Vulnerabilities > Apache > Subversion > 1.2.2

DATE CVE VULNERABILITY TITLE RISK
2013-07-31 CVE-2013-2088 Improper Input Validation vulnerability in multiple products
contrib/hook-scripts/svn-keyword-check.pl in Subversion before 1.6.23 allows remote authenticated users with commit permissions to execute arbitrary commands via shell metacharacters in a filename.
network
high complexity
apache collabnet opensuse CWE-20
7.1
2013-07-31 CVE-2013-1968 Remote Denial of Service vulnerability in Apache Subversion
Subversion before 1.6.23 and 1.7.x before 1.7.10 allows remote authenticated users to cause a denial of service (FSFS repository corruption) via a newline character in a file name.
network
low complexity
apache collabnet canonical opensuse
5.5
2013-05-02 CVE-2013-1846 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in multiple products
The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x before 1.6.21 and 1.7.0 through 1.7.8 allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) via a LOCK on an activity URL.
network
low complexity
apache opensuse CWE-119
4.0
2011-06-06 CVE-2011-1752 Denial of Service and Information Disclosure vulnerability in Subversion 'mod_dav_svn'
The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.17, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a request for a baselined WebDAV resource, as exploited in the wild in May 2011.
network
low complexity
apache
5.0
2011-03-11 CVE-2011-0715 Denial Of Service vulnerability in Subversion 'mod_dav_svn' Apache Server NULL Pointer Dereference
The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.16, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a request that contains a lock token.
network
apache
4.3