Vulnerabilities > Apple > Xcode > 3.1.2

DATE CVE VULNERABILITY TITLE RISK
2015-08-12 CVE-2015-3184 Information Exposure vulnerability in multiple products
mod_authz_svn in Apache Subversion 1.7.x before 1.7.21 and 1.8.x before 1.8.14, when using Apache httpd 2.4.x, does not properly restrict anonymous access, which allows remote anonymous users to read hidden files via the path name.
network
low complexity
apple apache CWE-200
5.0
2015-04-10 CVE-2015-3027 Permissions, Privileges, and Access Controls vulnerability in Apple Xcode
Clang in LLVM, as used in Apple Xcode before 6.3, performs incorrect register allocation in a way that triggers stack storage for stack cookie pointers, which might allow context-dependent attackers to bypass a stack-guard protection mechanism via crafted input to an affected C program.
network
low complexity
apple CWE-264
5.0
2015-04-10 CVE-2015-1149 Numeric Errors vulnerability in Apple Xcode
Integer overflow in the simulator in Swift in Apple Xcode before 6.3 allows context-dependent attackers to cause a denial of service or possibly have unspecified other impact by triggering an incorrect result of a type conversion.
network
low complexity
apple CWE-189
7.5
2012-07-26 CVE-2012-3698 Permissions, Privileges, and Access Controls vulnerability in Apple Xcode
Apple Xcode before 4.4 does not properly compose a designated requirement (DR) during signing of programs that lack bundle identifiers, which allows remote attackers to read keychain entries via a crafted app, as demonstrated by the keychain entries of a (1) helper tool or (2) command-line tool.
network
low complexity
apple CWE-264
5.0