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://curl.haxx.se/docs/adv_20140326C.html'}, {'name': '57968', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/57968'}, {'tags': ['x_refsource_MISC'], 'url': 'http://twitter.com/okoeroo/statuses/437272014043496449'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1-3-release/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.getchef.com/blog/2014/04/09/enterprise-chef-1-4-9-release/'}, {'name': '57966', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/57966'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1263?


Explain the CVE ID: What does the identifier CVE-2014-1264 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1264.

Finder in Apple OS X before 10.9.2 does not ensure ACL integrity after the viewing of file ACL information, which allows local users to bypass intended access restrictions in opportunistic circumstances via standard filesystem operations on a file with a damaged ACL.


Provide references for further information: Can you share references or external links related to CVE-2014-1264?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1264?


Explain the CVE ID: What does the identifier CVE-2014-1265 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1265.

The systemsetup program in the Date and Time subsystem in Apple OS X before 10.9.2 allows local users to bypass intended access restrictions by changing the current time on the system clock.


Provide references for further information: Can you share references or external links related to CVE-2014-1265?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1265?


Explain the CVE ID: What does the identifier CVE-2014-1266 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1266.

The SSLVerifySignedServerKeyExchange function in libsecurity_ssl/lib/sslKeyExchange.c in the Secure Transport feature in the Data Security component in Apple iOS 6.x before 6.1.6 and 7.x before 7.0.6, Apple TV 6.x before 6.0.2, and Apple OS X 10.9.x before 10.9.2 does not check the signature in a TLS Server Key Exchange message, which allows man-in-the-middle attackers to spoof SSL servers by (1) using an arbitrary private key for the signing step or (2) omitting the signing step.


Provide references for further information: Can you share references or external links related to CVE-2014-1266?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT6147'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT6148'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.cs.columbia.edu/~smb/blog/2014-02/2014-02-23.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT6150'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT6146'}, {'tags': ['x_refsource_MISC'], 'url': 'http://it.slashdot.org/comments.pl?sid=4821073&cid=46310187'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.cs.columbia.edu/~smb/blog/2014-02/2014-02-24.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.imperialviolet.org/2014/02/22/applebug.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://news.ycombinator.com/item?id=7281378'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1266?


Explain the CVE ID: What does the identifier CVE-2014-1267 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1267.

The Configuration Profiles component in Apple iOS before 7.1 and Apple TV before 6.1 does not properly evaluate the expiration date of a mobile configuration profile, which allows attackers to bypass intended access restrictions by using a profile after the date has passed.


Provide references for further information: Can you share references or external links related to CVE-2014-1267?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT6163'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT6162'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1267?


Explain the CVE ID: What does the identifier CVE-2014-1268 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1268.

WebKit, as used in Apple Safari before 6.1.2 and 7.x before 7.0.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2014-1269 and CVE-2014-1270.


Provide references for further information: Can you share references or external links related to CVE-2014-1268?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT6145'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/kb/HT6537'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1268?


Explain the CVE ID: What does the identifier CVE-2014-1269 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1269.

WebKit, as used in Apple Safari before 6.1.2 and 7.x before 7.0.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2014-1268 and CVE-2014-1270.


Provide references for further information: Can you share references or external links related to CVE-2014-1269?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT6145'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT6163'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/kb/HT6537'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT6162'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1269?


Explain the CVE ID: What does the identifier CVE-2014-1270 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1270.

WebKit, as used in Apple Safari before 6.1.2 and 7.x before 7.0.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2014-1268 and CVE-2014-1269.


Provide references for further information: Can you share references or external links related to CVE-2014-1270?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1270?


Explain the CVE ID: What does the identifier CVE-2014-1271 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1271.

CoreCapture in Apple iOS before 7.1 and Apple TV before 6.1 does not properly validate IOKit API calls, which allows attackers to cause a denial of service (assertion failure and device crash) via a crafted app.


Provide references for further information: Can you share references or external links related to CVE-2014-1271?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1271?


Explain the CVE ID: What does the identifier CVE-2014-1272 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1272.

CrashHouseKeeping in Crash Reporting in Apple iOS before 7.1 and Apple TV before 6.1 allows local users to change arbitrary file permissions by leveraging a symlink.


Provide references for further information: Can you share references or external links related to CVE-2014-1272?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1272?


Explain the CVE ID: What does the identifier CVE-2014-1273 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1273.

dyld in Apple iOS before 7.1 and Apple TV before 6.1 allows attackers to bypass code-signing requirements by leveraging use of text-relocation instructions in a dynamic library.


