VI
Vendor
viewvc
21
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-54141 | VI viewvc viewvc | 7.5 | Jul 22 | ViewVC's standalone server exposes arbitrary server filesystem content |
| CVE-2023-22464 | VI Viewvc Viewvc | 5.4 | Jan 4 | ViewVC is a browser interface for CVS and Subversion version control repositories |
| CVE-2023-22456 | VI Viewvc Viewvc | 6.1 | Jan 3 | ViewVC, a browser interface for CVS and Subversion version control repositories, as a cross-site scripting vulnerability that affects versions prior to 1.2.2 and 1.1.29 |
| CVE-2020-5283 | VI Viewvc Viewvc | 3.5 | Apr 3 | ViewVC before versions 1.1.28 and 1.2.1 has a XSS vulnerability in CVS show_subdir_lastmod support |
| CVE-2007-5743 | VI Viewvc Viewvc | 7.5 | Nov 7 | viewvc 1.0.3 allows improper access control to files in a repository when using the "forbidden" configuration option |
| CVE-2017-5938 | VI Viewvc Viewvc | 6.1 | Mar 15 | Cross-site scripting (XSS) vulnerability in the nav_path function in lib/viewvc.py in ViewVC before 1.0.14 and 1.1.x before 1.1.26 allows remote attackers to inject arbitrary web… |
| CVE-2012-4533 | VI Viewvc Viewvc | – | Nov 19 | Cross-site scripting (XSS) vulnerability in the "extra" details in the DiffSource._get_row function in lib/viewvc.py in ViewVC 1.0.x before 1.0.13 and 1.1.x before 1.1.16 allows… |
| CVE-2012-3357 | VI Viewvc Viewvc | – | Jul 22 | The SVN revision view (lib/vclib/svn/svn_repos.py) in ViewVC before 1.1.15 does not properly handle log messages when a readable path is copied from an unreadable path, which… |
| CVE-2012-3356 | VI Viewvc Viewvc | – | Jul 22 | The remote SVN views functionality (lib/vclib/svn/svn_ra.py) in ViewVC before 1.1.15 does not properly perform authorization, which allows remote attackers to bypass intended… |
| CVE-2009-5024 | VI Viewvc Viewvc | – | May 23 | ViewVC before 1.1.11 allows remote attackers to bypass the cvsdb row_limit configuration setting, and consequently conduct resource-consumption attacks, via the limit parameter,… |
| CVE-2010-0132 | VI Viewvc Viewvc | – | Mar 31 | Cross-site scripting (XSS) vulnerability in ViewVC 1.1 before 1.1.5 and 1.0 before 1.0.11, when the regular expression search functionality is enabled, allows remote attackers to… |
| CVE-2010-0736 | VI Viewvc Viewvc | – | Mar 19 | Cross-site scripting (XSS) vulnerability in the view_queryform function in lib/viewvc.py in ViewVC before 1.0.10, and 1.1.x before 1.1.4, allows remote attackers to inject… |
| CVE-2010-0005 | VI Viewvc Viewvc | – | Jan 29 | query.py in the query interface in ViewVC before 1.1.3 does not reject configurations that specify an unsupported authorizer for a root, which might allow remote attackers to… |
| CVE-2010-0004 | VI Viewvc Viewvc | – | Jan 29 | ViewVC before 1.1.3 composes the root listing view without using the authorizer for each root, which might allow remote attackers to discover private root names by reading this… |
| CVE-2009-3619 | VI Viewvc Viewvc | – | Nov 10 | Unspecified vulnerability in ViewVC 1.0 before 1.0.9 and 1.1 before 1.1.2 has unknown impact and remote attack vectors related to "printing illegal parameter names and values." |
| CVE-2009-3618 | VI Viewvc Viewvc | – | Nov 10 | Cross-site scripting (XSS) vulnerability in viewvc.py in ViewVC 1.0 before 1.0.9 and 1.1 before 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the view… |
| CVE-2008-4325 | VI Viewvc Viewvc | – | Sep 30 | lib/viewvc.py in ViewVC 1.0.5 uses the content-type parameter in the HTTP request for the Content-Type header in the HTTP response, which allows remote attackers to cause content… |
| CVE-2008-1291 | VI Viewvc Viewvc | – | Mar 24 | ViewVC before 1.0.5 stores sensitive information under the web root with insufficient access control, which allows remote attackers to read files and list folders under the hidden… |
| CVE-2008-1292 | VI Viewvc Viewvc | – | Mar 24 | ViewVC before 1.0.5 provides revision metadata without properly checking whether access was intended, which allows remote attackers to obtain sensitive information by reading (1)… |
| CVE-2008-1290 | VI Viewvc Viewvc | – | Mar 24 | ViewVC before 1.0.5 includes "all-forbidden" files within search results that list CVS or Subversion (SVN) commits, which allows remote attackers to obtain sensitive information |
| CVE-2006-5442 | VI Viewvc Viewvc | – | Oct 21 | ViewVC 1.0.2 and earlier does not specify a charset in its HTTP headers or HTML documents, which allows remote attackers to conduct cross-site scripting (XSS) attacks that inject… |