Export limit exceeded: 425822 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2004-0778

security flaw

CVS 1.11.x before 1.11.17, and 1.12.x before 1.12.9, allows remote attackers to determine the existence of arbitrary files and directories via the -X command for an alternate history file, which causes different error messages to be returned.

CVSS 2.0 · 5.0 Medium EPSS 2.4% KEV · Not listed
Vendors
Gnu Redhat
Products
Cvs Enterprise Linux
CVE-2017-12836

cvs: Command injection via malicious ssh URLs

CVS 1.12.x, when configured to use SSH for remote repositories, might allow remote attackers to execute arbitrary code via a repository URL with a crafted hostname, as demonstrated by "-oProxyCommand=id;localhost:/bar."

CVSS 3.0 · 7.5 High EPSS 6.6% KEV · Not listed
Vendors
Canonical Debian Gnu
Products
Ubuntu Linux Debian Linux Cvs