CVE-2015-7056

IDE SCM in Apple Xcode before 7.2 does not recognize .gitignore files, which allows remote attackers to obtain sensitive information in opportunistic circumstances by leveraging the presence of a file matching an ignore pattern...

PT-2015-3069

Name of the Vulnerable Software and Affected Versions Git versions prior to 2.5.4 Apple Xcode versions prior to 7.2 Description The issue concerns multiple unspecified vulnerabilities in Git, which is used in Apple Xcode. These vulnerabilities are related to errors in the code and can potentially...

PT-2015-7471

Name of the Vulnerable Software and Affected Versions Apple Xcode versions prior to 7.2 Description The issue allows remote attackers to obtain sensitive information in certain circumstances by leveraging the presence of a file matching an ignore pattern, due to the IDE SCM in Apple Xcode not...

CVE-2015-7049: Improper Restriction of Operations within the Bounds of a Memory Buffer

otools in Apple Xcode before 7.2 allows local users to gain privileges or cause a denial of service memory corruption via a crafted mach-o file, a different vulnerability than CVE-2015-7057...

CVE-2015-7057: Improper Restriction of Operations within the Bounds of a Memory Buffer

otools in Apple Xcode before 7.2 allows local users to gain privileges or cause a denial of service memory corruption via a crafted mach-o file, a different vulnerability than CVE-2015-7049...

Apple Xcode Swift Information Disclosure Vulnerability

Xcode is the development tool used on Apple machines. Versions of Apple Xcode prior to 7.1 have mishandled type conversions in the Swift implementation, allowing attackers to obtain sensitive information...

Apple Xcode multiple security vulnerabilities

Restrictions bypass, weak encryption, information discosure, multiple svn vulnerabilities...

CVE-2015-7030

The Swift implementation in Apple Xcode before 7.1 mishandles type conversion, which has unspecified impact and attack vectors...

Type confusion

The Swift implementation in Apple Xcode before 7.1 mishandles type conversion, which has unspecified impact and attack vectors...

CVE-2015-7030: Undefined Security Weakness

The Swift implementation in Apple Xcode before 7.1 mishandles type conversion, which has unspecified impact and attack vectors...

PT-2015-7465

Name of the Vulnerable Software and Affected Versions Apple Xcode versions prior to 7.1 Description The issue in Apple Xcode's Swift implementation mishandles type conversion, but the specific impact and attack vectors are not detailed. Recommendations For Apple Xcode versions prior to 7.1, updat...

Apple Xcode < 7.1 (Mac OS X)

The version of Apple Xcode installed on the remote Mac OS X host is prior to 7.1. It is, therefore, affected by a vulnerability in Swift-based programs due to unexpected values being returned for certain type conversions. An unauthenticated, remote attacker can exploit this, by manipulating retur...

Apple Xcode < 7.0 (Mac OS X) (POODLE)

The version of Apple Xcode installed on the remote Mac OS X host is prior to 7.0. It is, therefore, affected by the multiple vulnerabilities : - A memory leak issue exists in file d1srtp.c related to the DTLS SRTP extension handling and specially crafted handshake messages. An attacker can exploi...

Apple Xcode Server Information Disclosure Vulnerability

Apple Xcode Server is a development server. An access checksum vulnerability in the Apple Xcode Server Processing Repository email list could lead to sending build notification messages to other users...

CVE-2015-5909

IDE Xcode Server in Apple Xcode before 7.0 does not properly restrict access to repository e-mail lists, which allows remote attackers to obtain potentially sensitive build information in opportunistic circumstances by leveraging incorrect notification delivery...

Design/Logic Flaw

IDE Xcode Server in Apple Xcode before 7.0 does not properly restrict access to repository e-mail lists, which allows remote attackers to obtain potentially sensitive build information in opportunistic circumstances by leveraging incorrect notification delivery...

Code injection

IDE Xcode Server in Apple Xcode before 7.0 does not ensure that server traffic is encrypted, which allows remote attackers to obtain sensitive information by sniffing the network...

CVE-2015-5910

IDE Xcode Server in Apple Xcode before 7.0 does not ensure that server traffic is encrypted, which allows remote attackers to obtain sensitive information by sniffing the network...

CVE-2015-5910: Exposure of Sensitive Information to an Unauthorized Actor

IDE Xcode Server in Apple Xcode before 7.0 does not ensure that server traffic is encrypted, which allows remote attackers to obtain sensitive information by sniffing the network...

PT-2015-7069

Name of the Vulnerable Software and Affected Versions Xcode versions prior to 7.0 Description The issue concerns the IDE Xcode Server in Apple Xcode, where server traffic is not properly encrypted. This allows remote attackers to obtain sensitive information by sniffing the network. Recommendatio...