usvn records
7 published records for vendor usvn.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-264 Permissions, Privileges, and Access Controls1
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
7 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2020-17363No exploit | USVN (aka User-friendly SVN) before 1.0.9 allows remote code execution via shell metacharacters in the number_start or number_end parameter usvn · usvn · CWE-78 | Critical9.9 | — | 4.5% | Dec 30, 2020 |
40Plan | CVE-2020-25069No exploit | USVN (aka User-friendly SVN) before 1.0.10 allows attackers to execute arbitrary code in the commit view.usvn · usvn | Critical9.8 | — | 1.9% | Sep 1, 2020 |
35Monitor | CVE-2020-25070No exploit | USVN (aka User-friendly SVN) before 1.0.10 allows CSRF, related to the lack of the SameSite Strict feature.usvn · usvn · CWE-352 | High8.8 | — | 0.4% | Sep 1, 2020 |
24Monitor | CVE-2018-0695No exploit | Cross-site scripting vulnerability in User-friendly SVN (USVN) Version 1.0.7 and earlier allows remote attackers to inject arbitrary web scrusvn · usvn · CWE-79 | Medium6.1 | — | 0.7% | Nov 15, 2018 |
24Monitor | CVE-2020-17364No exploit | USVN (aka User-friendly SVN) before 1.0.9 allows XSS via SVN logs.usvn · user-friendly svn · CWE-79 | Medium6.1 | — | 0.7% | Aug 5, 2020 |
20Monitor | CVE-2007-5945No exploit | USVN before 0.6.5 allows remote attackers to obtain a list of repository contents via unspecified vectors.usvn · user-friendly svn · CWE-264 | Medium5.0 | — | 1.4% | Nov 13, 2007 |
17Monitor | CVE-2014-4719No exploit | Cross-site scripting (XSS) vulnerability in the login panel (svn/login/) in User-Friendly SVN (aka USVN) before 1.0.7 allows remote attackerusvn · user-friendly svn · CWE-79 | Medium4.3 | — | 1.4% | Jul 3, 2014 |
- CVE-2020-1736340Plan
USVN (aka User-friendly SVN) before 1.0.9 allows remote code execution via shell metacharacters in the number_start or number_end parameter
CriticalCVSS 9.9No exploitEPSS 4%usvn · usvnDec 30, 2020
- CVE-2020-2506940Plan
USVN (aka User-friendly SVN) before 1.0.10 allows attackers to execute arbitrary code in the commit view.
CriticalCVSS 9.8No exploitEPSS 1%usvn · usvnSep 1, 2020
- CVE-2020-2507035Monitor
USVN (aka User-friendly SVN) before 1.0.10 allows CSRF, related to the lack of the SameSite Strict feature.
HighCVSS 8.8No exploitEPSS 0%usvn · usvnSep 1, 2020
- CVE-2018-069524Monitor
Cross-site scripting vulnerability in User-friendly SVN (USVN) Version 1.0.7 and earlier allows remote attackers to inject arbitrary web scr
MediumCVSS 6.1No exploitEPSS 0%usvn · usvnNov 15, 2018
- CVE-2020-1736424Monitor
USVN (aka User-friendly SVN) before 1.0.9 allows XSS via SVN logs.
MediumCVSS 6.1No exploitEPSS 0%usvn · user-friendly svnAug 5, 2020
- CVE-2007-594520Monitor
USVN before 0.6.5 allows remote attackers to obtain a list of repository contents via unspecified vectors.
MediumCVSS 5.0No exploitEPSS 1%usvn · user-friendly svnNov 13, 2007
- CVE-2014-471917Monitor
Cross-site scripting (XSS) vulnerability in the login panel (svn/login/) in User-Friendly SVN (aka USVN) before 1.0.7 allows remote attacker
MediumCVSS 4.3No exploitEPSS 1%usvn · user-friendly svnJul 3, 2014