Lucene search
K

803 matches found

OSV
OSV
added 2022/03/18 5:52 p.m.21 views

GHSA-WFXP-4QGW-QP3C XML external entity (XXE) attacks in Jenkins Xcode integration Plugin

Jenkins Xcode integration Plugin 2.0.14 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

7.1CVSS6.8AI score0.00202EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2022/03/18 5:52 p.m.20 views

XML external entity (XXE) attacks in Jenkins Xcode integration Plugin

Jenkins Xcode integration Plugin 2.0.14 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

7.1CVSS4.6AI score0.00202EPSS
Exploits0References4Affected Software1
OpenVAS
OpenVAS
added 2022/03/17 12:0 a.m.26 views

Apple Xcode Security Update (HT213189)

Apple Xcode is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:xcode"; ifdescription...

10CVSS9.3AI score0.94358EPSS
Exploits341References7
CNVD
CNVD
added 2022/03/16 12:0 a.m.15 views

Apple Xcode out-of-bounds read vulnerability

Apple Xcode is an integrated development environment provided by Apple, Inc. for developers to develop applications for Mac OS X and iOS. A remote attacker could use this vulnerability to cause an application to terminate unexpectedly or execute arbitrary code via a maliciously crafted file...

7.8CVSS7AI score0.00418EPSS
Exploits0References1
CNNVD
CNNVD
added 2022/03/14 12:0 a.m.1 views

Apple Xcode 缓冲区错误漏洞

Apple Xcode is an integrated development environment provided to developers to develop applications for Mac OS X and iOS. Apple Xcode is vulnerable to an out-of-bounds read vulnerability that could be exploited by remote attackers to submit special application requests and trick users into parsin...

7.8CVSS6.1AI score0.00418EPSS
Exploits0References5
CNNVD
CNNVD
added 2022/03/14 12:0 a.m.1 views

Apple Xcode 缓冲区错误漏洞

Apple Xcode is an integrated development environment provided to developers by Apple, Inc. and is primarily used to develop applications for Mac OS X and iOS. Apple Xcode suffers from an out-of-bounds read vulnerability, which stems from a boundary error when processing files in otool and can be...

7.8CVSS6.1AI score0.00418EPSS
Exploits0References5
Apple
Apple
added 2022/03/14 12:0 a.m.653 views

About the security content of Xcode 13.3

About the security content of Xcode 13.3 This document describes the security content of Xcode 13.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

10CVSS10AI score0.94358EPSS
Exploits341References1Affected Software1
CNNVD
CNNVD
added 2022/03/14 12:0 a.m.0 views

Apple Xcode 缓冲区错误漏洞

Apple Xcode is an integrated development environment provided to developers by Apple, Inc. and is primarily used to develop applications for Mac OS X and iOS. Apple Xcode suffers from an out-of-bounds read vulnerability, which stems from a boundary error when processing files in otool and can be...

7.8CVSS6.1AI score0.00418EPSS
Exploits0References5
CNNVD
CNNVD
added 2022/03/14 12:0 a.m.1 views

Apple Xcode 缓冲区错误漏洞

Apple Xcode is an integrated development environment provided by Apple, Inc. for developers to develop applications for Mac OS X and iOS. A remote attacker could use this vulnerability to cause an application to terminate unexpectedly or execute arbitrary code via a maliciously crafted file...

7.8CVSS6.2AI score0.00418EPSS
Exploits0References5
CNNVD
CNNVD
added 2022/03/14 12:0 a.m.1 views

Apple Xcode 缓冲区错误漏洞

Apple Xcode is an integrated development environment provided to developers by Apple, Inc. and is primarily used to develop applications for Mac OS X and iOS. Apple Xcode is vulnerable to an out-of-bounds read vulnerability, which can be exploited by attackers to cause unexpected termination of a...

