Overview 91 matches · 2 in Waratek scope · 2 protected · 0 exploited · 0 CISA KEV · 0 public PoC · 0 EPSS ≥ 0.5
91matches
2in Waratek scope2.2%
2protected2.2%
0exploited0.0%
0CISA KEV0.0%
0public PoC0.0%
0EPSS ≥ 0.50.0%
Protected by Waratek
2
2.2%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
1
1.1%
Not applicable
88
96.7%
Withdrawn CVE
0
0.0%
blocked by ARMR today
2
2.2%
partly blocked
0
0.0%
not blocked
89
97.8%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
0
0.0%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
91
100.0%
split by
peak 13 / year
20063
Not applicable3
High2
Medium1
not blocked3
No public exploit3
20070
20081
Not applicable1
Medium1
not blocked1
No public exploit1
20090
20100
20110
20121
Not applicable1
Medium1
not blocked1
No public exploit1
20130
20145
Not applicable5
High1
Medium4
not blocked5
No public exploit5
201513
Not applicable13
High2
Medium10
Low1
not blocked13
No public exploit13
20165
Not applicable5
Critical1
High3
Medium1
not blocked5
No public exploit5
20174
Not applicable4
High4
not blocked4
No public exploit4
20185
Not applicable5
Critical1
High3
Medium1
not blocked5
No public exploit5
201911
Protected by Waratek1
Outside Waratek scope1
Not applicable9
Critical1
High10
blocked by ARMR today1
not blocked10
No public exploit11
20201
Not applicable1
High1
not blocked1
No public exploit1
20212
Protected by Waratek1
Not applicable1
High1
Medium1
blocked by ARMR today1
not blocked1
No public exploit2
202212
Not applicable12
High12
not blocked12
No public exploit12
20237
Not applicable7
High3
Medium4
not blocked7
No public exploit7
20245
Not applicable5
High3
Medium2
not blocked5
No public exploit5
20258
Not applicable8
High4
Medium4
not blocked8
No public exploit8
20268
Not applicable8
High2
Medium4
Low2
not blocked8
No public exploit8
20062008201020122014201620182020202220242026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2026-86949 | High | 2026-10-20 | Not applicable | No public exploit | This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. A malicious app may be able to break out of its sandbox. |
| CVE-2026-86948 | High | 2026-10-20 | Not applicable | No public exploit | This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. An app may be able to break out of its sandbox. |
| CVE-2026-86875 | Medium | 2026-10-20 | Not applicable | No public exploit | An input validation issue was addressed with improved input validation. This issue is fixed in Xcode 27. Parsing a maliciously crafted binary may lead to unexpected app termination. |
| CVE-2026-86874 | Low | 2026-10-20 | Not applicable | No public exploit | An out-of-bounds read was addressed with improved input validation. This issue is fixed in Xcode 27. Parsing a maliciously crafted binary may lead to unexpected tool termination. |
| CVE-2026-65393 | Medium | 2026-09-14 | Not applicable | No public exploit | A permissions issue was addressed with improved validation. This issue is fixed in Xcode 27, macOS Golden Gate 27. An app may be able to access user-sensitive data. |
| CVE-2026-28890 | Medium | 2026-03-25 | Not applicable | No public exploit | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 26.4. An app may be able to cause unexpected system termination. |
| CVE-2026-28889 | Medium | 2026-03-25 | Not applicable | No public exploit | A permissions issue was addressed with additional restrictions. This issue is fixed in Xcode 26.4. An app may be able to read arbitrary files as root. |
| CVE-2025-31186 | Low | 2026-01-16 | Not applicable | No public exploit | A permissions issue was addressed with additional restrictions. This issue is fixed in Xcode 16.3. An app may be able to bypass Privacy preferences. |
| CVE-2025-43505 | High | 2025-11-04 | Not applicable | No public exploit | An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in Xcode 26.1. Processing a maliciously crafted file may lead to heap corruption. |
| CVE-2025-43504 | Medium | 2025-11-04 | Not applicable | No public exploit | A buffer overflow was addressed with improved bounds checking. This issue is fixed in Xcode 26.1. A user in a privileged network position may be able to cause a denial-of-service. |
| CVE-2025-43375 | High | 2025-09-15 | Not applicable | No public exploit | The issue was addressed with improved checks. This issue is fixed in Xcode 26. Processing an overly large path value may crash a process. |
| CVE-2025-43371 | High | 2025-09-15 | Not applicable | No public exploit | This issue was addressed with improved checks. This issue is fixed in Xcode 26. An app may be able to break out of its sandbox. |
| CVE-2025-43370 | Medium | 2025-09-15 | Not applicable | No public exploit | A path handling issue was addressed with improved validation. This issue is fixed in Xcode 26. Processing an overly large path value may crash a process. |
