Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Usvn Component: Usvn Clear all filters
TI-2020-13137 CVE-2020-17363 · GHSA-3435-jrhh-rq8g

USVN (aka User-friendly SVN) before 1.0.9 allows remote code execution via shell…

Priority MEDIUM 50

USVN (aka User-friendly SVN) before 1.0.9 allows remote code execution via shell metacharacters in the number_start or number_end parameter to LastHundredRequest (aka lasthundredrequestAction) in the Timeline module.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.04571 Published 2020-12-31 No fix listed CWE-78
TI-2018-00650 CVE-2018-0695 · GHSA-xvfv-hp97-ff3g

Cross-site scripting in USVN Team User-friendly SVN

Priority LOW 29

Cross-site scripting vulnerability in User-friendly SVN (USVN) Version 1.0.7 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00788 Published 2018-11-15 No fix listed CWE-79