Provide references for further information: Can you share references or external links related to CVE-2014-1273?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1273?


Explain the CVE ID: What does the identifier CVE-2014-1274 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1274.

FaceTime in Apple iOS before 7.1 allows physically proximate attackers to obtain sensitive FaceTime contact information by using the lock screen for an invalid FaceTime call.


Provide references for further information: Can you share references or external links related to CVE-2014-1274?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT6162'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1274?


Explain the CVE ID: What does the identifier CVE-2014-1275 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1275.

Buffer overflow in ImageIO in Apple iOS before 7.1 and Apple TV before 6.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted JPEG2000 data in a PDF document.


Provide references for further information: Can you share references or external links related to CVE-2014-1275?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1275?


Explain the CVE ID: What does the identifier CVE-2014-1276 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1276.

IOKit HID Event in Apple iOS before 7.1 allows attackers to conduct user-action monitoring attacks against arbitrary apps via a crafted app that accesses an IOKit framework interface.


Provide references for further information: Can you share references or external links related to CVE-2014-1276?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1276?


Explain the CVE ID: What does the identifier CVE-2014-1277 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1277.


Provide references for further information: Can you share references or external links related to CVE-2014-1277?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1277?


Explain the CVE ID: What does the identifier CVE-2014-1278 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1278.

The ptmx_get_ioctl function in the ARM kernel in Apple iOS before 7.1 and Apple TV before 6.1 allows local users to gain privileges or cause a denial of service (out-of-bounds memory access and device crash) via a crafted call.


Provide references for further information: Can you share references or external links related to CVE-2014-1278?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1278?


Explain the CVE ID: What does the identifier CVE-2014-1279 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1279.

Apple TV before 6.1 does not properly restrict logging, which allows local users to obtain sensitive information by reading log data.


Provide references for further information: Can you share references or external links related to CVE-2014-1279?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT6163'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1279?


Explain the CVE ID: What does the identifier CVE-2014-1280 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1280.

Video Driver in Apple iOS before 7.1 and Apple TV before 6.1 allows remote attackers to cause a denial of service (NULL pointer dereference and device hang) via a crafted video file with MPEG-4 encoding.


Provide references for further information: Can you share references or external links related to CVE-2014-1280?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT6163'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT6162'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1280?


Explain the CVE ID: What does the identifier CVE-2014-1281 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1281.

Photos Backend in Apple iOS before 7.1 does not properly manage the asset-library cache during deletions, which allows physically proximate attackers to obtain sensitive photo data by launching the Photos app and looking under a transparent image.


Provide references for further information: Can you share references or external links related to CVE-2014-1281?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1281?


Explain the CVE ID: What does the identifier CVE-2014-1282 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1282.

The Profiles component in Apple iOS before 7.1 and Apple TV before 6.1 allows attackers to bypass intended configuration-profile visibility requirements via a long name.


Provide references for further information: Can you share references or external links related to CVE-2014-1282?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1282?


Explain the CVE ID: What does the identifier CVE-2014-1283 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1283.


Provide references for further information: Can you share references or external links related to CVE-2014-1283?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1283?


Explain the CVE ID: What does the identifier CVE-2014-1284 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1284.


Provide references for further information: Can you share references or external links related to CVE-2014-1284?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1284?


Explain the CVE ID: What does the identifier CVE-2014-1285 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1285.

Springboard in Apple iOS before 7.1 allows physically proximate attackers to bypass intended access restrictions and read the home screen by leveraging an application crash during activation of an unactivated device.


Provide references for further information: Can you share references or external links related to CVE-2014-1285?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1285?


Explain the CVE ID: What does the identifier CVE-2014-1286 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1286.

SpringBoard Lock Screen in Apple iOS before 7.1 allows remote attackers to cause a denial of service (lock-screen hang) by leveraging a state-management error.


Provide references for further information: Can you share references or external links related to CVE-2014-1286?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1286?


Explain the CVE ID: What does the identifier CVE-2014-1287 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1287.

USB Host in Apple iOS before 7.1 and Apple TV before 6.1 allows physically proximate attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted USB messages.


Provide references for further information: Can you share references or external links related to CVE-2014-1287?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1287?


Explain the CVE ID: What does the identifier CVE-2014-1288 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1288.


Provide references for further information: Can you share references or external links related to CVE-2014-1288?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1288?


Explain the CVE ID: What does the identifier CVE-2014-1289 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1289.

WebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2014-1290, CVE-2014-1291, CVE-2014-1292, CVE-2014-1293, and CVE-2014-1294.