| CVE-2025-43263 | High | 2025-09-15 | Not applicable | No public exploit | The issue was addressed with improved checks. This issue is fixed in Xcode 26. An app may be able to read and write files outside of its sandbox. |
| CVE-2025-30441 | Medium | 2025-03-31 | Not applicable | No public exploit | This issue was addressed through improved state management. This issue is fixed in Xcode 16.3. An app may be able to overwrite arbitrary files. |
| CVE-2025-24226 | Medium | 2025-03-31 | Not applicable | No public exploit | The issue was addressed with improved checks. This issue is fixed in Xcode 16.3. A malicious app may be able to access private information. |
| CVE-2024-44228 | High | 2024-10-28 | Not applicable | No public exploit | This issue was addressed with improved permissions checking. This issue is fixed in Xcode 16. An app may be able to inherit Xcode permissions and access user data. |
| CVE-2024-44191 | Medium | 2024-09-17 | Not applicable | No public exploit | This issue was addressed through improved state management. This issue is fixed in Xcode 16, iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoia 15, tvOS 18, visionOS 2, watchOS 11. An app may gain unauthorized access to Bluetooth. |
| CVE-2024-44162 | High | 2024-09-17 | Not applicable | No public exploit | This issue was addressed by enabling hardened runtime. This issue is fixed in Xcode 16. A malicious application may gain access to a user's Keychain items. |
| CVE-2024-40862 | High | 2024-09-17 | Not applicable | No public exploit | A privacy issue was addressed by removing sensitive data. This issue is fixed in Xcode 16. An attacker may be able to determine the Apple ID of the owner of the computer. |
| CVE-2024-23298 | Medium | 2024-03-15 | Not applicable | No public exploit | A logic issue was addressed with improved state management. This issue is fixed in Xcode 15.3. An app may bypass Gatekeeper checks. |
| CVE-2023-40435 | Medium | 2023-09-27 | Not applicable | No public exploit | This issue was addressed by enabling hardened runtime. This issue is fixed in Xcode 15. An app may be able to access App Store credentials. |
| CVE-2023-40391 | Medium | 2023-09-27 | Not applicable | No public exploit | The issue was addressed with improved memory handling. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, macOS Sonoma 14, Xcode 15. An app may be able to disclose kernel memory. |
| CVE-2023-32396 | High | 2023-09-27 | Not applicable | No public exploit | This issue was addressed with improved checks. This issue is fixed in Xcode 15, tvOS 17, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to gain elevated privileges. |
| CVE-2022-32920 | Medium | 2023-09-06 | Not applicable | No public exploit | The issue was addressed with improved checks. This issue is fixed in Xcode 14.0. Parsing a file may lead to disclosure of user information. |
| CVE-2023-27967 | High | 2023-05-08 | Not applicable | No public exploit | The issue was addressed with improved memory handling. This issue is fixed in Xcode 14.3. An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges. |
| CVE-2023-27945 | Medium | 2023-05-08 | Not applicable | No public exploit | This issue was addressed with improved entitlements. This issue is fixed in Xcode 14.3, macOS Big Sur 11.7.7, macOS Monterey 12.6.6. A sandboxed app may be able to collect system logs. |
| CVE-2022-42797 | High | 2023-02-27 | Not applicable | No public exploit | An injection issue was addressed with improved input validation. This issue is fixed in Xcode 14.1. An app may be able to gain root privileges. |
| CVE-2022-39260 | High | 2022-10-19 | Not applicable | No public exploit | Git is an open source, scalable, distributed revision control system. `git shell` is a restricted login shell that can be used to implement Git's push/pull functionality via SSH. In versions prior to 2.30.6, 2.31.5, 2.32.4, 2.33.5, 2.34.5, 2.35.5, 2.36.3, and 2.37.4, the function that splits the command arguments into an array improperly uses an `int` to represent the number of entries in the array, allowing a malicious actor to intentionally overflow the return value, leading to arbitrary heap writes. Because the resulting array is then passed to `execv()`, it is possible to leverage this attack to gain remote code execution on a victim machine. Note that a victim must first allow access to `git shell` as a login shell in order to be vulnerable to this attack. This problem is patched in versions 2.30.6, 2.31.5, 2.32.4, 2.33.5, 2.34.5, 2.35.5, 2.36.3, and 2.37.4 and users are advised to upgrade to the latest version. Disabling `git shell` access via remote logins is a viable short-term workaround. |
