Filter
Software
Cvs CvsCVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle malformed "Entry" li…
10
First published (updated )
Cvs Cvsserve_notify in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle empt…
10
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Cvs CvsCVS server before 1.11.10 may allow attackers to cause the CVS server to create directories and file…
7.5
First published (updated )
Cvs CvsCVS 1.12 and earlier on Debian GNU/Linux, when using the repouid patch, allows remote attackers to b…
7.5
First published (updated )
Cvs CvsThe CVS 1.10.8 server does not properly restrict users from creating arbitrary Checkin.prog or Updat…
7.2
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
FreeBSD FreeBSDFormat string vulnerability in wrapper.c in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16 al…
7.1
First published (updated )
Cvs CvsConcurrent Versions Software (CVS) uses predictable temporary file names for locking, which allows l…
5.5
First published (updated )
Cvs CvsCVS before 1.10.8 does not properly initialize a global variable, which allows remote attackers to c…
First published (updated )
Cvs CvsCVS 1.12 and earlier on Debian GNU/Linux does not properly handle when a mapping for the current rep…
First published (updated )
Cvs CvsCVS before 1.11 allows CVS clients to read arbitrary files via .. (dot dot) sequences in filenames v…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Cvs CvsCVS 1.11.x before 1.11.17, and 1.12.x before 1.12.9, allows remote attackers to determine the existe…
First published (updated )
Cvs Cvscvsbug in CVS 1.12.12 and earlier creates temporary files insecurely, which allows local users to ov…
4.6
First published (updated )
Cvs CvsThe client for CVS before 1.11 allows a remote malicious CVS server to create arbitrary files using …
2.6
First published (updated )
Cvs CvsThe CVS 1.10.8 client trusts pathnames that are provided by the CVS server, which allows the server …
2.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.