Approved changes feed: RSS · Atom

cpe:2.3:a:namazu:namazu:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNamazu (bda5a28e-c193-51db-a44a-8fda55c5d54e)
ProductNamazu (f1dc522f-5ffd-553e-a3ec-da204e43bac6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:rpm/opensuse/namazu purl2cpe 2026-06-01 10:10:55.192337

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-4345 vulnerable 2026-06-08 04:59:30.822282 Details available
Cross-site scripting (XSS) vulnerability in Namazu before 2.0.21, when Internet Explorer 6 or 7 is used, allows remote attackers to inject arbitrary web script or HTML via a cookie.
Published: 2011-11-30T02:00:00.000Z
Updated: 2024-08-07T00:01:51.638Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-5028 vulnerable 2026-06-08 04:51:50.835874 Details available
Stack-based buffer overflow in Namazu before 2.0.20 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted request containing an empty uri field.
Published: 2011-11-30T02:00:00.000Z
Updated: 2024-08-07T07:24:53.775Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1468 vulnerable 2026-06-08 04:50:20.601796 Details available
Cross-site scripting (XSS) vulnerability in namazu.cgi in Namazu before 2.0.18 allows remote attackers to inject arbitrary web script or HTML via UTF-7 encoded input, related to failure to set the charset, a different vector than CVE-2004-1318 and CVE-2001-1350. NOTE: some of these details are obtained from third party information.
Published: 2008-03-24T21:00:00.000Z
Updated: 2024-08-07T08:24:42.804Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-1352 vulnerable 2026-06-08 04:46:19.651488 Details available
Cross-site scripting vulnerability in Namazu 2.0.9 and earlier allows remote attackers to execute arbitrary Javascript as other web users via an error message that is returned when an invalid index file is specified in the idxname parameter.
Published: 2004-09-01T04:00:00.000Z
Updated: 2024-08-08T04:51:08.402Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-1351 vulnerable 2026-06-08 04:46:19.651184 Details available
Cross-site scripting vulnerability in Namazu 2.0.8 and earlier allows remote attackers to execute arbitrary Javascript as other web users via the index file name that is displayed when displaying hit numbers.
Published: 2004-09-01T04:00:00.000Z
Updated: 2024-08-08T04:51:08.214Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-1350 vulnerable 2026-06-08 04:46:19.650830 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.