GI
Vendor
git
19
CVEs
1
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-48384 In wildKEV | GI git git | 8.0 | Jul 8 | Git allows arbitrary code execution through broken config quoting |
| CVE-2024-52005 | GI Git Git | 8.8 | Jan 15 | Git is a source code management tool |
| CVE-2024-52006 | GI Git Git | 7.5 | Jan 14 | Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals |
| CVE-2024-50349 | GI Git Git | 4.7 | Jan 14 | Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals |
| CVE-2024-32002 | GI Git Git | 9.0 | May 14 | Git is a revision control system |
| CVE-2023-23946 | GI git git | 7.5 | Feb 14 | Git's `git apply` overwriting paths outside the working tree |
| CVE-2023-22490 | GI git git | 5.5 | Feb 14 | Git vulnerable to local clone-based data exfiltration with non-local transports |
| CVE-2022-39260 | GI git git | 8.8 | Oct 19 | Git vulnerable to Remote Code Execution via Heap overflow in `git shell` |
| CVE-2022-39253 | GI git git | 5.5 | Oct 19 | Git subject to exposure of sensitive information via local clone of symbolic links |
| CVE-2022-25648 | GI Git Git | 9.8 | Apr 19 | The package git before 1.11.0 are vulnerable to Command Injection via git argument injection |
| CVE-2020-5260 | GI Git Git | 7.5 | Apr 14 | Affected versions of Git have a vulnerability whereby Git can be tricked into sending private credentials to a host controlled by an attacker |
| CVE-2017-8386 | GI Git-shell Git | 8.8 | Jun 1 | git-shell in git before 2.4.12, 2.5.x before 2.5.6, 2.6.x before 2.6.7, 2.7.x before 2.7.5, 2.8.x before 2.8.5, 2.9.x before 2.9.4, 2.10.x before 2.10.3, 2.11.x before 2.11.2, and… |
| CVE-2010-3906 | GI Git Git | – | Dec 17 | Cross-site scripting (XSS) vulnerability in Gitweb 1.7.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) f and (2) fp parameters |
| CVE-2009-2108 | GI Git Git | – | Jun 18 | git-daemon in git 1.4.4.5 through 1.6.3 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a request containing extra unrecognized… |
| CVE-2008-5916 | GI Git Git | – | Jan 21 | gitweb/gitweb.perl in gitweb in Git 1.6.x before 1.6.0.6, 1.5.6.x before 1.5.6.6, 1.5.5.x before 1.5.5.6, 1.5.4.x before 1.5.4.7, and other versions after 1.4.3 allows local… |
| CVE-2008-5516 | GI Git Git | – | Jan 20 | The web interface in git (gitweb) 1.5.x before 1.5.5 allows remote attackers to execute arbitrary commands via shell metacharacters related to git_search |
| CVE-2008-5517 | GI Git Git | – | Jan 13 | The web interface in git (gitweb) 1.5.x before 1.5.6 allows remote attackers to execute arbitrary commands via shell metacharacters related to (1) git_snapshot and (2) git_object |
| CVE-2008-3546 | GI Git Git | – | Aug 7 | Stack-based buffer overflow in the (1) diff_addremove and (2) diff_change functions in GIT before 1.5.6.4 might allow local users to execute arbitrary code via a PATH whose length… |
| CVE-2006-0477 | GI Git Git | – | Jan 31 | Buffer overflow in git-checkout-index in GIT before 1.1.5 allows remote attackers to execute arbitrary code via an index file with a long symbolic link |