ViewVC 1.0.4

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:viewvc:viewvc:1.0.4:*:*:*:*:*:*:*

part: a version: 1.0.4 update: *

VendorViewvc (8d203dbb-d595-54be-ab7a-5827db8c29d2)
ProductViewvc (c150a8ec-1a5c-54d7-9998-30de369e3a8f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/viewvc purl2cpe 2026-06-01 10:16:09.492252
pkg:deb/ubuntu/viewvc purl2cpe 2026-06-01 10:16:09.492253
pkg:github/viewvc/viewvc purl2cpe 2026-06-01 10:16:09.492254
pkg:rpm/fedora/viewvc purl2cpe 2026-06-01 10:16:09.492256
pkg:rpm/opensuse/viewvc purl2cpe 2026-06-01 10:16:09.492257

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-3357 vulnerable 2026-06-08 05:02:09.352291 Details available
The SVN revision view (lib/vclib/svn/svn_repos.py) in ViewVC before 1.1.15 does not properly handle log messages when a readable path is copied from an unreadable path, which allows remote attackers to obtain sensitive information, related to a "log msg leak."
Published: 2012-07-22T16:00:00.000Z
Updated: 2024-08-06T20:05:12.106Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3356 vulnerable 2026-06-08 05:02:09.339789 Details available
The remote SVN views functionality (lib/vclib/svn/svn_ra.py) in ViewVC before 1.1.15 does not properly perform authorization, which allows remote attackers to bypass intended access restrictions via unspecified vectors.
Published: 2012-07-22T16:00:00.000Z
Updated: 2024-08-06T20:05:11.626Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0736 vulnerable 2026-06-08 04:52:04.230594 Details available
Cross-site scripting (XSS) vulnerability in the view_queryform function in lib/viewvc.py in ViewVC before 1.0.10, and 1.1.x before 1.1.4, allows remote attackers to inject arbitrary web script or HTML via "user-provided input."
Published: 2010-03-19T19:00:00.000Z
Updated: 2024-09-17T00:26:26.757Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0132 vulnerable 2026-06-08 04:51:53.086342 Details available
Cross-site scripting (XSS) vulnerability in ViewVC 1.1 before 1.1.5 and 1.0 before 1.0.11, when the regular expression search functionality is enabled, allows remote attackers to inject arbitrary web script or HTML via vectors related to "search_re input," a different vulnerability than CVE-2010-0736.
Published: 2010-03-31T17:35:00.000Z
Updated: 2024-08-07T00:37:53.920Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0005 vulnerable 2026-06-08 04:51:52.235812 Details available
query.py in the query interface in ViewVC before 1.1.3 does not reject configurations that specify an unsupported authorizer for a root, which might allow remote attackers to bypass intended access restrictions via a query.
Published: 2010-01-29T18:00:00.000Z
Updated: 2024-09-16T17:38:01.371Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0004 vulnerable 2026-06-08 04:51:52.234841 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-5024 vulnerable 2026-06-08 04:51:50.805227 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3619 vulnerable 2026-06-08 04:51:43.150089 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3618 vulnerable 2026-06-08 04:51:43.146441 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.