Lucene search
+L

413 matches found

OSV
OSV
•added 2023/01/04 3:12 p.m.•19 views

CVE-2023-22464 ViewVC XSS vulnerability in revision view changed path "copyfrom" locations

ViewVC is a browser interface for CVS and Subversion version control repositories. Versions prior to 1.2.3 and 1.1.30 are vulnerable to cross-site scripting. The impact of this vulnerability is mitigated by the need for an attacker to have commit privileges to a Subversion repository exposed by a...

5.4CVSS5AI score
SaveExploits0References6
CNNVD
CNNVD
•added 2023/01/04 12:00 a.m.•23 views

ViewVC 跨站脚本漏洞

ViewVC is a web-based tool for browsing CVS and SVN code repositories. A security vulnerability exists in ViewVC versions prior to 1.2.3 and 1.1.30, which originates from a cross-site scripting vulnerability that can be exploited by an attacker to cause the browser to run the specified code by...

5.4CVSS5.4AI score0.00642EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/04 12:00 a.m.•3 views

CVE-2023-22464: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

ViewVC is a browser interface for CVS and Subversion version control repositories. Versions prior to 1.2.3 and 1.1.30 are vulnerable to cross-site scripting. The impact of this vulnerability is mitigated by the need for an attacker to have commit privileges to a Subversion repository exposed by a...

5.4CVSS5.6AI score0.00642EPSS
SaveExploits1References4
FreeBSD
FreeBSD
•added 2023/01/04 12:00 a.m.•35 views

devel/viewvc-devel is vulnerable to cross-site scripting

C. Michael Pilato reports: security fix: escape revision view copy paths 311 CVE-2023-22464 security fix: escape revision view changed paths 311 CVE-2023-22456...

6.1CVSS6.1AI score0.00694EPSS
SaveExploits1References2
NVD
NVD
•added 2023/01/03 7:15 p.m.•19 views

CVE-2023-22456

ViewVC, a browser interface for CVS and Subversion version control repositories, as a cross-site scripting vulnerability that affects versions prior to 1.2.2 and 1.1.29. The impact of this vulnerability is mitigated by the need for an attacker to have commit privileges to a Subversion repository...

6.1CVSS5.9AI score0.00694EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2023/01/03 7:15 p.m.•39 views

CVE-2023-22456

ViewVC, a browser interface for CVS and Subversion version control repositories, as a cross-site scripting vulnerability that affects versions prior to 1.2.2 and 1.1.29. The impact of this vulnerability is mitigated by the need for an attacker to have commit privileges to a Subversion repository...

6.1CVSS6.3AI score0.00694EPSS
SaveExploits0References6
OSV
OSV
•added 2023/01/03 7:15 p.m.•13 views

UBUNTU-CVE-2023-22456

ViewVC, a browser interface for CVS and Subversion version control repositories, as a cross-site scripting vulnerability that affects versions prior to 1.2.2 and 1.1.29. The impact of this vulnerability is mitigated by the need for an attacker to have commit privileges to a Subversion repository...

6.1CVSS5.7AI score0.00694EPSS
SaveExploits0References7
Prion
Prion
•added 2023/01/03 7:15 p.m.•33 views

Cross site scripting

ViewVC, a browser interface for CVS and Subversion version control repositories, as a cross-site scripting vulnerability that affects versions prior to 1.2.2 and 1.1.29. The impact of this vulnerability is mitigated by the need for an attacker to have commit privileges to a Subversion repository...

5.8CVSS5.9AI score0.00694EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
•added 2023/01/03 6:29 p.m.•12 views

CVE-2023-22456 ViewVC XSS vulnerability in revision view changed paths

ViewVC, a browser interface for CVS and Subversion version control repositories, as a cross-site scripting vulnerability that affects versions prior to 1.2.2 and 1.1.29. The impact of this vulnerability is mitigated by the need for an attacker to have commit privileges to a Subversion repository...