| CVE-2022-29187 | High | 2022-07-12 | Not applicable | No public exploit | Git is a distributed revision control system. Git prior to versions 2.37.1, 2.36.2, 2.35.4, 2.34.4, 2.33.4, 2.32.3, 2.31.4, and 2.30.5, is vulnerable to privilege escalation in all platforms. An unsuspecting user could still be affected by the issue reported in CVE-2022-24765, for example when navigating as root into a shared tmp directory that is owned by them, but where an attacker could create a git repository. Versions 2.37.1, 2.36.2, 2.35.4, 2.34.4, 2.33.4, 2.32.3, 2.31.4, and 2.30.5 contain a patch for this issue. The simplest way to avoid being affected by the exploit described in the example is to avoid running git as root (or an Administrator in Windows), and if needed to reduce its use to a minimum. While a generic workaround is not possible, a system could be hardened from the exploit described in the example by removing any such repository if it exists already and creating one as root to block any future attacks. |
| CVE-2022-26747 | High | 2022-05-26 | Not applicable | No public exploit | This issue was addressed with improved checks. This issue is fixed in Xcode 13.4. An app may be able to gain elevated privileges. |
| CVE-2022-24765 | High | 2022-04-12 | Not applicable | No public exploit | Git for Windows is a fork of Git containing Windows-specific patches. This vulnerability affects users working on multi-user machines, where untrusted parties have write access to the same hard disk. Those untrusted parties could create the folder `C:\.git`, which would be picked up by Git operations run supposedly outside a repository while searching for a Git directory. Git would then respect any config in said Git directory. Git Bash users who set `GIT_PS1_SHOWDIRTYSTATE` are vulnerable as well. Users who installed posh-gitare vulnerable simply by starting a PowerShell. Users of IDEs such as Visual Studio are vulnerable: simply creating a new project would already read and respect the config specified in `C:\.git\config`. Users of the Microsoft fork of Git are vulnerable simply by starting a Git Bash. The problem has been patched in Git for Windows v2.35.2. Users unable to upgrade may create the folder `.git` on all drives where Git commands are run, and remove read/write access from those folders as a workaround. Alternatively, define or extend `GIT_CEILING_DIRECTORIES` to cover the _parent_ directory of the user profile, e.g. `C:\Users` if the user profile is located in `C:\Users\my-user-name`. |
| CVE-2022-22608 | High | 2022-03-18 | Not applicable | No public exploit | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 13.3. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution. |
| CVE-2022-22607 | High | 2022-03-18 | Not applicable | No public exploit | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 13.3. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution. |
| CVE-2022-22606 | High | 2022-03-18 | Not applicable | No public exploit | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 13.3. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution. |
| CVE-2022-22605 | High | 2022-03-18 | Not applicable | No public exploit | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 13.3. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution. |
| CVE-2022-22604 | High | 2022-03-18 | Not applicable | No public exploit | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 13.3. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution. |
| CVE-2022-22603 | High | 2022-03-18 | Not applicable | No public exploit | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 13.3. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution. |
| CVE-2022-22602 | High | 2022-03-18 | Not applicable | No public exploit | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 13.3. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution. |
| CVE-2022-22601 | High | 2022-03-18 | Not applicable | No public exploit | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 13.3. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution. |
| CVE-2021-21656 | High | 2021-05-11 | Protected by Waratek | No public exploit | Jenkins Xcode integration Plugin 2.0.14 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. |
| CVE-2021-1800 | Medium | 2021-04-02 | Not applicable | No public exploit | A path handling issue was addressed with improved validation. This issue is fixed in Xcode 12.4. A malicious application may be able to access arbitrary files on the host device while running an app that uses on-demand resources with Xcode. |
| CVE-2019-8840 | High | 2020-10-27 | Not applicable | No public exploit | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 11.3. Compiling with untrusted sources may lead to arbitrary code execution with user privileges. |
