Lucene search
+L

189 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/12/11 12:00 a.m.•6 views

CVE-2015-7057: Improper Restriction of Operations within the Bounds of a Memory Buffer

otools in Apple Xcode before 7.2 allows local users to gain privileges or cause a denial of service memory corruption via a crafted mach-o file, a different vulnerability than CVE-2015-7049...

4.6CVSS5.8AI score0.00303EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/12/11 12:00 a.m.•7 views

CVE-2015-7049: Improper Restriction of Operations within the Bounds of a Memory Buffer

otools in Apple Xcode before 7.2 allows local users to gain privileges or cause a denial of service memory corruption via a crafted mach-o file, a different vulnerability than CVE-2015-7057...

4.6CVSS5.8AI score0.00303EPSS
SaveExploits0References2
CNVD
CNVD
•added 2015/10/29 12:00 a.m.•44 views

Apple Xcode Swift Information Disclosure Vulnerability

Xcode is the development tool used on Apple machines. Versions of Apple Xcode prior to 7.1 have mishandled type conversions in the Swift implementation, allowing attackers to obtain sensitive information...

7.5CVSS6.5AI score0.01619EPSS
SaveExploits0References1
securityvulns
securityvulns
•added 2015/10/25 12:00 a.m.•493 views

Apple Xcode multiple security vulnerabilities

Restrictions bypass, weak encryption, information discosure, multiple svn vulnerabilities...

7.5CVSS6.6AI score0.99999EPSS
SaveExploits8References2Affected Software1
NVD
NVD
•added 2015/10/23 10:59 a.m.•43 views

CVE-2015-7030

The Swift implementation in Apple Xcode before 7.1 mishandles type conversion, which has unspecified impact and attack vectors...

7.5CVSS6.1AI score0.01619EPSS
SaveExploits0References3
Prion
Prion
•added 2015/10/23 10:59 a.m.•31 views

Type confusion

The Swift implementation in Apple Xcode before 7.1 mishandles type conversion, which has unspecified impact and attack vectors...

7.5CVSS6.7AI score0.01619EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2015/10/23 12:00 a.m.•1 views

PT-2015-7465

Name of the Vulnerable Software and Affected Versions Apple Xcode versions prior to 7.1 Description The issue in Apple Xcode's Swift implementation mishandles type conversion, but the specific impact and attack vectors are not detailed. Recommendations For Apple Xcode versions prior to 7.1, updat...

7.5CVSS0.01619EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/10/23 12:00 a.m.•4 views

CVE-2015-7030: Undefined Security Weakness

The Swift implementation in Apple Xcode before 7.1 mishandles type conversion, which has unspecified impact and attack vectors...

7.5CVSS5.7AI score0.01619EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2015/10/23 12:00 a.m.•30 views

Apple Xcode < 7.1 (Mac OS X)

The version of Apple Xcode installed on the remote Mac OS X host is prior to 7.1. It is, therefore, affected by a vulnerability in Swift-based programs due to unexpected values being returned for certain type conversions. An unauthenticated, remote attacker can exploit this, by manipulating retur...

7.5CVSS5.6AI score0.01619EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2015/10/02 12:00 a.m.•50 views

Apple Xcode < 7.0 (Mac OS X) (POODLE)

The version of Apple Xcode installed on the remote Mac OS X host is prior to 7.0. It is, therefore, affected by the multiple vulnerabilities : - A memory leak issue exists in file d1srtp.c related to the DTLS SRTP extension handling and specially crafted handshake messages. An attacker can exploi...

7.5CVSS6.6AI score0.99999EPSS
SaveExploits8References15
CNVD
CNVD
•added 2015/09/20 12:00 a.m.•17 views

Apple Xcode Server Information Disclosure Vulnerability

Apple Xcode Server is a development server. An access checksum vulnerability in the Apple Xcode Server Processing Repository email list could lead to sending build notification messages to other users...

5CVSS6.6AI score0.01921EPSS
SaveExploits0References1
NVD
NVD
•added 2015/09/18 12:00 p.m.•34 views

CVE-2015-5909

IDE Xcode Server in Apple Xcode before 7.0 does not properly restrict access to repository e-mail lists, which allows remote attackers to obtain potentially sensitive build information in opportunistic circumstances by leveraging incorrect notification delivery...

5CVSS3.1AI score0.01921EPSS
SaveExploits0References3
Prion
Prion
•added 2015/09/18 12:00 p.m.•30 views

Code injection

IDE Xcode Server in Apple Xcode before 7.0 does not ensure that server traffic is encrypted, which allows remote attackers to obtain sensitive information by sniffing the network...

3.3CVSS6AI score0.00753EPSS
SaveExploits0References3Affected Software1
Prion
Prion
•added 2015/09/18 12:00 p.m.•35 views

Design/Logic Flaw

IDE Xcode Server in Apple Xcode before 7.0 does not properly restrict access to repository e-mail lists, which allows remote attackers to obtain potentially sensitive build information in opportunistic circumstances by leveraging incorrect notification delivery...

5CVSS6.1AI score0.01921EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2015/09/18 10:00 a.m.•35 views

CVE-2015-5910

IDE Xcode Server in Apple Xcode before 7.0 does not ensure that server traffic is encrypted, which allows remote attackers to obtain sensitive information by sniffing the network...

5.4AI score0.00753EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/09/18 12:00 a.m.•7 views

CVE-2015-5910: Exposure of Sensitive Information to an Unauthorized Actor

IDE Xcode Server in Apple Xcode before 7.0 does not ensure that server traffic is encrypted, which allows remote attackers to obtain sensitive information by sniffing the network...

3.3CVSS5.9AI score0.00753EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2015/09/18 12:00 a.m.•1 views

PT-2015-7069

Name of the Vulnerable Software and Affected Versions Xcode versions prior to 7.0 Description The issue concerns the IDE Xcode Server in Apple Xcode, where server traffic is not properly encrypted. This allows remote attackers to obtain sensitive information by sniffing the network. Recommendatio...

3.3CVSS0.00753EPSS
SaveExploits0References4
CNVD
CNVD
•added 2015/04/13 12:00 a.m.•53 views

Apple Xcode Swift Integer Overflow Vulnerability

Apple Xcode is a set of integrated development environments provided to developers by Apple, Inc. that are primarily used to develop applications for Mac OS X and iOS.Swift is a programming language used to develop Mac OS X and iOS applications. An integer overflow vulnerability exists in the...

7.5CVSS6.7AI score0.01619EPSS
SaveExploits0References1
NVD
NVD
•added 2015/04/10 3:00 p.m.•72 views

CVE-2015-3027

Clang in LLVM, as used in Apple Xcode before 6.3, performs incorrect register allocation in a way that triggers stack storage for stack cookie pointers, which might allow context-dependent attackers to bypass a stack-guard protection mechanism via crafted input to an affected C program...

5CVSS6.1AI score0.01299EPSS
SaveExploits0References4
OSV
OSV
•added 2015/04/10 3:00 p.m.•18 views

UBUNTU-CVE-2015-3027

Clang in LLVM, as used in Apple Xcode before 6.3, performs incorrect register allocation in a way that triggers stack storage for stack cookie pointers, which might allow context-dependent attackers to bypass a stack-guard protection mechanism via crafted input to an affected C program...

5CVSS5.8AI score0.01299EPSS
SaveExploits0References2
Rows per page
Query Builder