ViewVC 1.1.3
Approved changes feed: RSS · Atom
cpe:2.3:a:viewvc:viewvc:1.1.3:*:*:*:*:*:*:*part: a version: 1.1.3 update: *
| Vendor | Viewvc (8d203dbb-d595-54be-ab7a-5827db8c29d2) |
|---|---|
| Product | Viewvc (c150a8ec-1a5c-54d7-9998-30de369e3a8f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/viewvc |
purl2cpe | 2026-06-01 10:16:09.492461 |
pkg:deb/ubuntu/viewvc |
purl2cpe | 2026-06-01 10:16:09.492462 |
pkg:github/viewvc/viewvc |
purl2cpe | 2026-06-01 10:16:09.492463 |
pkg:rpm/fedora/viewvc |
purl2cpe | 2026-06-01 10:16:09.492465 |
pkg:rpm/opensuse/viewvc |
purl2cpe | 2026-06-01 10:16:09.492466 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2012-3357 |
vulnerable | 2026-06-08 05:02:09.352473 |
Details available
The SVN revision view (lib/vclib/svn/svn_repos.py) in ViewVC before 1.1.15 does not properly handle log messages when a readable path is copied from an unreadable path, which allows remote attackers to obtain sensitive information, related to a "log msg leak."
Published: 2012-07-22T16:00:00.000Z
Updated: 2024-08-06T20:05:12.106Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-3356 |
vulnerable | 2026-06-08 05:02:09.346022 |
Details available
The remote SVN views functionality (lib/vclib/svn/svn_ra.py) in ViewVC before 1.1.15 does not properly perform authorization, which allows remote attackers to bypass intended access restrictions via unspecified vectors.
Published: 2012-07-22T16:00:00.000Z
Updated: 2024-08-06T20:05:11.626Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-0736 |
vulnerable | 2026-06-08 04:52:04.234537 |
Details available
Cross-site scripting (XSS) vulnerability in the view_queryform function in lib/viewvc.py in ViewVC before 1.0.10, and 1.1.x before 1.1.4, allows remote attackers to inject arbitrary web script or HTML via "user-provided input."
Published: 2010-03-19T19:00:00.000Z
Updated: 2024-09-17T00:26:26.757Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-0132 |
vulnerable | 2026-06-08 04:51:53.086521 |
Details available
Cross-site scripting (XSS) vulnerability in ViewVC 1.1 before 1.1.5 and 1.0 before 1.0.11, when the regular expression search functionality is enabled, allows remote attackers to inject arbitrary web script or HTML via vectors related to "search_re input," a different vulnerability than CVE-2010-0736.
Published: 2010-03-31T17:35:00.000Z
Updated: 2024-08-07T00:37:53.920Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-5024 |
vulnerable | 2026-06-08 04:51:50.809381 |
Details available
ViewVC before 1.1.11 allows remote attackers to bypass the cvsdb row_limit configuration setting, and consequently conduct resource-consumption attacks, via the limit parameter, as demonstrated by a "query revision history" request.
Published: 2011-05-23T22:00:00.000Z
Updated: 2024-08-07T07:24:53.699Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.