[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2016-4738":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-05T08:55:32.481Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":68,"aliases":69,"duplicate_of":9,"upstream":70,"downstream":71,"duplicates":100,"related":101,"reserved_at":9,"published_at":111,"modified_at":112,"state":113,"summary":114,"references_raw":123,"kevs":183,"epss":184,"epss_history":187,"metrics":438,"affected":449},"CVE-2016-4738","libxslt in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-119","Improper Restriction of Operations within the Bounds of a Memory Buffer","The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.","weakness","Stable","Class","High",[20,24,28,32,36,40,44,48,52,56,60,64],{"id":21,"name":22,"techniques":23},"CAPEC-10","Buffer Overflow via Environment Variables",[],{"id":25,"name":26,"techniques":27},"CAPEC-100","Overflow Buffers",[],{"id":29,"name":30,"techniques":31},"CAPEC-123","Buffer Manipulation",[],{"id":33,"name":34,"techniques":35},"CAPEC-14","Client-side Injection-induced Buffer Overflow",[],{"id":37,"name":38,"techniques":39},"CAPEC-24","Filter Failure through Buffer Overflow",[],{"id":41,"name":42,"techniques":43},"CAPEC-42","MIME Conversion",[],{"id":45,"name":46,"techniques":47},"CAPEC-44","Overflow Binary Resource File",[],{"id":49,"name":50,"techniques":51},"CAPEC-45","Buffer Overflow via Symbolic Links",[],{"id":53,"name":54,"techniques":55},"CAPEC-46","Overflow Variables and Tags",[],{"id":57,"name":58,"techniques":59},"CAPEC-47","Buffer Overflow via Parameter Expansion",[],{"id":61,"name":62,"techniques":63},"CAPEC-8","Buffer Overflow in an API Call",[],{"id":65,"name":66,"techniques":67},"CAPEC-9","Buffer Overflow in Local Command-Line Utilities",[],[],[],[],[72,74,76,78,80,82,84,86,88,90,92,94,96,98],{"_key":73},"SUSE-SU-2017:1282-1",{"_key":75},"SUSE-SU-2017:1313-1",{"_key":77},"OPENSUSE-SU-2024:11017-1",{"_key":79},"OPENSUSE-SU-2024:11912-1",{"_key":81},"OPENSUSE-SU-2024:13165-1",{"_key":83},"OPENSUSE-SU-2024:14174-1",{"_key":85},"OPENSUSE-SU-2025:14697-1",{"_key":87},"DLA-700-1",{"_key":89},"DSA-3709-1",{"_key":91},"OPENSUSE-SU-2026:10356-1",{"_key":93},"MGASA-2016-0394",{"_key":95},"UBUNTU-CVE-2016-4738",{"_key":97},"USN-3271-1",{"_key":99},"DEBIAN-CVE-2016-4738",[],[102,103,104,105,106,107,108,109,110],{"_key":73},{"_key":75},{"_key":77},{"_key":79},{"_key":81},{"_key":83},{"_key":85},{"_key":91},{"_key":93},"2016-09-25T10:00:00.000Z","2024-08-06T00:39:26.080Z","Modified",{"cisa_kev":115,"cisa_ransomware":115,"cisa_vendor":9,"epss_severity":116,"epss_score":117,"severity":118,"severity_score":119,"severity_version":120,"severity_source":121,"severity_vector":122,"severity_status":113},false,"low",0.05928,"high",9.3,"v2.0","nvd","AV:N/AC:M/Au:N/C:C/I:C/A:C",[124,131,138,144,148,152,156,161,165,170,174,178],{"url":125,"sources":126,"tags":128},"https://support.apple.com/HT207141",[127,121],"cve.org",[129,130],"X Refsource CONFIRM","Vendor Advisory",{"url":132,"sources":133,"tags":134},"http://www.securitytracker.com/id/1036858",[127,121],[135,136,137],"VDB Entry","X Refsource SECTRACK","Third Party Advisory",{"url":139,"sources":140,"tags":141},"http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html",[127,121],[130,142,143],"X Refsource APPLE","Mailing List",{"url":145,"sources":146,"tags":147},"http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html",[127,121],[130,142,143],{"url":149,"sources":150,"tags":151},"http://lists.apple.com/archives/security-announce/2016/Sep/msg00010.html",[127,121],[130,142,143],{"url":153,"sources":154,"tags":155},"http://lists.apple.com/archives/security-announce/2016/Sep/msg00011.html",[127,121],[130,142,143],{"url":157,"sources":158,"tags":159},"http://www.securityfocus.com/bid/93054",[127,121],[135,160,137],"X Refsource BID",{"url":162,"sources":163,"tags":164},"https://support.apple.com/HT207170",[127,121],[129,130],{"url":166,"sources":167,"tags":168},"http://www.debian.org/security/2016/dsa-3709",[127,121],[130,169,137],"X Refsource