Vulnerabilities > Apple > Xcode
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2014-08-19 | CVE-2014-3522 | Improper Validation of Certificate With Host Mismatch vulnerability in multiple products The Serf RA layer in Apache Subversion 1.4.0 through 1.7.x before 1.7.18 and 1.8.x before 1.8.10 does not properly handle wildcards in the Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof servers via a crafted certificate. | 4.0 |
| 2012-07-26 | CVE-2012-3698 | Permissions, Privileges, and Access Controls vulnerability in Apple Xcode Apple Xcode before 4.4 does not properly compose a designated requirement (DR) during signing of programs that lack bundle identifiers, which allows remote attackers to read keychain entries via a crafted app, as demonstrated by the keychain entries of a (1) helper tool or (2) command-line tool. | 5.0 |
| 2008-07-14 | CVE-2008-2318 | Information Exposure vulnerability in Apple Xcode and Xcode Tools The WOHyperlink implementation in WebObjects in Apple Xcode tools before 3.1 appends local session IDs to generated non-local URLs, which allows remote attackers to obtain potentially sensitive information by reading the requests for these URLs. | 5.0 |
| 2006-05-24 | CVE-2006-1466 | Remote Access vulnerability in Apple Xcode Tools WebObjects Unauthorized Xcode Tools before 2.3 for Mac OS X 10.4, when running the WebObjects plugin, allows remote attackers to access or modify WebObjects projects through a network service. | 4.0 |
| 2004-12-31 | CVE-2004-2687 | Configuration vulnerability in multiple products distcc 2.x, as used in XCode 1.5 and others, when not configured to restrict access to the server port, allows remote attackers to execute arbitrary commands via compilation jobs, which are executed by the server without authorization checks. | 9.3 |