Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-5874 State: PUBLISHED Published: 2015-09-18T10:00:00 Last Updated: 2024-08-06T07:06:34.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: CoreText in Apple iOS before 9 and iTunes before 12.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT205221 - http://www.securitytracker.com/id/1033609 - https://support.apple.com/HT205212 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html - http://www.securityfocus.com/bid/76763 - https://support.apple.com/HT205267 - http://lists.apple
015/Sep/msg00008.html - http://www.securityfocus.com/bid/76763 - https://support.apple.com/HT205267 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00005.html - http://lists.apple.com/archives/security-announce/2015/Sep/msg00003.html - https://support.apple.com/HT205213 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.html
CVE ID: CVE-2015-5875 State: PUBLISHED Published: 2015-10-09T01:00:00 Last Updated: 2024-08-06T07:06:33.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Notes in Apple OS X before 10.11 allows local users to inject arbitrary web script or HTML via crafted text. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033703 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html - https://support.apple.com/HT205267 - http://www.securityfocus.com/bid/76908
CVE ID: CVE-2015-5876 State: PUBLISHED Published: 2015-09-18T10:00:00 Last Updated: 2024-08-06T07:06:34.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: dyld in Dev Tools in Apple iOS before 9 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033609 - https://support.apple.com/HT205212 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html - http://www.securityfocus.com/bid/76764 - https://support.apple.com/HT205267 - http://lists.apple.com/archives/security-announce/2015/Sep
ityfocus.com/bid/76764 - https://support.apple.com/HT205267 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00005.html - https://support.apple.com/HT205213 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.html
CVE ID: CVE-2015-5877 State: PUBLISHED Published: 2015-10-09T01:00:00 Last Updated: 2024-08-06T07:06:34.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Intel Graphics Driver component in Apple OS X before 10.11 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5830. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033703 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html - https://support.apple.com/HT205267
CVE ID: CVE-2015-5878 State: PUBLISHED Published: 2015-10-09T01:00:00 Last Updated: 2024-08-06T07:06:34.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: Notes in Apple OS X before 10.11 misparses links, which allows local users to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033703 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html - https://support.apple.com/HT205267 - http://www.securityfocus.com/bid/76908
CVE ID: CVE-2015-5879 State: PUBLISHED Published: 2015-09-18T10:00:00 Last Updated: 2024-08-06T07:06:34.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: XNU in the kernel in Apple iOS before 9 does not properly validate the headers of TCP packets, which allows remote attackers to bypass the sequence-number protection mechanism and cause a denial of service (TCP connection disruption) via a crafted header. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033609 - https://support.apple.com/HT205212 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html - http://www.securityfocus.com/bid/76764 - https://suppor
ts.apple.com/archives/security-announce/2015/Sep/msg00008.html - http://www.securityfocus.com/bid/76764 - https://support.apple.com/HT205267 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.html
CVE ID: CVE-2015-5880 State: PUBLISHED Published: 2015-09-18T10:00:00 Last Updated: 2024-08-06T07:06:34.204Z Vendors: n/a Products: n/a Problem Types: n/a Description: CoreAnimation in Apple iOS before 9 allows attackers to bypass intended IOSurface restrictions and obtain screen-framebuffer access via a crafted background app. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033609 - https://support.apple.com/HT205212 - http://www.securityfocus.com/bid/76764 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.html
CVE ID: CVE-2015-5881 State: REJECTED Published: 2015-10-09T01:00:00 Last Updated: 2015-10-09T04:57:02 Description: No description available.