7.8CVSS6.3AI score0.00418EPSS
Exploits0References5
CNNVD
CNNVD
added 2022/03/14 12:0 a.m.0 views

Apple Xcode 缓冲区错误漏洞

Apple Xcode is an integrated development environment provided to developers by Apple, Inc. and is primarily used to develop applications for Mac OS X and iOS. Apple Xcode suffers from an out-of-bounds read vulnerability, which stems from a boundary error when processing files in otool and can be...

7.8CVSS6.1AI score0.00418EPSS
Exploits0References6
CNNVD
CNNVD
added 2022/03/14 12:0 a.m.2 views

Apple Xcode 缓冲区错误漏洞

Apple Xcode is an integrated development environment provided by Apple for developers to develop applications for Mac OS X and iOS. Apple Xcode 13.3 previously contained a buffer error vulnerability that could be exploited by an attacker to cause an unexpected termination of an application or...

7.8CVSS6.7AI score0.00418EPSS
Exploits0References5
CNNVD
CNNVD
added 2022/03/14 12:0 a.m.1 views

Apple Xcode 缓冲区错误漏洞

Apple Xcode is an integrated development environment provided to developers by Apple, Inc. and is primarily used to develop applications for Mac OS X and iOS. Apple Xcode suffers from an out-of-bounds read vulnerability, which stems from a boundary error when processing files in otool and can be...

7.8CVSS6.1AI score0.00418EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2022/03/11 12:0 a.m.22 views

Apple Xcode < 12.4 access to arbitrary files (macOS)

The version of Xcode running on the remote host is prior to 12.4. It is, Therefore, potentially affected by arbitrary file access as referenced in the vendor advisory. A remote attacker can exploit this to read arbitrary files and disclose sensitive information. %NASLMINLEVEL 70300 C Tenable...

5.5CVSS5.7AI score0.00204EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2021/11/08 12:0 a.m.41 views

Jenkins Enterprise and Operations Center < 2.249.31.0.4 / 2.277.4.3 Multiple Vulnerabilities (CloudBees Security Advisory 2021-05-11)

The version of Jenkins Enterprise or Jenkins Operations Center running on the remote web server is 2.249.x prior to 2.249.31.0.4, or 2.x prior to 2.277.4.3. It is, therefore, affected by multiple vulnerabilities, including the following: - A cross-site request forgery CSRF vulnerability in Jenkin...

7.1CVSS5.8AI score0.0031EPSS
Exploits0References10
OpenVAS
OpenVAS
added 2021/09/22 12:0 a.m.37 views

Apple Xcode Multiple Vulnerabilities (HT212818)

The host is missing an important security update according to Apple. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:xcode"...

9.8CVSS7.4AI score0.91959EPSS
Exploits10References1
CISA
CISA
added 2021/09/21 12:0 a.m.7 views

Apple Releases Security Updates for Multiple Products

Apple has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the Apple security pages for the following products and apply the...

6.9AI score
Exploits0References6
Apple
Apple
added 2021/09/20 12:0 a.m.521 views

About the security content of Xcode 13

About the security content of Xcode 13 This document describes the security content of Xcode 13. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recen...

9.8CVSS7.5AI score0.91959EPSS
Exploits10References1Affected Software1
Kitploit
Kitploit
added 2021/07/31 12:30 p.m.82 views

Ruse - Mobile Camera-Based Application That Attempts To Alter Photos To Preserve Their Utility To Humans While Making Them Unusable For Facial Recognition Systems

Mobile camera-based application that attempts to alter photos to preserve their utility to humans while making them unusable for facial recognition systems. Installation 1 Easy Method: Wait and download app from appropriate app store. 2 Download and run ios app via XCode see Development setup for...

7.2AI score
Exploits0References3
Kitploit
Kitploit
added 2021/07/08 9:30 p.m.62 views

Ipa-Medit - Memory Search And Patch Tool For Resigned Ipa Without Jailbreak

Ipa-medit is a memory search and patch tool for resigned ipa without jailbreak. It was created for mobile game security testing. Motivation Memory modification is the easiest way to cheat in games, it is one of the items to be checked in the security test. There are also cheat tools that can be...

7.2AI score
Exploits0References7
Rows per page
Query Builder