Lucene search
K

15 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2025/11/13 3:23 a.m.4 views

Malicious code in repository-reveal-md-multiverse-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de52f7052500891977e9b92278627f7cabde231989ddf59ee96489c8f19bf65a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.9AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2021/05/04 12:0 a.m.24 views

Debian DLA-2646-1 : subversion security update

One security issue has been discovered in subversion : CVE-2020-17525 : Subversion's modauthzsvn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client sends a request for a non-existing repository URL. This can lead to...

7.5CVSS7.2AI score0.37516EPSS
Exploits1References4
OSV
OSV
added 2021/03/17 10:15 a.m.3 views

ALPINE-CVE-2020-17525

Subversion's modauthzsvn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client sends a request for a non-existing repository URL. This can lead to disruption for users of the service. This issue was fixed in...

7.5CVSS6.8AI score0.37516EPSS
Exploits1References1
OSV
OSV
added 2021/03/17 10:15 a.m.2 views

DEBIAN-CVE-2020-17525

Subversion's modauthzsvn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client sends a request for a non-existing repository URL. This can lead to disruption for users of the service. This issue was fixed in...

7.5CVSS7.6AI score0.37516EPSS
Exploits1References1
NVD
NVD
added 2021/03/17 10:15 a.m.18 views

CVE-2020-17525

Subversion's modauthzsvn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client sends a request for a non-existing repository URL. This can lead to disruption for users of the service. This issue was fixed in...

7.5CVSS0.37516EPSS
Exploits1References2
Prion
Prion
added 2021/03/17 10:15 a.m.23 views

Design/Logic Flaw

Subversion's modauthzsvn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client sends a request for a non-existing repository URL. This can lead to disruption for users of the service. This issue was fixed in...

4.3CVSS7.2AI score0.37516EPSS
Exploits1References2Affected Software2
CVE
CVE
added 2021/03/17 9:20 a.m.335 views

CVE-2020-17525

CVE-2020-17525 affects Subversion’s mod_authz_svn. A crash occurs when using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client requests a non-existent repository URL, potentially disrupting service. Fixed in various builds: mod_dav_svn + mod_authz_svn servers ...

7.5CVSS7.4AI score0.37516EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2021/03/17 9:20 a.m.24 views

CVE-2020-17525 Remote unauthenticated denial-of-service in Subversion mod_authz_svn

Subversion's modauthzsvn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client sends a request for a non-existing repository URL. This can lead to disruption for users of the service. This issue was fixed in...

7.5AI score0.37516EPSS
Exploits1References2
AlpineLinux
AlpineLinux
added 2021/03/17 9:20 a.m.55 views

CVE-2020-17525

Subversion's modauthzsvn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client sends a request for a non-existing repository URL. This can lead to disruption for users of the service. This issue was fixed in...

7.5CVSS7.5AI score0.37516EPSS
Exploits1
Debian CVE
Debian CVE
added 2021/03/17 9:20 a.m.33 views

CVE-2020-17525

Subversion's modauthzsvn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client sends a request for a non-existing repository URL. This can lead to disruption for users of the service. This issue was fixed in...

7.5CVSS7.6AI score0.37516EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2021/02/22 12:0 a.m.30 views

Fedora 32 : subversion (2021-16e51e39a6)

The remote Fedora 32 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-16e51e39a6 advisory. - Subversion's modauthzsvn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client...

7.5CVSS7.5AI score0.37516EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2021/02/20 12:0 a.m.43 views

Oracle Linux 8 : subversion:1.10 (ELSA-2021-0507)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-0507 advisory. subversion 1.10.2-4 - add security fix for CVE-2020-17525 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

7.5CVSS7.5AI score0.37516EPSS
Exploits1References2
Veracode
Veracode
added 2021/02/11 5:23 p.m.35 views

Denial Of Service (DoS)

subversion is vulnerable to denial of service. An unauthenticated remote attacker attacker is able to crash the application via the modauthzsvn module by requesting for a non-existing repository URL, if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option...

7.5CVSS5.1AI score0.37516EPSS
Exploits1References4Affected Software2
UbuntuCve
UbuntuCve
added 2021/02/10 12:0 p.m.26 views

CVE-2020-17525

Subversion's modauthzsvn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client sends a request for a non-existing repository URL. This can lead to disruption for users of the service. This issue was fixed in...

7.5CVSS7.1AI score0.37516EPSS
Exploits1References3
FreeBSD
FreeBSD
added 2021/01/29 12:0 a.m.31 views

mod_dav_svn -- server crash

Subversion project reports: Subversion's modauthzsvn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client sends a request for a non-existing repository URL...

7.5CVSS7.5AI score0.37516EPSS
Exploits1References1
Rows per page
Query Builder