GCVE - cpe:2.3:a:apple:xcode:6.1.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:apple:xcode:6.1.1:*:*:*:*:*:*:*

part: a version: 6.1.1 update: *

Vendor	Apple (`c2b419d0-9f0f-51c1-88dc-2e204a98e1c7`)
Product	Xcode (`4fd815bc-7ee0-5544-a1e1-32074d212f1e`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-8108`	vulnerable	2026-06-08 05:06:07.638224	Details available The mod_dav_svn Apache HTTPD server module in Apache Subversion 1.7.x before 1.7.19 and 1.8.x before 1.8.11 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a request for a URI that triggers a lookup for a virtual transaction name that does not exist. Published: 2014-12-18T15:00:00.000Z Updated: 2024-08-06T13:10:50.164Z Open on db.gcve.eu Reference links http://subversion.apache.org/security/CVE-2014-8108-advisory.txt http://rhn.redhat.com/errata/RHSA-2015-0166.html https://support.apple.com/HT204427 http://www.securityfocus.com/bid/71725 http://lists.apple.com/archives/security-announce/2015/Mar/msg00003.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-3580`	vulnerable	2026-06-08 05:05:33.591825	Details available The mod_dav_svn Apache HTTPD server module in Apache Subversion 1.x before 1.7.19 and 1.8.x before 1.8.11 allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) via a REPORT request for a resource that does not exist. Published: 2014-12-18T15:00:00.000Z Updated: 2024-08-06T10:50:17.546Z Open on db.gcve.eu Reference links http://www.debian.org/security/2014/dsa-3107 http://rhn.redhat.com/errata/RHSA-2015-0166.html https://support.apple.com/HT204427 http://www.securityfocus.com/bid/71726 http://subversion.apache.org/security/CVE-2014-3580-advisory.txt	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-3528`	vulnerable	2026-06-08 05:05:33.282223	Details available Apache Subversion 1.0.0 through 1.7.x before 1.7.17 and 1.8.x before 1.8.10 uses an MD5 hash of the URL and authentication realm to store cached credentials, which makes it easier for remote servers to obtain the credentials via a crafted authentication realm. Published: 2014-08-19T18:00:00.000Z Updated: 2024-08-06T10:50:16.884Z Open on db.gcve.eu Reference links http://secunia.com/advisories/59432 http://www.ubuntu.com/usn/USN-2316-1 http://rhn.redhat.com/errata/RHSA-2015-0166.html https://support.apple.com/HT204427 http://www.securityfocus.com/bid/68995	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-3522`	vulnerable	2026-06-08 05:05:33.219367	Details available The Serf RA layer in Apache Subversion 1.4.0 through 1.7.x before 1.7.18 and 1.8.x before 1.8.10 does not properly handle wildcards in the Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof servers via a crafted certificate. Published: 2014-08-19T18:00:00.000Z Updated: 2024-08-06T10:50:16.906Z Open on db.gcve.eu Reference links http://secunia.com/advisories/59432 http://www.ubuntu.com/usn/USN-2316-1 https://support.apple.com/HT204427 http://www.osvdb.org/109996 http://lists.apple.com/archives/security-announce/2015/Mar/msg00003.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.