Provide references for further information: Can you share references or external links related to CVE-2014-1289?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT6163'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/kb/HT6537'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT6162'}, {'name': 'APPLE-SA-2014-04-01-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2014-04/0009.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1289?


Explain the CVE ID: What does the identifier CVE-2014-1290 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1290.

WebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2014-1289, CVE-2014-1291, CVE-2014-1292, CVE-2014-1293, and CVE-2014-1294.


Provide references for further information: Can you share references or external links related to CVE-2014-1290?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1290?


Explain the CVE ID: What does the identifier CVE-2014-1291 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1291.

WebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2014-1289, CVE-2014-1290, CVE-2014-1292, CVE-2014-1293, and CVE-2014-1294.


Provide references for further information: Can you share references or external links related to CVE-2014-1291?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1291?


Explain the CVE ID: What does the identifier CVE-2014-1292 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1292.

WebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2014-1289, CVE-2014-1290, CVE-2014-1291, CVE-2014-1293, and CVE-2014-1294.


Provide references for further information: Can you share references or external links related to CVE-2014-1292?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1292?


Explain the CVE ID: What does the identifier CVE-2014-1293 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1293.

WebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2014-1289, CVE-2014-1290, CVE-2014-1291, CVE-2014-1292, and CVE-2014-1294.


Provide references for further information: Can you share references or external links related to CVE-2014-1293?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1293?


Explain the CVE ID: What does the identifier CVE-2014-1294 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1294.

WebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2014-1289, CVE-2014-1290, CVE-2014-1291, CVE-2014-1292, and CVE-2014-1293.


Provide references for further information: Can you share references or external links related to CVE-2014-1294?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1294?


Explain the CVE ID: What does the identifier CVE-2014-1295 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1295.

Secure Transport in Apple iOS before 7.1.1, Apple OS X 10.8.x and 10.9.x through 10.9.2, and Apple TV before 6.1.1 does not ensure that a server's X.509 certificate is the same during renegotiation as it was before renegotiation, which allows man-in-the-middle attackers to obtain sensitive information or modify TLS session data via a "triple handshake attack."


Provide references for further information: Can you share references or external links related to CVE-2014-1295?

{'name': 'APPLE-SA-2014-04-22-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2014-04/0134.html'}, {'name': 'APPLE-SA-2014-04-22-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2014-04/0136.html'}, {'name': 'APPLE-SA-2014-04-22-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2014-04/0135.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://secure-resumption.com/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1295?


Explain the CVE ID: What does the identifier CVE-2014-1296 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1296.

CFNetwork in Apple iOS before 7.1.1, Apple OS X through 10.9.2, and Apple TV before 6.1.1 does not ensure that a Set-Cookie HTTP header is complete before interpreting the header's value, which allows remote attackers to bypass intended access restrictions by triggering the closing of a TCP connection during transmission of a header, as demonstrated by an HTTPOnly restriction.


Provide references for further information: Can you share references or external links related to CVE-2014-1296?

{'name': 'APPLE-SA-2014-04-22-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2014-04/0134.html'}, {'name': 'APPLE-SA-2014-04-22-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2014-04/0136.html'}, {'name': 'APPLE-SA-2014-04-22-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2014-04/0135.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1296?


Explain the CVE ID: What does the identifier CVE-2014-1297 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1297.

WebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, does not properly validate WebProcess IPC messages, which allows remote attackers to bypass a sandbox protection mechanism and read arbitrary files by leveraging WebProcess access.


Provide references for further information: Can you share references or external links related to CVE-2014-1297?

{'name': 'APPLE-SA-2014-04-01-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2014-04/0009.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1297?


Explain the CVE ID: What does the identifier CVE-2014-1298 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1298.

WebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-04-01-1.


Provide references for further information: Can you share references or external links related to CVE-2014-1298?

{'name': 'APPLE-SA-2014-04-22-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2014-04/0136.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/kb/HT6537'}, {'name': 'APPLE-SA-2014-04-22-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2014-04/0135.html'}, {'name': 'APPLE-SA-2014-04-01-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2014-04/0009.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1298?


Explain the CVE ID: What does the identifier CVE-2014-1299 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1299.


Provide references for further information: Can you share references or external links related to CVE-2014-1299?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1299?


Explain the CVE ID: What does the identifier CVE-2014-1300 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1300.

Unspecified vulnerability in Apple Safari 7.0.2 on OS X allows remote attackers to execute arbitrary code with root privileges via unknown vectors, as demonstrated by Google during a Pwn4Fun competition at CanSecWest 2014.


Provide references for further information: Can you share references or external links related to CVE-2014-1300?

