tigris records
6 published records for vendor tigris.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 2
- With a fix record
- 33.3%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-264 Permissions, Privileges, and Access Controls2
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-338 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
6 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
38Monitor | CVE-2010-3199No exploit | Untrusted search path vulnerability in TortoiseSVN 1.6.10, Build 19898 and earlier allows local users, and possibly remote attackers, to exetigris · tortoisesvn · CWE-264 | Critical9.3 | — | 4.2% | Sep 10, 2010 |
31Monitor | CVE-2008-5920Proof of concept | The create_anchors function in utils.inc in WebSVN 1.x allows remote attackers to execute arbitrary PHP code via a crafted username that is tigris · websvn · CWE-94 | High7.5 | — | 2.9% | Jan 20, 2009 |
29Monitor | CVE-2008-5919Proof of concept | Directory traversal vulnerability in rss.php in WebSVN 2.0 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to overwrtigris · websvn · CWE-22 | Medium6.8 | — | 6.3% | Jan 20, 2009 |
25Monitor | CVE-2024-31497Proof of concept | In PuTTY 0.68 through 0.80 before 0.81, biased ECDSA nonce generation allows an attacker to recover a user's NIST P-521 secret key via a quiputty · putty · CWE-338 | Medium5.9 | — | 5.7% | Apr 15, 2024 |
18Monitor | CVE-2008-5918Proof of concept | Cross-site scripting (XSS) vulnerability in the getParameterisedSelfUrl function in index.php in WebSVN 2.0 and earlier allows remote attacktigris · websvn · CWE-79 | Medium4.3 | — | 4.4% | Jan 20, 2009 |
14Monitor | CVE-2009-0240No exploit | listing.php in WebSVN 2.0 and possibly 1.7 beta, when using an SVN authz file, allows remote authenticated users to read changelogs or diffstigris · websvn · CWE-264 | Low3.5 | — | 1.5% | Jan 20, 2009 |
- CVE-2010-319938Monitor
Untrusted search path vulnerability in TortoiseSVN 1.6.10, Build 19898 and earlier allows local users, and possibly remote attackers, to exe
CriticalCVSS 9.3No exploitEPSS 4%tigris · tortoisesvnSep 10, 2010
- CVE-2008-592031Monitor
The create_anchors function in utils.inc in WebSVN 1.x allows remote attackers to execute arbitrary PHP code via a crafted username that is
HighCVSS 7.5Proof of conceptEPSS 2%tigris · websvnJan 20, 2009
- CVE-2008-591929Monitor
Directory traversal vulnerability in rss.php in WebSVN 2.0 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to overwr
MediumCVSS 6.8Proof of conceptEPSS 6%tigris · websvnJan 20, 2009
- CVE-2024-3149725Monitor
In PuTTY 0.68 through 0.80 before 0.81, biased ECDSA nonce generation allows an attacker to recover a user's NIST P-521 secret key via a qui
MediumCVSS 5.9Proof of conceptEPSS 5%putty · puttyApr 15, 2024
- CVE-2008-591818Monitor
Cross-site scripting (XSS) vulnerability in the getParameterisedSelfUrl function in index.php in WebSVN 2.0 and earlier allows remote attack
MediumCVSS 4.3Proof of conceptEPSS 4%tigris · websvnJan 20, 2009
- CVE-2009-024014Monitor
listing.php in WebSVN 2.0 and possibly 1.7 beta, when using an SVN authz file, allows remote authenticated users to read changelogs or diffs
LowCVSS 3.5No exploitEPSS 1%tigris · websvnJan 20, 2009