| CVE-2019-8806 | High | 2019-12-18 | Not applicable | No public exploit | A memory corruption issue was addressed with improved validation. This issue is fixed in Xcode 11.2. Processing a maliciously crafted file may lead to arbitrary code execution. |
| CVE-2019-8800 | High | 2019-12-18 | Not applicable | No public exploit | A memory corruption issue was addressed with improved validation. This issue is fixed in Xcode 11.2. Processing a maliciously crafted file may lead to arbitrary code execution. |
| CVE-2019-8739 | High | 2019-12-18 | Not applicable | No public exploit | A memory corruption issue was addressed with improved state management. This issue is fixed in Xcode 11.0. Processing a maliciously crafted file may lead to arbitrary code execution. |
| CVE-2019-8738 | High | 2019-12-18 | Not applicable | No public exploit | A memory corruption issue was addressed with improved state management. This issue is fixed in Xcode 11.0. Processing a maliciously crafted file may lead to arbitrary code execution. |
| CVE-2019-8724 | High | 2019-12-18 | Not applicable | No public exploit | Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4. This issue is fixed in Xcode 11.0. Compiling code without proper input validation could lead to arbitrary code execution with user privilege. |
| CVE-2019-8723 | High | 2019-12-18 | Not applicable | No public exploit | Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4. This issue is fixed in Xcode 11.0. Compiling code without proper input validation could lead to arbitrary code execution with user privilege. |
| CVE-2019-8722 | High | 2019-12-18 | Not applicable | No public exploit | Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4. This issue is fixed in Xcode 11.0. Compiling code without proper input validation could lead to arbitrary code execution with user privilege. |
| CVE-2019-8721 | High | 2019-12-18 | Not applicable | No public exploit | Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4. This issue is fixed in Xcode 11.0. Compiling code without proper input validation could lead to arbitrary code execution with user privilege. |
| CVE-2019-14379 | Critical | 2019-07-29 | Protected by Waratek | No public exploit | SubTypeValidator.java in FasterXML jackson-databind before 2.9.9.2 mishandles default typing when ehcache is used (because of net.sf.ehcache.transaction.manager.DefaultTransactionManagerLookup), leading to remote code execution. |
| CVE-2018-4357 | High | 2019-04-03 | Not applicable | No public exploit | A memory corruption issue was addressed with improved input validation. This issue affected versions prior to Xcode 10. |
| CVE-2019-3855 | High | 2019-03-21 | Outside Waratek scope | No public exploit | An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server. |
| CVE-2018-16845 | Medium | 2018-11-07 | Not applicable | No public exploit | nginx before versions 1.15.6, 1.14.1 has a vulnerability in the ngx_http_mp4_module, which might allow an attacker to cause infinite loop in a worker process, cause a worker process crash, or might result in worker process memory disclosure by using a specially crafted mp4 file. The issue only affects nginx if it is built with the ngx_http_mp4_module (the module is not built by default) and the .mp4. directive is used in the configuration file. Further, the attack is only possible if an attacker is able to trigger processing of a specially crafted mp4 file with the ngx_http_mp4_module. |
| CVE-2018-16844 | High | 2018-11-07 | Not applicable | No public exploit | nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessive CPU usage. This issue affects nginx compiled with the ngx_http_v2_module (not compiled by default) if the 'http2' option of the 'listen' directive is used in a configuration file. |
| CVE-2018-16843 | High | 2018-11-07 | Not applicable | No public exploit | nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessive memory consumption. This issue affects nginx compiled with the ngx_http_v2_module (not compiled by default) if the 'http2' option of the 'listen' directive is used in a configuration file. |
| CVE-2018-4164 | Critical | 2018-04-03 | Not applicable | No public exploit | An issue was discovered in certain Apple products. Xcode before 9.3 is affected. The issue, which is unspecified, involves the "LLVM" component. |
| CVE-2017-7167 | High | 2018-04-03 | Not applicable | No public exploit | An issue was discovered in certain Apple products. Xcode before 9.2 is affected. The issue involves the "ld64" component. A buffer overflow allows remote attackers to execute arbitrary code via crafted source code. |
| CVE-2017-7137 | High | 2017-10-23 | Not applicable | No public exploit | An issue was discovered in certain Apple products. Xcode before 9 is affected. The issue involves the "ld64" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted Mach-O file. |
