SU
Product
Subversion
7
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Subversion to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2009-2411 | – | Aug 7 | Multiple integer overflows in the libsvn_delta library in Subversion before 1.5.7, and 1.6.x before 1.6.4, allow remote authenticated users and remote Subversion servers to… Affected: through 1.5.6; 0.22.1; 0.23.0; 0.24.0; 0.24.1; 0.24.2; +34 more |
| CVE-2007-3846 | – | Aug 28 | Directory traversal vulnerability in Subversion before 1.4.5, as used by TortoiseSVN before 1.4.5 and possibly other products, when run on Windows-based systems, allows remote… Affected: through 1.4.4 |
| CVE-2007-2448 | – | Jun 14 | Subversion 1.4.3 and earlier does not properly implement the "partial access" privilege for users who have access to changed paths but not copied paths, which allows remote… Affected: through 1.4.3 |
| CVE-2004-1438 | – | Dec 31 | The mod_authz_svn Apache module for Subversion 1.0.4-r1 and earlier allows remote authenticated users, with write access to the repository, to read unauthorized parts of the… Affected: 1.0; 1.0.1; 1.0.2; 1.0.3; 1.0.4; 1.0.5 |
| CVE-2004-0749 | – | Dec 23 | The mod_authz_svn module in Subversion 1.0.7 and earlier does not properly restrict access to all metadata on unreadable paths, which could allow remote attackers to gain… Affected: 1.0; 1.0.1; 1.0.2; 1.0.3; 1.0.4; 1.0.5; +5 more |
| CVE-2004-0413 | – | Aug 6 | libsvn_ra_svn in Subversion 1.0.4 trusts the length field of (1) svn://, (2) svn+ssh://, and (3) other svn protocol URL strings, which allows remote attackers to cause a denial of… Affected: 1.0; 1.0.1; 1.0.2; 1.0.3; 1.0.4 |
| CVE-2004-0397 | – | Jul 7 | Stack-based buffer overflow during the apr_time_t data conversion in Subversion 1.0.2 and earlier allows remote attackers to execute arbitrary code via a (1) DAV2 REPORT query or… Affected: 1.0; 1.0.1; 1.0.2 |
Showing 7