Browse CVEs

HIGH 10.0 CVE-2012-0804EPSS 8% Heap-based buffer overflow in the proxy_connect function in src/client.c in CVS 1.11 and 1.12 allows remote HTTP proxy servers to cause a denial of s… Cvs Mitigation only Fix from $1,9502012-05-29 HIGH 7.5 CVE-2004-1342 CVS 1.12 and earlier on Debian GNU/Linux, when using the repouid patch, allows remote attackers to bypass authentication via the pserver access metho… Cvs Patch available Fix from $1,9502005-04-27 HIGH 7.5 CVE-2005-0753 Buffer overflow in CVS before 1.11.20 allows remote attackers to execute arbitrary code. Cvs Patch available Fix from $1,9502005-04-18 MEDIUM 5.0 CVE-2004-1343 CVS 1.12 and earlier on Debian GNU/Linux does not properly handle when a mapping for the current repository does not exist in the cvs-repouids file, … Cvs Patch available Fix from $1,6002004-12-31 HIGH 7.5 CVE-2004-0396EPSS 68% Heap-based buffer overflow in CVS 1.11.x up to 1.11.15, and 1.12.x up to 1.12.7, when using the pserver mechanism allows remote attackers to execute … Cvs Patch available Fix from $1,9502004-06-14 MEDIUM 5.0 CVE-2004-0405 CVS before 1.11 allows CVS clients to read arbitrary files via .. (dot dot) sequences in filenames via CVS client requests, a different vulnerability… Cvs after 1.10 Fix from $1,6002004-06-01 HIGH 7.5 CVE-2003-0977 CVS server before 1.11.10 may allow attackers to cause the CVS server to create directories and files in the file system root directory via malformed… Cvs Patch available Fix from $1,9502004-01-05 MEDIUM 5.0 CVE-2002-0092 CVS before 1.10.8 does not properly initialize a global variable, which allows remote attackers to cause a denial of service (server crash) via the d… Cvs after 1.10.8 Fix from $1,6002002-03-15 HIGH 7.2 CVE-2000-0680 The CVS 1.10.8 server does not properly restrict users from creating arbitrary Checkin.prog or Update.prog programs, which allows remote CVS committe… Cvs Patch available Fix from $1,9502000-10-20