| CVE-2017-7136 | High | 2017-10-23 | Not applicable | No public exploit | An issue was discovered in certain Apple products. Xcode before 9 is affected. The issue involves the "ld64" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted Mach-O file. |
| CVE-2017-7135 | High | 2017-10-23 | Not applicable | No public exploit | An issue was discovered in certain Apple products. Xcode before 9 is affected. The issue involves the "ld64" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted Mach-O file. |
| CVE-2017-7134 | High | 2017-10-23 | Not applicable | No public exploit | An issue was discovered in certain Apple products. Xcode before 9 is affected. The issue involves the "ld64" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted Mach-O file. |
| CVE-2016-4705 | High | 2016-09-18 | Not applicable | No public exploit | otool in Apple Xcode before 8 allows local users to gain privileges or cause a denial of service (memory corruption and application crash) via unspecified vectors, a different vulnerability than CVE-2016-4704. |
| CVE-2016-4704 | High | 2016-09-18 | Not applicable | No public exploit | otool in Apple Xcode before 8 allows local users to gain privileges or cause a denial of service (memory corruption and application crash) via unspecified vectors, a different vulnerability than CVE-2016-4705. |
| CVE-2016-1765 | High | 2016-03-24 | Not applicable | No public exploit | otool in Apple Xcode before 7.3 allows local users to gain privileges or cause a denial of service (memory corruption and application crash) via unspecified vectors. |
| CVE-2016-0747 | Medium | 2016-02-15 | Not applicable | No public exploit | The resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 does not properly limit CNAME resolution, which allows remote attackers to cause a denial of service (worker process resource consumption) via vectors related to arbitrary name resolution. |
| CVE-2016-0746 | Critical | 2016-02-15 | Not applicable | No public exploit | Use-after-free vulnerability in the resolver in nginx 0.6.18 through 1.8.0 and 1.9.x before 1.9.10 allows remote attackers to cause a denial of service (worker process crash) or possibly have unspecified other impact via a crafted DNS response related to CNAME response processing. |
| CVE-2015-7057 | Medium | 2015-12-11 | Not applicable | No public exploit | otools in Apple Xcode before 7.2 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted mach-o file, a different vulnerability than CVE-2015-7049. |
| CVE-2015-7056 | Medium | 2015-12-11 | Not applicable | No public exploit | IDE SCM in Apple Xcode before 7.2 does not recognize .gitignore files, which allows remote attackers to obtain sensitive information in opportunistic circumstances by leveraging the presence of a file matching an ignore pattern. |
| CVE-2015-7049 | Medium | 2015-12-11 | Not applicable | No public exploit | otools in Apple Xcode before 7.2 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted mach-o file, a different vulnerability than CVE-2015-7057. |
| CVE-2015-7030 | High | 2015-10-23 | Not applicable | No public exploit | The Swift implementation in Apple Xcode before 7.1 mishandles type conversion, which has unspecified impact and attack vectors. |
| CVE-2015-5910 | Low | 2015-09-18 | Not applicable | No public exploit | IDE Xcode Server in Apple Xcode before 7.0 does not ensure that server traffic is encrypted, which allows remote attackers to obtain sensitive information by sniffing the network. |
| CVE-2015-5909 | Medium | 2015-09-18 | Not applicable | No public exploit | IDE Xcode Server in Apple Xcode before 7.0 does not properly restrict access to repository e-mail lists, which allows remote attackers to obtain potentially sensitive build information in opportunistic circumstances by leveraging incorrect notification delivery. |
| CVE-2015-3187 | Medium | 2015-08-12 | Not applicable | No public exploit | The svn_repos_trace_node_locations function in Apache Subversion before 1.7.21 and 1.8.x before 1.8.14, when path-based authorization is used, allows remote authenticated users to obtain sensitive path information by reading the history of a node that has been moved from a hidden path. |
| CVE-2015-3184 | Medium | 2015-08-12 | Not applicable | No public exploit | mod_authz_svn in Apache Subversion 1.7.x before 1.7.21 and 1.8.x before 1.8.14, when using Apache httpd 2.4.x, does not properly restrict anonymous access, which allows remote anonymous users to read hidden files via the path name. |
| CVE-2015-3185 | Medium | 2015-07-20 | Not applicable | No public exploit | The ap_some_auth_required function in server/request.c in the Apache HTTP Server 2.4.x before 2.4.14 does not consider that a Require directive may be associated with an authorization setting rather than an authentication setting, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging the presence of a module that relies on the 2.2 API behavior. |
