Lucene search

K
AppleXcode

11 matches found

CVE
CVE
added 2016/02/15 7:59 p.m.1313 views

CVE-2016-0746

Use-after-free vulnerability in the resolver in nginx 0.6.18 through 1.8.0 and 1.9.x before 1.9.10 allows remote attackers to cause a denial of service (worker process crash) or possibly have unspecified other impact via a crafted DNS response related to CNAME response processing.

9.8CVSS9.5AI score0.11577EPSS
CVE
CVE
added 2019/03/21 9:29 p.m.552 views

CVE-2019-3855

An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.

9.3CVSS8.7AI score0.13214EPSS
CVE
CVE
added 2007/09/23 11:0 p.m.394 views

CVE-2004-2687

distcc 2.x, as used in XCode 1.5 and others, when not configured to restrict access to the server port, allows remote attackers to execute arbitrary commands via compilation jobs, which are executed by the server without authorization checks.

9.3CVSS9.7AI score0.89709EPSS
CVE
CVE
added 2019/07/29 12:15 p.m.246 views

CVE-2019-14379

SubTypeValidator.java in FasterXML jackson-databind before 2.9.9.2 mishandles default typing when ehcache is used (because of net.sf.ehcache.transaction.manager.DefaultTransactionManagerLookup), leading to remote code execution.

9.8CVSS9.7AI score0.01455EPSS
CVE
CVE
added 2020/02/12 2:15 a.m.172 views

CVE-2014-9390

Git before 1.8.5.6, 1.9.x before 1.9.5, 2.0.x before 2.0.5, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 on Windows and OS X; Mercurial before 3.2.3 on Windows and OS X; Apple Xcode before 6.2 beta 3; mine all versions before 08-12-2014; libgit2 all versions up to 0.21.2; Egit all versions before 08-...

9.8CVSS9.1AI score0.53354EPSS
CVE
CVE
added 2020/10/16 5:15 p.m.98 views

CVE-2020-9992

This issue was addressed by encrypting communications over the network to devices running iOS 14, iPadOS 14, tvOS 14, and watchOS 7. This issue is fixed in iOS 14.0 and iPadOS 14.0, Xcode 12.0. An attacker in a privileged network position may be able to execute arbitrary code on a paired device dur...

9.3CVSS7.5AI score0.07726EPSS
CVE
CVE
added 2019/04/03 6:29 p.m.70 views

CVE-2018-4357

A memory corruption issue was addressed with improved input validation. This issue affected versions prior to Xcode 10.

9.3CVSS7.2AI score0.00171EPSS
CVE
CVE
added 2019/12/18 6:15 p.m.47 views

CVE-2019-8721

Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4. This issue is fixed in Xcode 11.0. Compiling code without proper input validation could lead to arbitrary code execution with user privilege.

9.3CVSS8.8AI score0.00601EPSS
CVE
CVE
added 2019/12/18 6:15 p.m.43 views

CVE-2019-8724

Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4. This issue is fixed in Xcode 11.0. Compiling code without proper input validation could lead to arbitrary code execution with user privilege.

9.3CVSS8.8AI score0.00464EPSS
CVE
CVE
added 2019/12/18 6:15 p.m.39 views

CVE-2019-8722

Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4. This issue is fixed in Xcode 11.0. Compiling code without proper input validation could lead to arbitrary code execution with user privilege.

9.3CVSS8.8AI score0.00601EPSS
CVE
CVE
added 2019/12/18 6:15 p.m.39 views

CVE-2019-8723

Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4. This issue is fixed in Xcode 11.0. Compiling code without proper input validation could lead to arbitrary code execution with user privilege.

9.3CVSS8.8AI score0.00464EPSS