CVE ID: CVE-2015-5882 State: PUBLISHED Published: 2015-09-18T10:00:00 Last Updated: 2024-08-06T07:06:34.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: The processor_set_tasks API implementation in Apple iOS before 9 allows local users to bypass an entitlement protection mechanism and obtain access to the task ports of arbitrary processes by leveraging root privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033609 - https://support.apple.com/HT205212 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html - http://www.securityfocus.com/bid/76764 - https://support.apple.com/HT205267 - http://lists.
nce/2015/Sep/msg00008.html - http://www.securityfocus.com/bid/76764 - https://support.apple.com/HT205267 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00005.html - https://support.apple.com/HT205213 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.html
CVE ID: CVE-2015-5883 State: PUBLISHED Published: 2015-10-09T01:00:00 Last Updated: 2024-08-06T07:06:34.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bidirectional text-display and text-selection implementations in Terminal in Apple OS X before 10.11 interpret directional override formatting characters differently, which allows remote attackers to spoof the content of a text document via a crafted character sequence. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033703 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html - https://support.apple.com/HT205267 - http://www.securityfocus.com/bid/769
ves/security-announce/2015/Sep/msg00008.html - https://support.apple.com/HT205267 - http://www.securityfocus.com/bid/76908
CVE ID: CVE-2015-5884 State: PUBLISHED Published: 2015-10-09T01:00:00 Last Updated: 2024-08-06T07:06:33.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Mail Drop feature in Mail in Apple OS X before 10.11 mishandles encryption parameters for attachments, which makes it easier for remote attackers to obtain sensitive information by sniffing the network during transmission of an S/MIME e-mail message with a large attachment. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033703 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html - https://support.apple.com/HT205267 - http://www.securityfocus.com/bid
rchives/security-announce/2015/Sep/msg00008.html - https://support.apple.com/HT205267 - http://www.securityfocus.com/bid/76908
CVE ID: CVE-2015-5885 State: PUBLISHED Published: 2015-09-18T10:00:00 Last Updated: 2024-08-06T07:06:34.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CFNetwork Cookies component in Apple iOS before 9 allows remote attackers to track users via vectors involving a cookie for a top-level domain. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033609 - https://support.apple.com/HT205212 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html - http://www.securityfocus.com/bid/76764 - https://support.apple.com/HT205267 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00005.html - https://su
tps://support.apple.com/HT205267 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00005.html - https://support.apple.com/HT205213 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.html
CVE ID: CVE-2015-5886 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-5887 State: PUBLISHED Published: 2015-10-09T01:00:00 Last Updated: 2024-08-06T07:06:34.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TLS Handshake Protocol implementation in Secure Transport in Apple OS X before 10.11 accepts a Certificate Request message within a session in which no Server Key Exchange message has been sent, which allows remote attackers to have an unspecified impact via crafted TLS data. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033703 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html - https://support.apple.com/HT205267 - http://www.securityfocus.com/b
/archives/security-announce/2015/Sep/msg00008.html - https://support.apple.com/HT205267 - http://www.securityfocus.com/bid/76908
CVE ID: CVE-2015-5888 State: PUBLISHED Published: 2015-10-09T01:00:00 Last Updated: 2024-08-06T07:06:34.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Install Framework Legacy component in Apple OS X before 10.11 allows local users to obtain root privileges via vectors involving a privileged executable file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033703 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html - https://support.apple.com/HT205267
CVE ID: CVE-2015-5889 State: PUBLISHED Published: 2015-10-09T01:00:00 Last Updated: 2024-08-06T07:06:34.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: rsh in the remote_cmds component in Apple OS X before 10.11 allows local users to obtain root privileges via vectors involving environment variables. Additional Analyst Notes: - CVE Program Container: References: - http://www.rapid7.com/db/modules/exploit/osx/local/rsh_libmalloc - http://www.securitytracker.com/id/1033703 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html - http://seclists.org/fulldisclosure/2015/Oct/5 - http://packetstormsecurity.com/files/133826/issetugid-rsh-libmalloc-OS-X-Local-Root
