Vulnerabilities > Viewvc > Low

DATE CVE VULNERABILITY TITLE RISK
2020-04-03 CVE-2020-5283 Cross-site Scripting vulnerability in Viewvc
ViewVC before versions 1.1.28 and 1.2.1 has a XSS vulnerability in CVS show_subdir_lastmod support.
network
low complexity
viewvc CWE-79
3.5
2010-03-31 CVE-2010-0132 Cross-Site Scripting vulnerability in Viewvc
Cross-site scripting (XSS) vulnerability in ViewVC 1.1 before 1.1.5 and 1.0 before 1.0.11, when the regular expression search functionality is enabled, allows remote attackers to inject arbitrary web script or HTML via vectors related to "search_re input," a different vulnerability than CVE-2010-0736.
network
high complexity
viewvc CWE-79
2.6