GCVE - cpe:2.3:a:apple:xcode:7.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:apple:xcode:7.0:*:*:*:*:*:*:*

part: a version: 7.0 update: *

Vendor	Apple (`c2b419d0-9f0f-51c1-88dc-2e204a98e1c7`)
Product	Xcode (`4fd815bc-7ee0-5544-a1e1-32074d212f1e`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2015-3185`	vulnerable	2026-06-08 05:06:37.458620	Details available The ap_some_auth_required function in server/request.c in the Apache HTTP Server 2.4.x before 2.4.14 does not consider that a Require directive may be associated with an authorization setting rather than an authentication setting, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging the presence of a module that relies on the 2.2 API behavior. Published: 2015-07-20T23:00:00.000Z Updated: 2024-08-06T05:39:31.678Z Open on db.gcve.eu Reference links http://lists.opensuse.org/opensuse-updates/2015-10/msg00011.html http://httpd.apache.org/security/vulnerabilities_24.html https://github.com/apache/httpd/commit/cd2b7a26c776b0754fb98426a67804fd48118708 http://rhn.redhat.com/errata/RHSA-2015-1667.html https://support.apple.com/HT205217	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-0251`	vulnerable	2026-06-08 05:06:14.141031	Details available The mod_dav_svn server in Subversion 1.5.0 through 1.7.19 and 1.8.0 through 1.8.11 allows remote authenticated users to spoof the svn:author property via a crafted v1 HTTP protocol request sequences. Published: 2015-04-08T18:00:00.000Z Updated: 2024-08-06T04:03:10.727Z Open on db.gcve.eu Reference links http://rhn.redhat.com/errata/RHSA-2015-1742.html http://www.debian.org/security/2015/dsa-3231 http://rhn.redhat.com/errata/RHSA-2015-1633.html http://seclists.org/fulldisclosure/2015/Jun/32 http://www.securityfocus.com/bid/74259	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-0248`	vulnerable	2026-06-08 05:06:14.133231	Details available The (1) mod_dav_svn and (2) svnserve servers in Subversion 1.6.0 through 1.7.19 and 1.8.0 through 1.8.11 allow remote attackers to cause a denial of service (assertion failure and abort) via crafted parameter combinations related to dynamically evaluated revision numbers. Published: 2015-04-08T18:00:00.000Z Updated: 2024-08-06T04:03:10.500Z Open on db.gcve.eu Reference links http://rhn.redhat.com/errata/RHSA-2015-1742.html http://www.debian.org/security/2015/dsa-3231 http://rhn.redhat.com/errata/RHSA-2015-1633.html http://www.securityfocus.com/bid/74260 http://www.securitytracker.com/id/1033214	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-6394`	vulnerable	2026-06-08 05:05:57.630325	Details available visionmedia send before 0.8.4 for Node.js uses a partial comparison for verifying whether a directory is within the document root, which allows remote attackers to access restricted directories, as demonstrated using "public-restricted" under a "public" directory. Published: 2014-10-08T17:00:00.000Z Updated: 2024-08-06T12:17:23.629Z Open on db.gcve.eu Reference links http://secunia.com/advisories/62170 http://www.openwall.com/lists/oss-security/2014/09/30/10 https://bugzilla.redhat.com/show_bug.cgi?id=1146063 https://nodesecurity.io/advisories/send-directory-traversal https://github.com/visionmedia/send/pull/59	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.