6.1CVSS6.1AI score0.00694EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2023/01/03 6:29 p.m.•41 views

CVE-2023-22456 ViewVC XSS vulnerability in revision view changed paths

ViewVC, a browser interface for CVS and Subversion version control repositories, as a cross-site scripting vulnerability that affects versions prior to 1.2.2 and 1.1.29. The impact of this vulnerability is mitigated by the need for an attacker to have commit privileges to a Subversion repository...

6.1CVSS6.1AI score0.00694EPSS
SaveExploits0References4
OSV
OSV
•added 2023/01/03 6:29 p.m.•26 views

CVE-2023-22456 ViewVC XSS vulnerability in revision view changed paths

ViewVC, a browser interface for CVS and Subversion version control repositories, as a cross-site scripting vulnerability that affects versions prior to 1.2.2 and 1.1.29. The impact of this vulnerability is mitigated by the need for an attacker to have commit privileges to a Subversion repository...

6.1CVSS5.9AI score
SaveExploits0References6
CVE
CVE
•added 2023/01/03 6:29 p.m.•106 views

CVE-2023-22456

CVE-2023-22456 affects ViewVC, a browser interface for CVS/Subversion repositories. The vulnerability is an cross-site scripting (XSS) flaw that impacts ViewVC versions before 1.2.2 (and 1.1.29). The attack requires the attacker to have commit privileges to a Subversion repository exposed by a tr...

6.1CVSS5.8AI score0.00694EPSS
SaveExploits0References4Affected Software1
Mend
Mend
•added 2023/01/03 6:29 p.m.•2 views

CVE-2023-22456

ViewVC, a browser interface for CVS and Subversion version control repositories, as a cross-site scripting vulnerability that affects versions prior to 1.2.2 and 1.1.29. The impact of this vulnerability is mitigated by the need for an attacker to have commit privileges to a Subversion repository...

6.1CVSS0.00694EPSS
SaveExploits0References7
Debian CVE
Debian CVE
•added 2023/01/03 6:29 p.m.•77 views

CVE-2023-22456

Removed by vendor...

6.1CVSS6.2AI score0.00694EPSS
SaveExploits0
CNNVD
CNNVD
•added 2023/01/03 12:00 a.m.•20 views

ViewVC 跨站脚本漏洞

ViewVC is a web-based tool for browsing CVS, SVN code repositories. A cross-site scripting vulnerability exists in ViewVC version 1.2.1, versions prior to 1.1.29. An attacker can exploit this vulnerability to perform cross-site scripting attacks...

6.1CVSS6AI score0.00694EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/03 12:00 a.m.•4 views

CVE-2023-22456: Improper Neutralization of Input During Web Page Generation

ViewVC, a browser interface for CVS and Subversion version control repositories, as a cross-site scripting vulnerability that affects versions prior to 1.2.2 and 1.1.29. The impact of this vulnerability is mitigated by the need for an attacker to have commit privileges to a Subversion repository...

6.1CVSS5.6AI score0.00694EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/01/02 12:00 a.m.•12 views

PT-2023-6806 · Viewvc · Viewvc

Name of the Vulnerable Software and Affected Versions: ViewVC versions prior to 1.2.2 ViewVC versions prior to 1.1.29 Description: The issue is a cross-site scripting vulnerability that affects ViewVC, a browser interface for CVS and Subversion version control repositories. The impact of this...

6.4CVSS5.2AI score0.00694EPSS
SaveExploits1References24
OpenVAS
OpenVAS
•added 2022/01/28 12:00 a.m.•16 views

Mageia: Security Advisory (MGASA-2017-0048)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.1CVSS6.3AI score0.01318EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2022/01/28 12:00 a.m.•17 views

Mageia: Security Advisory (MGASA-2020-0221)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

3.5CVSS3.9AI score0.01216EPSS
SaveExploits1References7
OpenVAS
OpenVAS
•added 2021/04/16 12:00 a.m.•28 views

openSUSE: Security Advisory for viewvc (openSUSE-SU-2021:0123-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

3.5CVSS3.9AI score0.01216EPSS
SaveExploits1References2
Rows per page
Query Builder