Viewvc vulnerabilities

Products

• Viewvc 21

Newest

• viewvc ViewVC's standalone server exposes arbitrary server filesystem content CVE-2025-54141 Fix available 7.5 HighJuly 22, 2025
• viewvc ViewVC XSS vulnerability in revision view changed path "copyfrom" locations CVE-2023-22464 Fix available 5.4 MediumJanuary 4, 2023
• viewvc ViewVC XSS vulnerability in revision view changed paths CVE-2023-22456 Fix available 6.1 MediumJanuary 3, 2023
• viewvc XSS vulnerability in CVS show_subdir_lastmod support CVE-2020-5283 Fix available 3.1 LowApril 3, 2020
• viewvc, debian linux +1 more viewvc 1.0.3 allows improper access control to files in a repository when using the "forbidden"... CVE-2007-5743 7.5 HighNovember 7, 2019
• viewvc, debian linux, opensuse leap +2 more Cross-site scripting (XSS) vulnerability in the nav_path function in lib/viewvc.py in ViewVC... CVE-2017-5938 Fix available 6.1 MediumFebruary 9, 2017
• viewvc, debian linux +1 more Cross-site scripting (XSS) vulnerability in the "extra" details in the DiffSource._get_row... CVE-2012-4533 Fix available 4.3 MediumOctober 23, 2012
• viewvc The SVN revision view (lib/vclib/svn/svn_repos.py) in ViewVC before 1.1.15 does not properly... CVE-2012-3357 Fix available 5.0 MediumJuly 22, 2012
• viewvc The remote SVN views functionality (lib/vclib/svn/svn_ra.py) in ViewVC before 1.1.15 does not... CVE-2012-3356 Fix available 5.0 MediumJuly 22, 2012
• viewvc ViewVC before 1.1.11 allows remote attackers to bypass the cvsdb row_limit configuration setting,... CVE-2009-5024 Fix available 5.0 MediumMay 23, 2011
• viewvc Cross-site scripting (XSS) vulnerability in ViewVC 1.1 before 1.1.5 and 1.0 before 1.0.11, when... CVE-2010-0132 2.6 LowMarch 31, 2010
• viewvc Cross-site scripting (XSS) vulnerability in the view_queryform function in lib/viewvc.py in... CVE-2010-0736 4.3 MediumMarch 19, 2010
• viewvc query.py in the query interface in ViewVC before 1.1.3 does not reject configurations that... CVE-2010-0005 7.5 HighJanuary 29, 2010
• viewvc ViewVC before 1.1.3 composes the root listing view without using the authorizer for each root,... CVE-2010-0004 5.0 MediumJanuary 29, 2010
• viewvc Unspecified vulnerability in ViewVC 1.0 before 1.0.9 and 1.1 before 1.1.2 has unknown impact and... CVE-2009-3619 5.0 MediumNovember 10, 2009
• viewvc Cross-site scripting (XSS) vulnerability in viewvc.py in ViewVC 1.0 before 1.0.9 and 1.1 before 1... CVE-2009-3618 4.3 MediumNovember 10, 2009
• viewvc lib/viewvc.py in ViewVC 1.0.5 uses the content-type parameter in the HTTP request for the Content... CVE-2008-4325 5.8 MediumSeptember 30, 2008
• viewvc ViewVC before 1.0.5 provides revision metadata without properly checking whether access was... CVE-2008-1292 4.3 MediumMarch 24, 2008
• viewvc ViewVC before 1.0.5 stores sensitive information under the web root with insufficient access... CVE-2008-1291 4.3 MediumMarch 24, 2008
• viewvc ViewVC before 1.0.5 includes "all-forbidden" files within search results that list CVS or... CVE-2008-1290 4.3 MediumMarch 24, 2008
• viewvc ViewVC 1.0.2 and earlier does not specify a charset in its HTTP headers or HTML documents, which... CVE-2006-5442 6.8 MediumOctober 21, 2006