{'tags': ['x_refsource_MISC'], 'url': 'http://twitter.com/thezdi/statuses/443796547872903168'}, {'name': 'APPLE-SA-2014-04-22-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2014-04/0136.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/kb/HT6537'}, {'name': 'APPLE-SA-2014-04-22-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2014-04/0135.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.pwn2own.com/2014/03/pwn2own-results-for-wednesday-day-one/'}, {'name': 'APPLE-SA-2014-04-01-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2014-04/0009.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1300?


Explain the CVE ID: What does the identifier CVE-2014-1301 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1301.


Provide references for further information: Can you share references or external links related to CVE-2014-1301?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/kb/HT6537'}, {'name': 'APPLE-SA-2014-04-01-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2014-04/0009.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1301?


Explain the CVE ID: What does the identifier CVE-2014-1302 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1302.


Provide references for further information: Can you share references or external links related to CVE-2014-1302?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1302?


Explain the CVE ID: What does the identifier CVE-2014-1303 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1303.

Heap-based buffer overflow in Apple Safari 7.0.2 allows remote attackers to execute arbitrary code and bypass a sandbox protection mechanism via unspecified vectors, as demonstrated by Liang Chen during a Pwn2Own competition at CanSecWest 2014.


Provide references for further information: Can you share references or external links related to CVE-2014-1303?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.pwn2own.com/2014/03/pwn2own-results-thursday-day-two/'}, {'name': 'APPLE-SA-2014-04-22-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2014-04/0136.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/kb/HT6537'}, {'name': 'APPLE-SA-2014-04-22-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2014-04/0135.html'}, {'name': 'APPLE-SA-2014-04-01-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2014-04/0009.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://twitter.com/thezdi/statuses/444157530139136000'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1303?


Explain the CVE ID: What does the identifier CVE-2014-1304 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1304.


Provide references for further information: Can you share references or external links related to CVE-2014-1304?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1304?


Explain the CVE ID: What does the identifier CVE-2014-1305 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1305.


Provide references for further information: Can you share references or external links related to CVE-2014-1305?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1305?


Explain the CVE ID: What does the identifier CVE-2014-1306 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1306.


Provide references for further information: Can you share references or external links related to CVE-2014-1306?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1306?


Explain the CVE ID: What does the identifier CVE-2014-1307 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1307.


Provide references for further information: Can you share references or external links related to CVE-2014-1307?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1307?


Explain the CVE ID: What does the identifier CVE-2014-1308 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1308.


Provide references for further information: Can you share references or external links related to CVE-2014-1308?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1308?


Explain the CVE ID: What does the identifier CVE-2014-1309 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1309.


Provide references for further information: Can you share references or external links related to CVE-2014-1309?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1309?


Explain the CVE ID: What does the identifier CVE-2014-1310 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1310.


Provide references for further information: Can you share references or external links related to CVE-2014-1310?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1310?


Explain the CVE ID: What does the identifier CVE-2014-1311 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1311.


Provide references for further information: Can you share references or external links related to CVE-2014-1311?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1311?


Explain the CVE ID: What does the identifier CVE-2014-1312 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1312.


Provide references for further information: Can you share references or external links related to CVE-2014-1312?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1312?


Explain the CVE ID: What does the identifier CVE-2014-1313 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1313.


Provide references for further information: Can you share references or external links related to CVE-2014-1313?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1313?


Explain the CVE ID: What does the identifier CVE-2014-1314 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1314.

WindowServer in Apple OS X through 10.9.2 does not prevent session creation by a sandboxed application, which allows attackers to bypass the sandbox protection mechanism and execute arbitrary code via a crafted application.


Provide references for further information: Can you share references or external links related to CVE-2014-1314?

{'name': 'APPLE-SA-2014-04-22-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2014-04/0134.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1314?


Explain the CVE ID: What does the identifier CVE-2014-1315 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1315.

Format string vulnerability in CoreServicesUIAgent in Apple OS X 10.9.x through 10.9.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via format string specifiers in a URL.


Provide references for further information: Can you share references or external links related to CVE-2014-1315?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1315?


Explain the CVE ID: What does the identifier CVE-2014-1316 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1316.

Heimdal, as used in Apple OS X through 10.9.2, allows remote attackers to cause a denial of service (abort and daemon exit) via ASN.1 data encountered in the Kerberos 5 protocol.


Provide references for further information: Can you share references or external links related to CVE-2014-1316?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1316?


Explain the CVE ID: What does the identifier CVE-2014-1317 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1317.

iBooks Commerce in Apple OS X before 10.9.4 places Apple ID credentials in the iBooks log, which allows local users to obtain sensitive information by reading this file.


