Lucene search
+L

492 matches found

RedhatCVE
RedhatCVE
added 2020/02/18 2:30 p.m.40 views

CVE-2020-1739

A flaw was found in Ansible Engine. When a password is set with the argument "password" of svn module, it is used on svn command line, disclosing to other users within the same node. An attacker could take advantage by reading the cmdline file from that particular PID on the procfs. Mitigation...

3.9CVSS2.5AI score0.00361EPSS
SaveExploits0References3
Prion
Prion
added 2020/02/06 3:15 p.m.18 views

Buffer overflow

Buffer overflow in the Reclaim function in Tianocore EDK2 before SVN 16280 allows physically proximate attackers to gain privileges via a long variable name...

4.6CVSS7.5AI score0.00405EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2020/02/06 2:03 p.m.23 views

CVE-2014-8271

Buffer overflow in the Reclaim function in Tianocore EDK2 before SVN 16280 allows physically proximate attackers to gain privileges via a long variable name...

6.8AI score0.00405EPSS
SaveExploits0References2
Hacker One
Hacker One
added 2019/10/09 10:52 a.m.52 views

8x8: Publicly accessible .svn repository - aastraconf.packet8.net

The server contained artifacts from an old SVN repository. The files were removed...

2.2AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2019/08/15 5:49 p.m.98 views

Important: Red Hat Security Advisory: subversion:1.10 security update

An update for the subversion:1.10 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

7.5CVSS7.2AI score0.0344EPSS
SaveExploits0References2
exploitpack
exploitpack
added 2019/08/14 12:00 a.m.64 views

TortoiseSVN 1.12.1 - Remote Code Execution

TortoiseSVN 1.12.1 - Remote Code Execution Document Title: =============== TortoiseSVN v1.12.1 - Remote Code Execution Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2188 Product:...

6.8CVSS9.1AI score0.16391EPSS
SaveExploits6
Tenable Nessus
Tenable Nessus
added 2019/08/07 12:00 a.m.17 views

SVN Repository Detected

The web server on the remote host allows read access to files within a '.svn' directory exposing files tracked inside. This potential flaw can be used to access content from the web server that might otherwise be private & permit download of the source code of listed pages hosted on the remote...

7.2AI score
SaveExploits0
Hacker One
Hacker One
added 2019/06/20 11:35 a.m.16 views

Mail.ru: SVN repository

SVN repository for static web files was available on terrhq.ru subdomain...

1.1AI score
SaveExploits0
CVE
CVE
added 2019/05/23 7:05 p.m.123 views

CVE-2019-10849

CBAS Web (Computrols CBAS) 19.0.0 is affected by an information-disclosure vulnerability due to an unprotected Subversion/SVN directory that can disclose the firmware source code. The Red Hat advisory and exploit reports confirm the issue affects CBAS Web and maps to CVE-2019-10849, with an impac...

7.5CVSS7.4AI score0.09012EPSS
SaveExploits4References3Affected Software1
Cvelist
Cvelist
added 2019/05/23 7:05 p.m.46 views

CVE-2019-10849

Computrols CBAS 18.0.0 allows unprotected Subversion SVN directory / source code disclosure...

7.5AI score0.09012EPSS
SaveExploits4References3
Veracode
Veracode
added 2019/05/02 5:17 a.m.29 views

Information Disclosure

Subversion SVN is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes. The moddavsvn module is used with the Apache HTTP Server to allow access to Subversion...

5CVSS6.3AI score0.1208EPSS
SaveExploits0References16Affected Software1
Kitploit
Kitploit
added 2019/04/01 8:37 p.m.168 views

Mimikatz v2.2.0 - A Post-Exploitation Tool to Extract Plaintexts Passwords, Hash, PIN Code from Memory

mimikatz is a tool I've made to learn C and make somes experiments with Windows security. It's now well known to extract plaintexts passwords, hash, PIN code and kerberos tickets from memory. mimikatz can also perform pass-the-hash, pass-the-ticket or build Golden tickets. But that's not all!...

7.4AI score
SaveExploits0References6
OpenVAS
OpenVAS
added 2019/02/09 12:00 a.m.24 views

openSUSE: Security Advisory for subversion (openSUSE-SU-2019:0153-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.7AI score0.58452EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2019/01/24 12:00 a.m.36 views

FreeBSD : www/mod_dav_svn -- Malicious SVN clients can crash mod_dav_svn. (4af3241d-1f0c-11e9-b4bd-d43d7eed0ce2)

Subversion project reports : Malicious SVN clients can trigger a crash in moddavsvn by omitting the root path from a recursive directory listing request. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database :...

7.5CVSS6.6AI score0.58452EPSS
SaveExploits0References3
FreeBSD
FreeBSD
added 2019/01/23 12:00 a.m.24 views

www/mod_dav_svn -- Malicious SVN clients can crash mod_dav_svn.

Subversion project reports: Malicious SVN clients can trigger a crash in moddavsvn by omitting the root path from a recursive directory listing request...

7.5CVSS2.9AI score0.58452EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2018/12/08 11:12 p.m.99 views

Syhunt ScanTools 6.5 - Console Web Vulnerability Scan Tools

Syhunt ScanTools comes with four console applications: ScanURL, ScanCode, ScanLog and ScanConf, incorporating the functionality of the scanners Syhunt Dynamic, Syhunt Code, Syhunt Insight and Syhunt Harden respectively. Whether you want to scan a live web application, source code files, a GIT...

6.5AI score
SaveExploits0
NVD
NVD
added 2018/11/15 3:29 p.m.19 views

CVE-2018-0695

Cross-site scripting vulnerability in User-friendly SVN USVN Version 1.0.7 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

6.1CVSS6.1AI score0.00788EPSS
SaveExploits0References2
OSV
OSV
added 2018/11/15 3:29 p.m.14 views

CVE-2018-0695

Cross-site scripting vulnerability in User-friendly SVN USVN Version 1.0.7 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

6.1CVSS6.4AI score
SaveExploits0References2
CVE
CVE
added 2018/11/15 3:00 p.m.55 views

CVE-2018-0695

CVE-2018-0695 is a reflected cross-site scripting (CWE-79) vulnerability in User-friendly SVN (USVN) up to version 1.0.7 . The affected component is the web-based configuration interface for USVN, which allows an attacker to inject arbitrary web script or HTML. The impact described in the sources...

6.1CVSS6AI score0.00788EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2018/11/15 3:00 p.m.28 views

CVE-2018-0695

Cross-site scripting vulnerability in User-friendly SVN USVN Version 1.0.7 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

6.1AI score0.00788EPSS
SaveExploits0References2
Rows per page
Query Builder