ists.org/fulldisclosure/2015/Oct/5 - http://packetstormsecurity.com/files/133826/issetugid-rsh-libmalloc-OS-X-Local-Root.html - https://support.apple.com/HT205267 - https://www.exploit-db.com/exploits/38540/ - http://www.securityfocus.com/bid/76908 - https://www.exploit-db.com/exploits/38371/ - http://packetstormsecurity.com/files/134087/Mac-OS-X-10.9.5-10.10.5-rsh-libmalloc-Privilege-Escalation.html
CVE ID: CVE-2015-5890 State: PUBLISHED Published: 2015-10-09T01:00:00 Last Updated: 2024-08-06T07:06:34.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: IOGraphics in Apple OS X before 10.11 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5871, CVE-2015-5872, and CVE-2015-5873. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033703 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html - https://support.apple.com/HT205267
CVE ID: CVE-2015-5891 State: PUBLISHED Published: 2015-10-09T01:00:00 Last Updated: 2024-08-06T07:06:34.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SMB implementation in the kernel in Apple OS X before 10.11 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033703 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html - https://support.apple.com/HT205267 - http://www.securityfocus.com/bid/76908
CVE ID: CVE-2015-5892 State: PUBLISHED Published: 2015-09-18T10:00:00 Last Updated: 2024-08-06T07:06:34.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: Siri in Apple iOS before 9 allows physically proximate attackers to bypass an intended client-side protection mechanism and obtain sensitive content-notification information by listening to a device in the lock-screen state. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033609 - https://support.apple.com/HT205212 - http://www.securityfocus.com/bid/76764 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.html
CVE ID: CVE-2015-5893 State: PUBLISHED Published: 2015-10-09T01:00:00 Last Updated: 2024-08-06T07:06:34.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: SMBClient in SMB in Apple OS X before 10.11 allows local users to obtain sensitive kernel memory-layout information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033703 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html - https://support.apple.com/HT205267 - http://www.securityfocus.com/bid/76908
CVE ID: CVE-2015-5894 State: PUBLISHED Published: 2015-10-09T01:00:00 Last Updated: 2024-08-06T07:06:34.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: The X.509 certificate-trust implementation in Apple OS X before 10.11 does not recognize that the kSecRevocationRequirePositiveResponse flag implies a revocation-checking requirement, which makes it easier for man-in-the-middle attackers to spoof endpoints by leveraging access to a revoked certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033703 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html - https://support.apple.com/HT205267 - http://
http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html - https://support.apple.com/HT205267 - http://www.securityfocus.com/bid/76908
CVE ID: CVE-2015-5895 State: PUBLISHED Published: 2015-09-18T10:00:00 Last Updated: 2024-08-06T07:06:34.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in SQLite before 3.8.10.2, as used in Apple iOS before 9, have unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033609 - https://support.apple.com/HT205212 - http://www.securityfocus.com/bid/76764 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.html
CVE ID: CVE-2015-5896 State: PUBLISHED Published: 2015-09-18T10:00:00 Last Updated: 2024-08-06T07:06:34.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Apple iOS before 9 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5868 and CVE-2015-5903. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033609 - https://support.apple.com/HT205212 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html - http://www.securityfocus.com/bid/76764 - https://support.apple.com/HT205267 - http://lists.apple.com/a
CVE ID: CVE-2015-5897 State: PUBLISHED Published: 2015-10-09T01:00:00 Last Updated: 2024-08-06T07:06:34.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Address Book framework in Apple OS X before 10.11 allows local users to gain privileges by using an environment variable to inject code into processes that rely on this framework. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033703 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html - https://support.apple.com/HT205267
CVE ID: CVE-2015-5898 State: PUBLISHED Published: 2015-09-18T10:00:00 Last Updated: 2024-08-06T07:06:34.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: CFNetwork in Apple iOS before 9 relies on the hardware UID for its cache encryption key, which makes it easier for physically proximate attackers to obtain sensitive information by obtaining this UID. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033609 - https://support.apple.com/HT205212 - http://www.securityfocus.com/bid/76764 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00005.html - https://support.apple.com/HT205213 - http://lists.apple.com/archives/
rchives/security-announce/2015/Sep/msg00005.html - https://support.apple.com/HT205213 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.html