DEBIAN",{"url":171,"sources":172,"tags":173},"https://support.apple.com/HT207142",[127,121],[129,130],{"url":175,"sources":176,"tags":177},"https://support.apple.com/HT207143",[127,121],[129,130],{"url":179,"sources":180,"tags":181},"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SK4YNISS22MJY22YX5I6V2U63QZAUEHA/",[127,121],[130,182],"X Refsource FEDORA",[],{"date":185,"score":117,"percentile":186},"2026-06-04",0.90789,[188,192,195,198,201,204,206,208,211,214,217,220,223,226,229,232,235,238,241,243,246,249,252,255,257,260,263,266,269,271,274,277,280,283,286,288,290,293,296,299,301,303,306,309,312,315,318,321,323,326,328,331,333,336,339,342,345,347,350,353,356,358,361,364,366,369,372,375,378,380,382,384,387,389,392,395,398,401,404,407,410,412,415,418,421,424,427,430,432,435],{"date":189,"score":190,"percentile":191},"2025-11-04",0.07628,0.91462,{"date":193,"score":190,"percentile":194},"2025-11-05",0.9146,{"date":196,"score":190,"percentile":197},"2025-11-06",0.91461,{"date":199,"score":190,"percentile":200},"2025-11-07",0.91466,{"date":202,"score":190,"percentile":203},"2025-11-08",0.91464,{"date":205,"score":190,"percentile":197},"2025-11-09",{"date":207,"score":190,"percentile":191},"2025-11-10",{"date":209,"score":190,"percentile":210},"2025-11-11",0.91468,{"date":212,"score":190,"percentile":213},"2025-11-12",0.91472,{"date":215,"score":190,"percentile":216},"2025-11-13",0.91475,{"date":218,"score":190,"percentile":219},"2025-11-14",0.91476,{"date":221,"score":190,"percentile":222},"2025-11-15",0.91473,{"date":224,"score":190,"percentile":225},"2025-11-16",0.91482,{"date":227,"score":190,"percentile":228},"2025-11-17",0.91484,{"date":230,"score":190,"percentile":231},"2025-11-18",0.90978,{"date":233,"score":190,"percentile":234},"2025-11-19",0.90981,{"date":236,"score":190,"percentile":237},"2025-11-20",0.90987,{"date":239,"score":190,"percentile":240},"2025-11-21",0.9149,{"date":242,"score":190,"percentile":240},"2025-11-22",{"date":244,"score":190,"percentile":245},"2025-11-23",0.91496,{"date":247,"score":190,"percentile":248},"2025-11-24",0.91497,{"date":250,"score":190,"percentile":251},"2025-11-25",0.915,{"date":253,"score":190,"percentile":254},"2025-11-26",0.91499,{"date":256,"score":190,"percentile":254},"2025-11-27",{"date":258,"score":190,"percentile":259},"2025-11-28",0.91491,{"date":261,"score":190,"percentile":262},"2025-11-29",0.9152,{"date":264,"score":190,"percentile":265},"2025-11-30",0.91518,{"date":267,"score":190,"percentile":268},"2025-12-01",0.9156,{"date":270,"score":190,"percentile":268},"2025-12-02",{"date":272,"score":190,"percentile":273},"2025-12-03",0.91562,{"date":275,"score":190,"percentile":276},"2025-12-04",0.91513,{"date":278,"score":190,"percentile":279},"2025-12-05",0.91516,{"date":281,"score":190,"percentile":282},"2025-12-06",0.91519,{"date":284,"score":190,"percentile":285},"2025-12-07",0.91517,{"date":287,"score":190,"percentile":279},"2025-12-08",{"date":289,"score":190,"percentile":262},"2025-12-09",{"date":291,"score":190,"percentile":292},"2025-12-10",0.91526,{"date":294,"score":190,"percentile":295},"2025-12-11",0.91529,{"date":297,"score":190,"percentile":298},"2025-12-12",0.91531,{"date":300,"score":190,"percentile":262},"2025-12-13",{"date":302,"score":190,"percentile":265},"2025-12-14",{"date":304,"score":190,"percentile":305},"2025-12-15",0.91521,{"date":307,"score":190,"percentile":308},"2025-12-16",0.91536,{"date":310,"score":190,"percentile":311},"2025-12-17",0.91543,{"date":313,"score":190,"percentile":314},"2025-12-18",0.91546,{"date":316,"score":190,"percentile":317},"2025-12-19",0.91549,{"date":319,"score":190,"percentile":320},"2025-12-20",0.9155,{"date":322,"score":190,"percentile":320},"2025-12-21",{"date":324,"score":190,"percentile":325},"2025-12-22",0.91544,{"date":327,"score":190,"percentile":320},"2025-12-23",{"date":329,"score":190,"percentile":330},"2025-12-24",0.91558,{"date":332,"score":190,"percentile":268},"2025-12-25",{"date":334,"score":190,"percentile":335},"2025-12-26",0.91559,{"date":337,"score":190,"percentile":338},"2025-12-27",0.91595,{"date":340,"score":190,"percentile":341},"2025-12-28",0.91557,{"date":343,"score":190,"percentile":344},"2025-12-29