ViewVC 1.1.1

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:viewvc:viewvc:1.1.1:*:*:*:*:*:*:*

part: a version: 1.1.1 update: *

VendorViewvc (8d203dbb-d595-54be-ab7a-5827db8c29d2)
ProductViewvc (c150a8ec-1a5c-54d7-9998-30de369e3a8f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/viewvc purl2cpe 2026-06-01 10:16:09.492312
pkg:deb/ubuntu/viewvc purl2cpe 2026-06-01 10:16:09.492313
pkg:github/viewvc/viewvc purl2cpe 2026-06-01 10:16:09.492314
pkg:rpm/fedora/viewvc purl2cpe 2026-06-01 10:16:09.492316
pkg:rpm/opensuse/viewvc purl2cpe 2026-06-01 10:16:09.492317

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-3357 vulnerable 2026-06-08 05:02:09.352439 Details available
The SVN revision view (lib/vclib/svn/svn_repos.py) in ViewVC before 1.1.15 does not properly handle log messages when a readable path is copied from an unreadable path, which allows remote attackers to obtain sensitive information, related to a "log msg leak."
Published: 2012-07-22T16:00:00.000Z
Updated: 2024-08-06T20:05:12.106Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3356 vulnerable 2026-06-08 05:02:09.344826 Details available
The remote SVN views functionality (lib/vclib/svn/svn_ra.py) in ViewVC before 1.1.15 does not properly perform authorization, which allows remote attackers to bypass intended access restrictions via unspecified vectors.
Published: 2012-07-22T16:00:00.000Z
Updated: 2024-08-06T20:05:11.626Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0736 vulnerable 2026-06-08 04:52:04.233495 Details available
Cross-site scripting (XSS) vulnerability in the view_queryform function in lib/viewvc.py in ViewVC before 1.0.10, and 1.1.x before 1.1.4, allows remote attackers to inject arbitrary web script or HTML via "user-provided input."
Published: 2010-03-19T19:00:00.000Z
Updated: 2024-09-17T00:26:26.757Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0132 vulnerable 2026-06-08 04:51:53.086486 Details available
Cross-site scripting (XSS) vulnerability in ViewVC 1.1 before 1.1.5 and 1.0 before 1.0.11, when the regular expression search functionality is enabled, allows remote attackers to inject arbitrary web script or HTML via vectors related to "search_re input," a different vulnerability than CVE-2010-0736.
Published: 2010-03-31T17:35:00.000Z
Updated: 2024-08-07T00:37:53.920Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0005 vulnerable 2026-06-08 04:51:52.235915 Details available
query.py in the query interface in ViewVC before 1.1.3 does not reject configurations that specify an unsupported authorizer for a root, which might allow remote attackers to bypass intended access restrictions via a query.
Published: 2010-01-29T18:00:00.000Z
Updated: 2024-09-16T17:38:01.371Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0004 vulnerable 2026-06-08 04:51:52.234954 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-5024 vulnerable 2026-06-08 04:51:50.807982 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3619 vulnerable 2026-06-08 04:51:43.150196 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3618 vulnerable 2026-06-08 04:51:43.149471 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.