CVE ID: CVE-2015-5899 State: PUBLISHED Published: 2015-09-18T10:00:00 Last Updated: 2024-08-06T07:06:34.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: libpthread in the kernel in Apple iOS before 9 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033609 - https://support.apple.com/HT205212 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html - http://www.securityfocus.com/bid/76764 - https://support.apple.com/HT205267 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00005.html -
/76764 - https://support.apple.com/HT205267 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00005.html - https://support.apple.com/HT205213 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.html
CVE ID: CVE-2015-5900 State: PUBLISHED Published: 2015-10-09T01:00:00 Last Updated: 2024-08-06T07:06:34.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: The protected range register in the EFI component in Apple OS X before 10.11 has an incorrect value, which allows attackers to cause a denial of service (boot failure) via a crafted app that writes to an unintended address. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033703 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html - https://support.apple.com/HT205267
CVE ID: CVE-2015-5901 State: PUBLISHED Published: 2015-10-09T01:00:00 Last Updated: 2024-08-06T07:06:34.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Secure Empty Trash feature in Finder in Apple OS X before 10.11 improperly deletes Trash files, which might allow local users to obtain sensitive information by reading storage media, as demonstrated by reading a flash drive. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033703 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html - https://support.apple.com/HT205267
CVE ID: CVE-2015-5902 State: PUBLISHED Published: 2015-10-09T01:00:00 Last Updated: 2024-08-06T07:06:34.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: The debugging feature in the kernel in Apple OS X before 10.11 mismanages state, which allows local users to cause a denial of service via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033703 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html - https://support.apple.com/HT205267 - http://www.securityfocus.com/bid/76908
CVE ID: CVE-2015-5903 State: PUBLISHED Published: 2015-09-18T10:00:00 Last Updated: 2024-08-06T07:06:34.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Apple iOS before 9 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5868 and CVE-2015-5896. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033609 - https://support.apple.com/HT205212 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html - http://www.securityfocus.com/bid/76764 - https://support.apple.com/HT205267 - http://lists.apple.com/a
CVE ID: CVE-2015-5904 State: PUBLISHED Published: 2015-09-18T10:00:00 Last Updated: 2024-08-06T07:06:34.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: Safari in Apple iOS before 9 allows remote attackers to spoof the relationship between URLs and web content via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033609 - https://support.apple.com/HT205212 - http://www.securityfocus.com/bid/76764 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.html
CVE ID: CVE-2015-5905 State: PUBLISHED Published: 2015-09-18T10:00:00 Last Updated: 2024-08-06T07:06:34.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: Safari in Apple iOS before 9 allows remote attackers to spoof the relationship between URLs and web content via a crafted window opener on a web site. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033609 - https://support.apple.com/HT205212 - http://www.securityfocus.com/bid/76764 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.html
CVE ID: CVE-2015-5906 State: PUBLISHED Published: 2015-09-18T10:00:00 Last Updated: 2024-08-06T07:06:34.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTML form implementation in WebKit in Apple iOS before 9 does not prevent QuickType access to the final character of a password, which might make it easier for remote attackers to discover a password by leveraging a later prediction containing that character. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033609 - https://support.apple.com/HT205212 - http://www.securityfocus.com/bid/76766 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.html
CVE ID: CVE-2015-5907 State: PUBLISHED Published: 2015-09-18T10:00:00 Last Updated: 2024-08-06T07:06:34.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit in Apple iOS before 9 allows man-in-the-middle attackers to conduct redirection attacks by leveraging the mishandling of the resource cache of an SSL web site with an invalid X.509 certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033609 - https://support.apple.com/HT205212 - http://www.securityfocus.com/bid/76766 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.html
CVE ID: CVE-2015-5908 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-5909 State: PUBLISHED Published: 2015-09-18T10:00:00 Last Updated: 2024-08-06T07:06:34.730Z Vendors: n/a Products: n/a Problem Types: n/a Description: IDE Xcode Server in Apple Xcode before 7.0 does not properly restrict access to repository e-mail lists, which allows remote attackers to obtain potentially sensitive build information in opportunistic circumstances by leveraging incorrect notification delivery. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033596 - https://support.apple.com/HT205217 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00002.html