| CVE-2015-3027 | Medium | 2015-04-10 | Not applicable | No public exploit | Clang in LLVM, as used in Apple Xcode before 6.3, performs incorrect register allocation in a way that triggers stack storage for stack cookie pointers, which might allow context-dependent attackers to bypass a stack-guard protection mechanism via crafted input to an affected C program. |
| CVE-2015-1149 | High | 2015-04-10 | Not applicable | No public exploit | Integer overflow in the simulator in Swift in Apple Xcode before 6.3 allows context-dependent attackers to cause a denial of service or possibly have unspecified other impact by triggering an incorrect result of a type conversion. |
| CVE-2015-0251 | Medium | 2015-04-08 | Not applicable | No public exploit | The mod_dav_svn server in Subversion 1.5.0 through 1.7.19 and 1.8.0 through 1.8.11 allows remote authenticated users to spoof the svn:author property via a crafted v1 HTTP protocol request sequences. |
| CVE-2015-0248 | Medium | 2015-04-08 | Not applicable | No public exploit | The (1) mod_dav_svn and (2) svnserve servers in Subversion 1.6.0 through 1.7.19 and 1.8.0 through 1.8.11 allow remote attackers to cause a denial of service (assertion failure and abort) via crafted parameter combinations related to dynamically evaluated revision numbers. |
| CVE-2014-8108 | Medium | 2014-12-18 | Not applicable | No public exploit | The mod_dav_svn Apache HTTPD server module in Apache Subversion 1.7.x before 1.7.19 and 1.8.x before 1.8.11 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a request for a URI that triggers a lookup for a virtual transaction name that does not exist. |
| CVE-2014-3580 | Medium | 2014-12-18 | Not applicable | No public exploit | The mod_dav_svn Apache HTTPD server module in Apache Subversion 1.x before 1.7.19 and 1.8.x before 1.8.11 allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) via a REPORT request for a resource that does not exist. |
| CVE-2014-6394 | High | 2014-10-08 | Not applicable | No public exploit | visionmedia send before 0.8.4 for Node.js uses a partial comparison for verifying whether a directory is within the document root, which allows remote attackers to access restricted directories, as demonstrated using "public-restricted" under a "public" directory. |
| CVE-2014-3528 | Medium | 2014-08-19 | Not applicable | No public exploit | Apache Subversion 1.0.0 through 1.7.x before 1.7.17 and 1.8.x before 1.8.10 uses an MD5 hash of the URL and authentication realm to store cached credentials, which makes it easier for remote servers to obtain the credentials via a crafted authentication realm. |
| CVE-2014-3522 | Medium | 2014-08-19 | Not applicable | No public exploit | The Serf RA layer in Apache Subversion 1.4.0 through 1.7.x before 1.7.18 and 1.8.x before 1.8.10 does not properly handle wildcards in the Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof servers via a crafted certificate. |
| CVE-2012-3698 | Medium | 2012-07-26 | Not applicable | No public exploit | Apple Xcode before 4.4 does not properly compose a designated requirement (DR) during signing of programs that lack bundle identifiers, which allows remote attackers to read keychain entries via a crafted app, as demonstrated by the keychain entries of a (1) helper tool or (2) command-line tool. |
| CVE-2008-2318 | Medium | 2008-07-14 | Not applicable | No public exploit | The WOHyperlink implementation in WebObjects in Apple Xcode tools before 3.1 appends local session IDs to generated non-local URLs, which allows remote attackers to obtain potentially sensitive information by reading the requests for these URLs. |
| CVE-2006-5328 | High | 2006-10-17 | Not applicable | No public exploit | OpenBase SQL 10.0 and earlier, as used in Apple Xcode 2.2 2.2 and earlier and possibly other products, allows local users to create arbitrary files via a symlink attack on the simulation.sql file. |
| CVE-2006-5327 | High | 2006-10-17 | Not applicable | No public exploit | Untrusted search path vulnerability in OpenBase SQL 10.0 and earlier, as used in Apple Xcode 2.2 2.2 and earlier and possibly other products, allows local users to execute arbitrary code via a modified PATH that references a malicious gzip program, which is executed by gnutar with certain TAR_OPTIONS environment variable settings, when gnutar is invoked by OpenBase. |
| CVE-2006-1466 | Medium | 2006-05-24 | Not applicable | No public exploit | Xcode Tools before 2.3 for Mac OS X 10.4, when running the WebObjects plugin, allows remote attackers to access or modify WebObjects projects through a network service. |