",0.91554,{"date":346,"score":190,"percentile":268},"2025-12-30",{"date":348,"score":190,"percentile":349},"2025-12-31",0.91568,{"date":351,"score":190,"percentile":352},"2026-01-01",0.91629,{"date":354,"score":190,"percentile":355},"2026-01-02",0.91625,{"date":357,"score":190,"percentile":355},"2026-01-03",{"date":359,"score":190,"percentile":360},"2026-01-04",0.91579,{"date":362,"score":190,"percentile":363},"2026-01-05",0.91577,{"date":365,"score":190,"percentile":360},"2026-01-06",{"date":367,"score":190,"percentile":368},"2026-01-07",0.9158,{"date":370,"score":190,"percentile":371},"2026-01-08",0.91582,{"date":373,"score":190,"percentile":374},"2026-01-09",0.91585,{"date":376,"score":190,"percentile":377},"2026-01-10",0.91587,{"date":379,"score":190,"percentile":368},"2026-01-11",{"date":381,"score":190,"percentile":368},"2026-01-12",{"date":383,"score":190,"percentile":360},"2026-01-13",{"date":385,"score":190,"percentile":386},"2026-01-14",0.91592,{"date":388,"score":190,"percentile":338},"2026-01-15",{"date":390,"score":190,"percentile":391},"2026-01-16",0.91599,{"date":393,"score":190,"percentile":394},"2026-01-17",0.91603,{"date":396,"score":190,"percentile":397},"2026-01-18",0.91602,{"date":399,"score":190,"percentile":400},"2026-01-19",0.91606,{"date":402,"score":190,"percentile":403},"2026-01-20",0.91608,{"date":405,"score":190,"percentile":406},"2026-01-21",0.91613,{"date":408,"score":190,"percentile":409},"2026-01-22",0.91617,{"date":411,"score":190,"percentile":355},"2026-01-23",{"date":413,"score":190,"percentile":414},"2026-01-24",0.91631,{"date":416,"score":190,"percentile":417},"2026-01-25",0.9163,{"date":419,"score":190,"percentile":420},"2026-01-26",0.91633,{"date":422,"score":190,"percentile":423},"2026-01-27",0.91636,{"date":425,"score":190,"percentile":426},"2026-01-28",0.91642,{"date":428,"score":190,"percentile":429},"2026-01-29",0.91641,{"date":431,"score":190,"percentile":426},"2026-01-30",{"date":433,"score":190,"percentile":434},"2026-01-31",0.9164,{"date":436,"score":190,"percentile":437},"2026-02-01",0.91686,[439],{"source":121,"cvss_v2_0":440,"cvss_v3_0":443,"cvss_v3_1":9,"cvss_v4_0":9},{"baseScore":119,"baseSeverity":9,"vectorString":122,"impactScore":441,"exploitabilityScore":442},10,8.6,{"baseScore":444,"baseSeverity":445,"vectorString":446,"impactScore":447,"exploitabilityScore":448},8.8,"HIGH","CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",9.8,7.2,[450,462,469,475,482],{"ecosystem":9,"name":451,"vendor":452,"product":453,"cpe_part":454,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":455},"iphone os","apple","iphone_os","o",[456],{"version":457,"is_range":458,"range_type":459,"version_start":9,"version_start_type":9,"version_end":460,"version_end_type":461,"fixed_in":9},"lt10.0",true,"cpe","10.0","excluding",{"ecosystem":9,"name":463,"vendor":452,"product":464,"cpe_part":454,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":465},"mac os x","mac_os_x",[466],{"version":467,"is_range":458,"range_type":459,"version_start":9,"version_start_type":9,"version_end":468,"version_end_type":461,"fixed_in":9},"lt10.12.0","10.12.0",{"ecosystem":9,"name":470,"vendor":452,"product":471,"cpe_part":472,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":473},"tvOS","tvos","a",[474],{"version":457,"is_range":458,"range_type":459,"version_start":9,"version_start_type":9,"version_end":460,"version_end_type":461,"fixed_in":9},{"ecosystem":9,"name":476,"vendor":452,"product":477,"cpe_part":472,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":478},"watchOS","watchos",[479],{"version":480,"is_range":458,"range_type":459,"version_start":9,"version_start_type":9,"version_end":481,"version_end_type":461,"fixed_in":9},"lt3.0","3.0",{"ecosystem":9,"name":483,"vendor":484,"product":485,"cpe_part":454,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":486},"debian linux","debian","debian_linux",[487,489],{"version":488,"is_range":115,"range_type":459,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"8.0",{"version":490,"is_range":115,"range_type":459,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"9.0"]