- EPSS 0.31%
- Veröffentlicht 18.09.2015 12:00:50
- Zuletzt bearbeitet 12.04.2025 10:46:40
IDE Xcode Server in Apple Xcode before 7.0 does not properly restrict access to repository e-mail lists, which allows remote attackers to obtain potentially sensitive build information in opportunistic circumstances by leveraging incorrect notificati...
- EPSS 0.86%
- Veröffentlicht 12.08.2015 14:59:12
- Zuletzt bearbeitet 12.04.2025 10:46:40
The svn_repos_trace_node_locations function in Apache Subversion before 1.7.21 and 1.8.x before 1.8.14, when path-based authorization is used, allows remote authenticated users to obtain sensitive path information by reading the history of a node tha...
- EPSS 21.35%
- Veröffentlicht 12.08.2015 14:59:10
- Zuletzt bearbeitet 12.04.2025 10:46:40
mod_authz_svn in Apache Subversion 1.7.x before 1.7.21 and 1.8.x before 1.8.14, when using Apache httpd 2.4.x, does not properly restrict anonymous access, which allows remote anonymous users to read hidden files via the path name.
CVE-2015-3185
- EPSS 10.32%
- Veröffentlicht 20.07.2015 23:59:03
- Zuletzt bearbeitet 12.04.2025 10:46:40
The ap_some_auth_required function in server/request.c in the Apache HTTP Server 2.4.x before 2.4.14 does not consider that a Require directive may be associated with an authorization setting rather than an authentication setting, which allows remote...
- EPSS 0.31%
- Veröffentlicht 10.04.2015 15:00:11
- Zuletzt bearbeitet 12.04.2025 10:46:40
Clang in LLVM, as used in Apple Xcode before 6.3, performs incorrect register allocation in a way that triggers stack storage for stack cookie pointers, which might allow context-dependent attackers to bypass a stack-guard protection mechanism via cr...
CVE-2015-1149
- EPSS 0.4%
- Veröffentlicht 10.04.2015 14:59:59
- Zuletzt bearbeitet 12.04.2025 10:46:40
Integer overflow in the simulator in Swift in Apple Xcode before 6.3 allows context-dependent attackers to cause a denial of service or possibly have unspecified other impact by triggering an incorrect result of a type conversion.
- EPSS 1.52%
- Veröffentlicht 08.04.2015 18:59:02
- Zuletzt bearbeitet 12.04.2025 10:46:40
The mod_dav_svn server in Subversion 1.5.0 through 1.7.19 and 1.8.0 through 1.8.11 allows remote authenticated users to spoof the svn:author property via a crafted v1 HTTP protocol request sequences.
- EPSS 17.76%
- Veröffentlicht 08.04.2015 18:59:01
- Zuletzt bearbeitet 12.04.2025 10:46:40
The (1) mod_dav_svn and (2) svnserve servers in Subversion 1.6.0 through 1.7.19 and 1.8.0 through 1.8.11 allow remote attackers to cause a denial of service (assertion failure and abort) via crafted parameter combinations related to dynamically evalu...
- EPSS 7.11%
- Veröffentlicht 18.12.2014 15:59:01
- Zuletzt bearbeitet 12.04.2025 10:46:40
The mod_dav_svn Apache HTTPD server module in Apache Subversion 1.7.x before 1.7.19 and 1.8.x before 1.8.11 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a request for a URI that triggers a lookup for a...
- EPSS 18.54%
- Veröffentlicht 18.12.2014 15:59:00
- Zuletzt bearbeitet 12.04.2025 10:46:40
The mod_dav_svn Apache HTTPD server module in Apache Subversion 1.x before 1.7.19 and 1.8.x before 1.8.11 allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) via a REPORT request for a resource that does n...