Provide references for further information: Can you share references or external links related to CVE-2014-1317?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT6296'}, {'name': '1030505', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1030505'}, {'name': 'APPLE-SA-2014-06-30-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2014-06/0172.html'}, {'name': '59475', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/59475'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1317?


Explain the CVE ID: What does the identifier CVE-2014-1318 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1318.

The Intel Graphics Driver in Apple OS X through 10.9.2 does not properly validate a certain pointer, which allows attackers to execute arbitrary code via a crafted application.


Provide references for further information: Can you share references or external links related to CVE-2014-1318?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1318?


Explain the CVE ID: What does the identifier CVE-2014-1319 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1319.

Buffer overflow in ImageIO in Apple OS X 10.9.x through 10.9.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted JPEG image.


Provide references for further information: Can you share references or external links related to CVE-2014-1319?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1319?


Explain the CVE ID: What does the identifier CVE-2014-1320 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1320.

IOKit in Apple iOS before 7.1.1, Apple OS X through 10.9.2, and Apple TV before 6.1.1 places kernel pointers into an object data structure, which makes it easier for local users to bypass the ASLR protection mechanism by reading unspecified attributes of the object.


Provide references for further information: Can you share references or external links related to CVE-2014-1320?

{'name': 'APPLE-SA-2014-04-22-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2014-04/0134.html'}, {'name': 'APPLE-SA-2014-04-22-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2014-04/0136.html'}, {'name': 'APPLE-SA-2014-04-22-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2014-04/0135.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1320?


Explain the CVE ID: What does the identifier CVE-2014-1321 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1321.

Power Management in Apple OS X 10.9.x through 10.9.2 allows physically proximate attackers to bypass an intended transition into the locked-screen state by touching (1) a key or (2) the trackpad during a lid-close action.


Provide references for further information: Can you share references or external links related to CVE-2014-1321?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1321?


Explain the CVE ID: What does the identifier CVE-2014-1322 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1322.

The kernel in Apple OS X through 10.9.2 places a kernel pointer into an XNU object data structure accessible from user space, which makes it easier for local users to bypass the ASLR protection mechanism by reading an unspecified attribute of the object.


Provide references for further information: Can you share references or external links related to CVE-2014-1322?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1322?


Explain the CVE ID: What does the identifier CVE-2014-1323 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1323.

WebKit, as used in Apple Safari before 6.1.4 and 7.x before 7.0.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-05-21-1.


Provide references for further information: Can you share references or external links related to CVE-2014-1323?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/kb/HT6537'}, {'name': 'APPLE-SA-2014-06-30-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2014-06/0175.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT6254'}, {'name': 'APPLE-SA-2014-06-30-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2014-06/0174.html'}, {'name': '67553', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/67553'}, {'name': 'APPLE-SA-2014-05-21-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2014-05/0128.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1323?


Explain the CVE ID: What does the identifier CVE-2014-1324 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1324.


Provide references for further information: Can you share references or external links related to CVE-2014-1324?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/kb/HT6537'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT6254'}, {'name': '67553', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/67553'}, {'name': 'APPLE-SA-2014-05-21-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2014-05/0128.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1324?


Explain the CVE ID: What does the identifier CVE-2014-1325 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1325.

WebKit, as used in Apple iOS before 7.1.2, Apple Safari before 6.1.5 and 7.x before 7.0.5, and Apple TV before 6.1.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-06-30-1, APPLE-SA-2014-06-30-3, and APPLE-SA-2014-06-30-4.


Provide references for further information: Can you share references or external links related to CVE-2014-1325?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/kb/HT6537'}, {'name': 'APPLE-SA-2014-06-30-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2014-06/0175.html'}, {'name': 'APPLE-SA-2014-06-30-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2014-06/0174.html'}, {'name': '59481', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/59481'}, {'name': '1030495', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1030495'}, {'name': 'APPLE-SA-2014-06-30-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2014-06/0171.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1325?


Explain the CVE ID: What does the identifier CVE-2014-1326 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1326.


Provide references for further information: Can you share references or external links related to CVE-2014-1326?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1326?


Explain the CVE ID: What does the identifier CVE-2014-1327 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1327.


Provide references for further information: Can you share references or external links related to CVE-2014-1327?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1327?


Explain the CVE ID: What does the identifier CVE-2014-1328 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1328.


Provide references for further information: Can you share references or external links related to CVE-2014-1328?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1328?


Explain the CVE ID: What does the identifier CVE-2014-1329 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1329.


