Approved changes feed: RSS · Atom

cpe:2.3:a:apache:subversion:1.6.15:*:*:*:*:*:*:*

part: a version: 1.6.15 update: *

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductSubversion (0384f294-d291-598e-baf4-379632e9d3cc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:apache/subversion purl2cpe 2026-06-01 10:14:31.372080
pkg:deb/debian/subversion purl2cpe 2026-06-01 10:14:31.372081
pkg:deb/ubuntu/subversion purl2cpe 2026-06-01 10:14:31.372083
pkg:github/apache/subversion purl2cpe 2026-06-01 10:14:31.372084
pkg:maven/org.apache.subversion/subversion purl2cpe 2026-06-01 10:14:31.372086
pkg:rpm/centos/subversion purl2cpe 2026-06-01 10:14:31.372087
pkg:rpm/fedora/subversion purl2cpe 2026-06-01 10:14:31.372088
pkg:rpm/opensuse/subversion purl2cpe 2026-06-01 10:14:31.372090

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-8734 vulnerable 2026-06-08 05:08:14.688918 Details available
Apache Subversion's mod_dontdothat module and HTTP clients 1.4.0 through 1.8.16, and 1.9.0 through 1.9.4 are vulnerable to a denial-of-service attack caused by exponential XML entity expansion. The attack can cause the targeted process to consume an excessive amount of CPU resources or memory.
Published: 2017-10-16T13:00:00.000Z
Updated: 2024-09-16T20:01:52.257Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0251 vulnerable 2026-06-08 05:06:14.140237 Details available
The mod_dav_svn server in Subversion 1.5.0 through 1.7.19 and 1.8.0 through 1.8.11 allows remote authenticated users to spoof the svn:author property via a crafted v1 HTTP protocol request sequences.
Published: 2015-04-08T18:00:00.000Z
Updated: 2024-08-06T04:03:10.727Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0248 vulnerable 2026-06-08 05:06:14.125331 Details available
The (1) mod_dav_svn and (2) svnserve servers in Subversion 1.6.0 through 1.7.19 and 1.8.0 through 1.8.11 allow remote attackers to cause a denial of service (assertion failure and abort) via crafted parameter combinations related to dynamically evaluated revision numbers.
Published: 2015-04-08T18:00:00.000Z
Updated: 2024-08-06T04:03:10.500Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8108 vulnerable 2026-06-08 05:06:07.618596 Details available
The mod_dav_svn Apache HTTPD server module in Apache Subversion 1.7.x before 1.7.19 and 1.8.x before 1.8.11 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a request for a URI that triggers a lookup for a virtual transaction name that does not exist.
Published: 2014-12-18T15:00:00.000Z
Updated: 2024-08-06T13:10:50.164Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3580 vulnerable 2026-06-08 05:05:33.580380 Details available
The mod_dav_svn Apache HTTPD server module in Apache Subversion 1.x before 1.7.19 and 1.8.x before 1.8.11 allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) via a REPORT request for a resource that does not exist.
Published: 2014-12-18T15:00:00.000Z
Updated: 2024-08-06T10:50:17.546Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3528 vulnerable 2026-06-08 05:05:33.281454 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3522 vulnerable 2026-06-08 05:05:33.212019 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3504 vulnerable 2026-06-08 05:05:33.080069 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4505 vulnerable 2026-06-08 05:04:47.516785 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4277 vulnerable 2026-06-08 05:04:35.083383 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2112 vulnerable 2026-06-08 05:03:58.381489 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2088 vulnerable 2026-06-08 05:03:58.306136 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1968 vulnerable 2026-06-08 05:03:57.646738 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1849 vulnerable 2026-06-08 05:03:56.787590 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1847 vulnerable 2026-06-08 05:03:56.785972 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1846 vulnerable 2026-06-08 05:03:56.784829 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1845 vulnerable 2026-06-08 05:03:56.775017 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1921 vulnerable 2026-06-08 04:58:02.792410 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.