Lucene search
+L

203 matches found

Mend
Mend
•added 2021/05/18 4:11 p.m.•5 views

CVE-2021-32305

WebSVN before 2.6.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the search parameter...

10CVSS0.87304EPSS
SaveExploits9References2
CVE
CVE
•added 2021/05/18 4:11 p.m.•340 views

CVE-2021-32305

WebSVN (versions prior to 2.6.1) is affected by CVE-2021-32305, a remote code execution vulnerability where an attacker can inject shell metacharacters via the search parameter to execute arbitrary commands on the server. The issue is caused by unsafely handling the search input and is rated high...

10CVSS8.6AI score0.87304EPSS
SaveIn wildExploits9References2Affected Software1
CNNVD
CNNVD
•added 2021/05/18 12:00 a.m.•19 views

Websvn: Operating System Command Injection Vulnerability

websvn is a software application. An online Subversion repository viewer. A security vulnerability exists in WebSVN versions prior to 2.6.1 that allows remote attackers to execute arbitrary commands via shell metacharacters in search parameters...

10CVSS8.8AI score0.87304EPSS
SaveExploits9References5
Positive Technologies
Positive Technologies
•added 2021/05/18 12:00 a.m.•16 views

PT-2021-19698

Name of the Vulnerable Software and Affected Versions: WebSVN versions prior to 2.6.1 Description: The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the search parameter. Recommendations: For versions prior to 2.6.1, update to version 2.6.1 or later to...

10CVSS7.5AI score0.87304EPSS
SaveExploits9References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/18 12:00 a.m.•5 views

CVE-2021-32305: Improper Neutralization of Special Elements used in an OS Command

WebSVN before 2.6.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the search parameter...

10CVSS6.4AI score0.87304EPSS
SaveExploits9References2
ArchLinux
ArchLinux
•added 2016/08/11 12:00 a.m.•55 views

websvn: cross-site scripting

Multiple cross-site scripting XSS vulnerabilities in revision.php, log.php, listing.php, and comp.php in WebSVN allow context-dependent attackers to inject arbitrary web script or HTML via the name of a file or directory in a repository...

4.3CVSS3.2AI score0.00857EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2016/07/14 12:00 a.m.•36 views

Fedora 23 : websvn (2016-0cb7475aa6)

Fix for CVE-2016-1236. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenab...

6.1CVSS6.1AI score0.00857EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2016/07/14 12:00 a.m.•40 views

Fedora 22 : websvn (2016-cafcf15357)

Fix for CVE-2016-1236. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenab...

6.1CVSS6.1AI score0.00857EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2016/07/14 12:00 a.m.•27 views

Fedora 24 : websvn (2016-b0419504f4)

Fix for CVE-2016-1236. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenab...

6.1CVSS6.1AI score0.00857EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2016/06/08 12:00 a.m.•26 views

Fedora Update for websvn FEDORA-2016-0cb7475aa6

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.1CVSS6.3AI score0.00857EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2016/06/08 12:00 a.m.•27 views

Fedora Update for websvn FEDORA-2016-b0419504f4

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.1CVSS6.3AI score0.00857EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2016/06/08 12:00 a.m.•28 views

Fedora Update for websvn FEDORA-2016-cafcf15357

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.1CVSS6.3AI score0.00857EPSS
SaveExploits0References2
Fedora
Fedora
•added 2016/05/24 1:40 a.m.•31 views

[SECURITY] Fedora 23 Update: websvn-2.3.3-13.fc23

WebSVN offers a view onto your subversion repositories that's been designed to reflect the Subversion methodology. You can view the log of any file or directory and see a list of all the files changed, added or deleted in any given revision. You can also view the differences between two versions ...

6.1CVSS2.6AI score0.00857EPSS
SaveExploits0
Fedora
Fedora
•added 2016/05/24 1:23 a.m.•22 views

[SECURITY] Fedora 22 Update: websvn-2.3.3-13.fc22

WebSVN offers a view onto your subversion repositories that's been designed to reflect the Subversion methodology. You can view the log of any file or directory and see a list of all the files changed, added or deleted in any given revision. You can also view the differences between two versions ...

6.1CVSS2.6AI score0.00857EPSS
SaveExploits0
NVD
NVD
•added 2016/05/11 9:59 p.m.•25 views

CVE-2016-1236

Multiple cross-site scripting XSS vulnerabilities in 1 revision.php, 2 log.php, 3 listing.php, and 4 comp.php in WebSVN allow context-dependent attackers to inject arbitrary web script or HTML via the name of a a file or b directory in a repository...

6.1CVSS6AI score0.00857EPSS
SaveExploits0References3
osv_ubuntu
osv_ubuntu
•added 2016/05/11 9:59 p.m.•13 views

UBUNTU-CVE-2016-1236

Multiple cross-site scripting XSS vulnerabilities in 1 revision.php, 2 log.php, 3 listing.php, and 4 comp.php in WebSVN allow context-dependent attackers to inject arbitrary web script or HTML via the name of a a file or b directory in a repository...

6.1CVSS6.4AI score0.00857EPSS
SaveExploits0References3
Prion
Prion
•added 2016/05/11 9:59 p.m.•20 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in 1 revision.php, 2 log.php, 3 listing.php, and 4 comp.php in WebSVN allow context-dependent attackers to inject arbitrary web script or HTML via the name of a a file or b directory in a repository...

4.3CVSS5.7AI score0.00857EPSS
SaveExploits0References3Affected Software1
UbuntuCve
UbuntuCve
•added 2016/05/11 9:59 p.m.•19 views

CVE-2016-1236

Multiple cross-site scripting XSS vulnerabilities in 1 revision.php, 2 log.php, 3 listing.php, and 4 comp.php in WebSVN allow context-dependent attackers to inject arbitrary web script or HTML via the name of a a file or b directory in a repository...

6.1CVSS6.3AI score0.00857EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2016/05/11 9:59 p.m.•12 views

CVE-2016-1236

Multiple cross-site scripting XSS vulnerabilities in 1 revision.php, 2 log.php, 3 listing.php, and 4 comp.php in WebSVN allow context-dependent attackers to inject arbitrary web script or HTML via the name of a a file or b directory in a repository...

6.1CVSS5.8AI score0.00857EPSS
SaveExploits0References3
Mend
Mend
•added 2016/05/11 9:00 p.m.•5 views

CVE-2016-1236

Multiple cross-site scripting XSS vulnerabilities in 1 revision.php, 2 log.php, 3 listing.php, and 4 comp.php in WebSVN allow context-dependent attackers to inject arbitrary web script or HTML via the name of a a file or b directory in a repository...

6.1CVSS0.00857EPSS
SaveExploits0References4
Rows per page
Query Builder