Provide references for further information: Can you share references or external links related to CVE-2014-1329?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1329?


Explain the CVE ID: What does the identifier CVE-2014-1330 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1330.


Provide references for further information: Can you share references or external links related to CVE-2014-1330?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1330?


Explain the CVE ID: What does the identifier CVE-2014-1331 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1331.


Provide references for further information: Can you share references or external links related to CVE-2014-1331?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1331?


Explain the CVE ID: What does the identifier CVE-2014-1332 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1332.


Provide references for further information: Can you share references or external links related to CVE-2014-1332?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1332?


Explain the CVE ID: What does the identifier CVE-2014-1333 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1333.


Provide references for further information: Can you share references or external links related to CVE-2014-1333?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1333?


Explain the CVE ID: What does the identifier CVE-2014-1334 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1334.


Provide references for further information: Can you share references or external links related to CVE-2014-1334?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1334?


Explain the CVE ID: What does the identifier CVE-2014-1335 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1335.


Provide references for further information: Can you share references or external links related to CVE-2014-1335?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1335?


Explain the CVE ID: What does the identifier CVE-2014-1336 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1336.


Provide references for further information: Can you share references or external links related to CVE-2014-1336?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1336?


Explain the CVE ID: What does the identifier CVE-2014-1337 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1337.


Provide references for further information: Can you share references or external links related to CVE-2014-1337?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1337?


Explain the CVE ID: What does the identifier CVE-2014-1338 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1338.


Provide references for further information: Can you share references or external links related to CVE-2014-1338?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1338?


Explain the CVE ID: What does the identifier CVE-2014-1339 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1339.


Provide references for further information: Can you share references or external links related to CVE-2014-1339?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1339?


Explain the CVE ID: What does the identifier CVE-2014-1340 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1340.

WebKit, as used in Apple Safari before 6.1.5 and 7.x before 7.0.5, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-06-30-1.


Provide references for further information: Can you share references or external links related to CVE-2014-1340?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/kb/HT6537'}, {'name': '59481', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/59481'}, {'name': '1030495', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1030495'}, {'name': 'APPLE-SA-2014-06-30-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2014-06/0171.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1340?


Explain the CVE ID: What does the identifier CVE-2014-1341 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1341.


Provide references for further information: Can you share references or external links related to CVE-2014-1341?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1341?


Explain the CVE ID: What does the identifier CVE-2014-1342 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1342.


Provide references for further information: Can you share references or external links related to CVE-2014-1342?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1342?


Explain the CVE ID: What does the identifier CVE-2014-1343 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1343.


Provide references for further information: Can you share references or external links related to CVE-2014-1343?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1343?


Explain the CVE ID: What does the identifier CVE-2014-1344 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1344.


Provide references for further information: Can you share references or external links related to CVE-2014-1344?

{'name': 'GLSA-201601-02', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201601-02'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/kb/HT6537'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT6254'}, {'name': '67553', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/67553'}, {'name': 'APPLE-SA-2014-05-21-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2014-05/0128.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1344?


Explain the CVE ID: What does the identifier CVE-2014-1345 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1345.

WebKit in Apple iOS before 7.1.2 and Apple Safari before 6.1.5 and 7.x before 7.0.5 does not properly encode domain names in URLs, which allows remote attackers to spoof the address bar via a crafted web site.


Provide references for further information: Can you share references or external links related to CVE-2014-1345?

{'name': '68276', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/68276'}, {'name': 'APPLE-SA-2014-06-30-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2014-06/0174.html'}, {'name': '59481', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/59481'}, {'name': '1030495', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1030495'}, {'name': 'APPLE-SA-2014-06-30-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2014-06/0171.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1345?


Explain the CVE ID: What does the identifier CVE-2014-1346 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1346.

WebKit, as used in Apple Safari before 6.1.4 and 7.x before 7.0.4, does not properly interpret Unicode encoding, which allows remote attackers to spoof a postMessage origin, and bypass intended restrictions on sending a message to a connected frame or window, via crafted characters in a URL.


Provide references for further information: Can you share references or external links related to CVE-2014-1346?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT6254'}, {'name': 'APPLE-SA-2014-06-30-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2014-06/0174.html'}, {'name': 'APPLE-SA-2014-05-21-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2014-05/0128.html'}, {'name': '67554', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/67554'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1346?


Explain the CVE ID: What does the identifier CVE-2014-1347 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1347.

Apple iTunes before 11.2.1 on OS X sets world-writable permissions for /Users and /Users/Shared during reboots, which allows local users to modify files, and consequently obtain access to arbitrary user accounts, via standard filesystem operations.


