Filters
Software
Cvs Cvscvsbug in CVS 1.12.12 and earlier creates temporary files insecurely, which allows local users to ov…
4.6
First published (updated )
Cvs CvsCVS 1.12 and earlier on Debian GNU/Linux, when using the repouid patch, allows remote attackers to b…
7.5
First published (updated )
FreeBSD FreeBSDFormat string vulnerability in wrapper.c in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16 al…
7.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Cvs CvsCVS 1.12 and earlier on Debian GNU/Linux does not properly handle when a mapping for the current rep…
First published (updated )
Cvs CvsCVS 1.11.x before 1.11.17, and 1.12.x before 1.12.9, allows remote attackers to determine the existe…
First published (updated )
Cvs CvsCVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle malformed "Entry" li…
10
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Cvs Cvsserve_notify in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle empt…
10
First published (updated )
Cvs CvsCVS before 1.11 allows CVS clients to read arbitrary files via .. (dot dot) sequences in filenames v…
First published (updated )
Cvs CvsThe client for CVS before 1.11 allows a remote malicious CVS server to create arbitrary files using …
2.6
First published (updated )
Cvs CvsCVS server before 1.11.10 may allow attackers to cause the CVS server to create directories and file…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Cvs CvsCVS before 1.10.8 does not properly initialize a global variable, which allows remote attackers to c…
First published (updated )
Cvs CvsThe CVS 1.10.8 client trusts pathnames that are provided by the CVS server, which allows the server …
2.1
First published (updated )
Cvs CvsThe CVS 1.10.8 server does not properly restrict users from creating arbitrary Checkin.prog or Updat…
7.2
First published (updated )
Cvs CvsConcurrent Versions Software (CVS) uses predictable temporary file names for locking, which allows l…
5.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.