Vulnerabilities
Vulnerable Software
Apple:  >> Xcode  >> 2.4.0  Security Vulnerabilities
otool in Apple Xcode before 8 allows local users to gain privileges or cause a denial of service (memory corruption and application crash) via unspecified vectors, a different vulnerability than CVE-2016-4705.
CVSS Score
7.8
EPSS Score
0.001
Published
2016-09-18
otool in Apple Xcode before 7.3 allows local users to gain privileges or cause a denial of service (memory corruption and application crash) via unspecified vectors.
CVSS Score
7.8
EPSS Score
0.001
Published
2016-03-24
The resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 does not properly limit CNAME resolution, which allows remote attackers to cause a denial of service (worker process resource consumption) via vectors related to arbitrary name resolution.
CVSS Score
5.3
EPSS Score
0.363
Published
2016-02-15
Use-after-free vulnerability in the resolver in nginx 0.6.18 through 1.8.0 and 1.9.x before 1.9.10 allows remote attackers to cause a denial of service (worker process crash) or possibly have unspecified other impact via a crafted DNS response related to CNAME response processing.
CVSS Score
9.8
EPSS Score
0.276
Published
2016-02-15
The resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 allows remote attackers to cause a denial of service (invalid pointer dereference and worker process crash) via a crafted UDP DNS response.
CVSS Score
7.5
EPSS Score
0.768
Published
2016-02-15
otools in Apple Xcode before 7.2 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted mach-o file, a different vulnerability than CVE-2015-7049.
CVSS Score
4.6
EPSS Score
0.001
Published
2015-12-11
IDE SCM in Apple Xcode before 7.2 does not recognize .gitignore files, which allows remote attackers to obtain sensitive information in opportunistic circumstances by leveraging the presence of a file matching an ignore pattern.
CVSS Score
5.0
EPSS Score
0.003
Published
2015-12-11
otools in Apple Xcode before 7.2 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted mach-o file, a different vulnerability than CVE-2015-7057.
CVSS Score
4.6
EPSS Score
0.001
Published
2015-12-11
The Swift implementation in Apple Xcode before 7.1 mishandles type conversion, which has unspecified impact and attack vectors.
CVSS Score
7.5
EPSS Score
0.004
Published
2015-10-23
IDE Xcode Server in Apple Xcode before 7.0 does not ensure that server traffic is encrypted, which allows remote attackers to obtain sensitive information by sniffing the network.
CVSS Score
3.3
EPSS Score
0.001
Published
2015-09-18


Contact Us

Shodan ® - All rights reserved