Provide references for further information: Can you share references or external links related to CVE-2014-1347?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT6251'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1347?


Explain the CVE ID: What does the identifier CVE-2014-1348 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1348.

Mail in Apple iOS before 7.1.2 advertises the availability of data protection for attachments but stores cleartext attachments under mobile/Library/Mail/, which makes it easier for physically proximate attackers to obtain sensitive information by mounting the data partition.


Provide references for further information: Can you share references or external links related to CVE-2014-1348?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.andreas-kurtz.de/2014/04/what-apple-missed-to-fix-in-ios-711.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT6441'}, {'name': '68276', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/68276'}, {'name': 'APPLE-SA-2014-06-30-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2014-06/0174.html'}, {'name': '67263', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/67263'}, {'name': 'APPLE-SA-2014-09-17-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html'}, {'name': '1030500', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1030500'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1348?


Explain the CVE ID: What does the identifier CVE-2014-1349 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1349.

Use-after-free vulnerability in Safari in Apple iOS before 7.1.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an invalid URL.


Provide references for further information: Can you share references or external links related to CVE-2014-1349?

{'name': '68276', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/68276'}, {'name': 'APPLE-SA-2014-06-30-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2014-06/0174.html'}, {'name': '1030500', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1030500'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1349?


Explain the CVE ID: What does the identifier CVE-2014-1350 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1350.

Settings in Apple iOS before 7.1.2 allows physically proximate attackers to bypass an intended iCloud password requirement, and turn off the Find My iPhone service, by leveraging incorrect state management.


Provide references for further information: Can you share references or external links related to CVE-2014-1350?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1350?


Explain the CVE ID: What does the identifier CVE-2014-1351 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1351.

Siri in Apple iOS before 7.1.2 allows physically proximate attackers to bypass an intended lock-screen passcode requirement, and read a contact list, via a Siri request that refers to a contact ambiguously.


Provide references for further information: Can you share references or external links related to CVE-2014-1351?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1351?


Explain the CVE ID: What does the identifier CVE-2014-1352 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1352.

Lock Screen in Apple iOS before 7.1.2 does not properly enforce the limit on failed passcode attempts, which makes it easier for physically proximate attackers to conduct brute-force passcode-guessing attacks via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2014-1352?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1352?


Explain the CVE ID: What does the identifier CVE-2014-1353 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1353.

Lock Screen in Apple iOS before 7.1.2 does not properly manage the telephony state in Airplane Mode, which allows physically proximate attackers to bypass the lock protection mechanism, and access a certain foreground application, via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2014-1353?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1353?


Explain the CVE ID: What does the identifier CVE-2014-1354 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1354.

CoreGraphics in Apple iOS before 7.1.2 does not properly restrict allocation of stack memory for processing of XBM images, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted image data.


Provide references for further information: Can you share references or external links related to CVE-2014-1354?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1354?


Explain the CVE ID: What does the identifier CVE-2014-1355 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1355.

The IOKit implementation in the kernel in Apple iOS before 7.1.2 and Apple TV before 6.1.2, and in IOReporting in Apple OS X before 10.9.4, allows local users to cause a denial of service (NULL pointer dereference and reboot) via crafted API arguments.


Provide references for further information: Can you share references or external links related to CVE-2014-1355?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT6296'}, {'name': 'APPLE-SA-2014-06-30-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2014-06/0172.html'}, {'name': 'APPLE-SA-2014-06-30-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2014-06/0175.html'}, {'name': 'APPLE-SA-2014-06-30-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2014-06/0174.html'}, {'name': '59475', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/59475'}, {'name': '1030500', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1030500'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1355?


Explain the CVE ID: What does the identifier CVE-2014-1356 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1356.

Heap-based buffer overflow in launchd in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and Apple TV before 6.1.2 allows attackers to execute arbitrary code via a crafted application that sends IPC messages.


Provide references for further information: Can you share references or external links related to CVE-2014-1356?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1356?


Explain the CVE ID: What does the identifier CVE-2014-1357 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1357.

Heap-based buffer overflow in launchd in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and Apple TV before 6.1.2 allows attackers to execute arbitrary code via a crafted application that generates log messages.


Provide references for further information: Can you share references or external links related to CVE-2014-1357?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1357?


Explain the CVE ID: What does the identifier CVE-2014-1358 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1358.

Integer overflow in launchd in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and Apple TV before 6.1.2 allows attackers to execute arbitrary code via a crafted application.


Provide references for further information: Can you share references or external links related to CVE-2014-1358?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1358?


Explain the CVE ID: What does the identifier CVE-2014-1359 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1359.

