Skip to content
Noroxi

subversion records

7 published records for vendor subversion. 0 of them have been exploited in the wild (listed in CISA KEV) and 1 have a ready-made attack tool.

Filter by product ↓

Researcher profile

Entered KEV
0 · 0%
Weaponized
1 · 14.3%
Pre-auth RCE
2
With a fix record
85.7%
Median publish → KEV
No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    7 records
    • CVE-2004-0397
      53Plan

      Stack-based buffer overflow during the apr_time_t data conversion in Subversion 1.0.2 and earlier allows remote attackers to execute arbitra

      HighCVSS 7.5WeaponizedEPSS 75%

      subversion · subversionJul 7, 2004

    • CVE-2004-0413
      42Plan

      libsvn_ra_svn in Subversion 1.0.4 trusts the length field of (1) svn://, (2) svn+ssh://, and (3) other svn protocol URL strings, which allow

      CriticalCVSS 10.0No exploitEPSS 5%

      subversion · subversionAug 6, 2004

    • CVE-2009-2411
      36Monitor

      Multiple integer overflows in the libsvn_delta library in Subversion before 1.5.7, and 1.6.x before 1.6.4, allow remote authenticated users

      HighCVSS 8.5No exploitEPSS 5%

      subversion · subversionAug 7, 2009

    • CVE-2007-3846
      24Monitor

      Directory traversal vulnerability in Subversion before 1.4.5, as used by TortoiseSVN before 1.4.5 and possibly other products, when run on W

      MediumCVSS 6.0No exploitEPSS 1%

      subversion · subversionAug 28, 2007

    • CVE-2004-0749
      20Monitor

      The mod_authz_svn module in Subversion 1.0.7 and earlier does not properly restrict access to all metadata on unreadable paths, which could

      MediumCVSS 5.0No exploitEPSS 1%

      subversion · subversionDec 23, 2004

    • CVE-2007-2448
      8Monitor

      Subversion 1.4.3 and earlier does not properly implement the "partial access" privilege for users who have access to changed paths but not c

      LowCVSS 2.1No exploitEPSS 1%

      subversion · subversionJun 14, 2007

    • CVE-2004-1438
      8Monitor

      The mod_authz_svn Apache module for Subversion 1.0.4-r1 and earlier allows remote authenticated users, with write access to the repository,

      LowCVSS 2.1No exploitEPSS 0%

      subversion · subversionDec 31, 2004