Product:

Xcode

(Apple)
Repositories • https://github.com/apache/httpd
• https://github.com/visionmedia/send
#Vulnerabilities 77
Date Id Summary Products Score Patch Annotated
2017-10-22 CVE-2017-7134 An issue was discovered in certain Apple products. Xcode before 9 is affected. The issue involves the "ld64" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted Mach-O file. Xcode 7.8
2016-09-18 CVE-2016-4705 otool in Apple Xcode before 8 allows local users to gain privileges or cause a denial of service (memory corruption and application crash) via unspecified vectors, a different vulnerability than CVE-2016-4704. Xcode 7.8
2016-09-18 CVE-2016-4704 otool in Apple Xcode before 8 allows local users to gain privileges or cause a denial of service (memory corruption and application crash) via unspecified vectors, a different vulnerability than CVE-2016-4705. Xcode 7.8
2016-03-24 CVE-2016-1765 otool in Apple Xcode before 7.3 allows local users to gain privileges or cause a denial of service (memory corruption and application crash) via unspecified vectors. Xcode 7.8
2015-12-11 CVE-2015-7057 otools in Apple Xcode before 7.2 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted mach-o file, a different vulnerability than CVE-2015-7049. Xcode N/A
2015-12-11 CVE-2015-7056 IDE SCM in Apple Xcode before 7.2 does not recognize .gitignore files, which allows remote attackers to obtain sensitive information in opportunistic circumstances by leveraging the presence of a file matching an ignore pattern. Xcode N/A
2015-12-11 CVE-2015-7049 otools in Apple Xcode before 7.2 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted mach-o file, a different vulnerability than CVE-2015-7057. Xcode N/A
2015-10-23 CVE-2015-7030 The Swift implementation in Apple Xcode before 7.1 mishandles type conversion, which has unspecified impact and attack vectors. Xcode N/A
2015-09-18 CVE-2015-5910 IDE Xcode Server in Apple Xcode before 7.0 does not ensure that server traffic is encrypted, which allows remote attackers to obtain sensitive information by sniffing the network. Xcode N/A
2015-09-18 CVE-2015-5909 IDE Xcode Server in Apple Xcode before 7.0 does not properly restrict access to repository e-mail lists, which allows remote attackers to obtain potentially sensitive build information in opportunistic circumstances by leveraging incorrect notification delivery. Xcode N/A