Integer underflow in launchd in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and Apple TV before 6.1.2 allows attackers to execute arbitrary code via a crafted application.


Provide references for further information: Can you share references or external links related to CVE-2014-1359?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT6296'}, {'name': 'APPLE-SA-2014-06-30-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2014-06/0172.html'}, {'name': 'APPLE-SA-2014-06-30-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2014-06/0175.html'}, {'name': 'APPLE-SA-2014-06-30-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2014-06/0174.html'}, {'name': '59475', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/59475'}, {'name': '1030500', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1030500'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/167630/launchd-Heap-Corruption.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1359?


Explain the CVE ID: What does the identifier CVE-2014-1360 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1360.

Lockdown in Apple iOS before 7.1.2 does not properly verify data from activation servers, which makes it easier for physically proximate attackers to bypass the Activation Lock protection mechanism via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2014-1360?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT6441'}, {'name': '68276', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/68276'}, {'name': 'APPLE-SA-2014-06-30-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2014-06/0174.html'}, {'name': 'APPLE-SA-2014-09-17-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html'}, {'name': '1030500', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1030500'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1360?


Explain the CVE ID: What does the identifier CVE-2014-1361 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1361.

Secure Transport in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and Apple TV before 6.1.2 does not ensure that a DTLS message is accepted only for a DTLS connection, which allows remote attackers to obtain potentially sensitive information from uninitialized process memory by providing a DTLS message within a TLS connection.


Provide references for further information: Can you share references or external links related to CVE-2014-1361?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1361?


Explain the CVE ID: What does the identifier CVE-2014-1362 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1362.

WebKit, as used in Apple iOS before 7.1.2, Apple Safari before 6.1.5 and 7.x before 7.0.5, and Apple TV before 6.1.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-06-30-1, APPLE-SA-2014-06-30-3, and APPLE-SA-2014-06-30-4.


Provide references for further information: Can you share references or external links related to CVE-2014-1362?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/kb/HT6537'}, {'name': 'APPLE-SA-2014-06-30-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2014-06/0175.html'}, {'name': 'APPLE-SA-2014-06-30-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2014-06/0174.html'}, {'name': '59481', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/59481'}, {'name': '1030495', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1030495'}, {'name': 'APPLE-SA-2014-06-30-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2014-06/0171.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1362?


Explain the CVE ID: What does the identifier CVE-2014-1363 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1363.


Provide references for further information: Can you share references or external links related to CVE-2014-1363?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1363?


Explain the CVE ID: What does the identifier CVE-2014-1364 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1364.


Provide references for further information: Can you share references or external links related to CVE-2014-1364?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1364?


Explain the CVE ID: What does the identifier CVE-2014-1365 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1365.


Provide references for further information: Can you share references or external links related to CVE-2014-1365?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1365?


Explain the CVE ID: What does the identifier CVE-2014-1366 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1366.


Provide references for further information: Can you share references or external links related to CVE-2014-1366?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1366?


Explain the CVE ID: What does the identifier CVE-2014-1367 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1367.


Provide references for further information: Can you share references or external links related to CVE-2014-1367?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1367?


Explain the CVE ID: What does the identifier CVE-2014-1368 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1368.


Provide references for further information: Can you share references or external links related to CVE-2014-1368?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1368?


Explain the CVE ID: What does the identifier CVE-2014-1369 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1369.

WebKit in Apple Safari before 6.1.5 and 7.x before 7.0.5 allows user-assisted remote attackers to access file: URLs by leveraging a URL drag operation that originates at a crafted web site.


Provide references for further information: Can you share references or external links related to CVE-2014-1369?

{'name': '1030495', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1030495'}, {'name': 'APPLE-SA-2014-06-30-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2014-06/0171.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1369?


Explain the CVE ID: What does the identifier CVE-2014-1370 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1370.

The byte-swapping implementation in copyfile in Apple OS X before 10.9.4 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds memory access and application crash) via a crafted AppleDouble file in a ZIP archive.


Provide references for further information: Can you share references or external links related to CVE-2014-1370?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT6296'}, {'name': '1030505', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1030505'}, {'name': 'APPLE-SA-2014-06-30-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2014-06/0172.html'}, {'name': '20141210 Apple Mac OS X Archive Utility Heap Memory Corruption Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'https://www.verisign.com/en_US/security-services/security-intelligence/vulnerability-reports/articles/index.xhtml?id=1087'}, {'name': '59475', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/59475'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1370?


Explain the CVE ID: What does the identifier CVE-2014-1371 mean in the context of cybersecurity?