Login Request a demo
GI
Vendor
Git-scm
1 product with CVEs on record
41
CVEs
1
On KEV
0
New 30D
Products
GI
Git
Git-scm
9.8
41 CVEs1 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2025-48384
In wildKEV
GI
Git
Git-scm
8.0
4%
Jul 8Git allows arbitrary code execution through broken config quoting
CVE-2024-32465
GI
Git
Git-scm
7.8
1%
May 14Git is a revision control system
CVE-2024-32021
GI
Git
Git-scm
7.1
1%
May 14Git is a revision control system
CVE-2024-32020
GI
Git
Git-scm
3.3
1%
May 14Git is a revision control system
CVE-2024-32004
GI
Git
Git-scm
7.8
1%
May 14Git is a revision control system
CVE-2023-29007
GI
Git
Git-scm
7.8
6%
Apr 25Git is a revision control system
CVE-2023-25652
GI
Git
Git-scm
7.5
52%
Apr 25Git is a revision control system
CVE-2023-23946
GI
Git
Git-scm
7.5
1%
Feb 14Git's `git apply` overwriting paths outside the working tree
CVE-2023-22490
GI
Git
Git-scm
5.5
1%
Feb 14Git vulnerable to local clone-based data exfiltration with non-local transports
CVE-2022-41903
GI
Git
Git-scm
9.8
44%
Jan 17Git is distributed revision control system
CVE-2022-23521
GI
Git
Git-scm
9.8
56%
Jan 17Git is distributed revision control system
CVE-2022-41953
GI
Git
Git-scm
7.8
7%
Jan 17Git GUI is a convenient graphical tool that comes with Git for Windows
CVE-2022-39260
GI
Git
Git-scm
8.8
4%
Oct 19Git vulnerable to Remote Code Execution via Heap overflow in `git shell`
CVE-2022-39253
GI
Git
Git-scm
5.5
1%
Oct 19Git subject to exposure of sensitive information via local clone of symbolic links
CVE-2022-29187
GI
Git
Git-scm
7.8
0%
Jul 12Git is a distributed revision control system
CVE-2022-24765
GI
Git
Git-scm
7.8
1%
Apr 12Git for Windows is a fork of Git containing Windows-specific patches
CVE-2022-24975
GI
Git
Git-scm
7.5
3%
Feb 11The --mirror documentation for Git through 2.35.1 does not mention the availability of deleted content, aka the "GitBleed" issue
CVE-2021-40330
GI
Git
Git-scm
7.5
3%
Aug 31git_connect_git in connect.c in Git before 2.30.1 allows a repository path to contain a newline character, which may result in unexpected cross-protocol requests, as demonstrated…
CVE-2021-21300
GI
Git
Git-scm
7.5
89%
Mar 9Git is an open-source distributed revision control system
CVE-2020-11008
GI
Git
Git-scm
7.5
4%
Apr 21Affected versions of Git have a vulnerability whereby Git can be tricked into sending private credentials to a host controlled by an attacker
CVE-2020-5260
GI
Git
Git-scm
7.5
10%
Apr 14Affected versions of Git have a vulnerability whereby Git can be tricked into sending private credentials to a host controlled by an attacker
CVE-2014-9390
GI
Git
Git-scm
9.8
76%
Feb 12Git before 1.8.5.6, 1.9.x before 1.9.5, 2.0.x before 2.0.5, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 on Windows and OS X; Mercurial before 3.2.3 on Windows and OS X; Apple Xcode…
CVE-2019-1353
GI
Git
Git-scm
9.8
2%
Jan 24An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6
CVE-2019-1348
GI
Git
Git-scm
3.3
0%
Jan 24An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6
CVE-2019-1387
GI
Git
Git-scm
8.8
4%
Dec 18An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6
CVE-2019-19604
GI
Git
Git-scm
7.8
4%
Dec 11Arbitrary command execution is possible in Git before 2.20.2, 2.21.x before 2.21.1, 2.22.x before 2.22.2, 2.23.x before 2.23.1, and 2.24.x before 2.24.1 because a "git submodule…
CVE-2018-19486
GI
Git
Git-scm
9.8
4%
Nov 23Git before 2.19.2 on Linux and UNIX executes commands from the current working directory (as if '.' were at the end of $PATH) in certain cases involving the run_command() API and…
CVE-2018-17456
GI
Git
Git-scm
9.8
97%
Oct 6Git before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x before 2.18.1, and 2.19.x before 2.19.1 allows remote code execution during processing…
CVE-2018-11235
GI
Git
Git-scm
7.8
48%
May 30In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, remote code execution can occur
CVE-2018-11233
GI
Git
Git-scm
7.5
4%
May 30In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, code to sanity-check pathnames on NTFS can result in reading…
CVE-2018-1000021
GI
Git
Git-scm
5.0
1%
Feb 9GIT version 2.15.1 and earlier contains a Input Validation Error vulnerability in Client that can result in problems including messing up terminal configuration to RCE
CVE-2017-15298
GI
Git
Git-scm
5.5
2%
Oct 14Git through 2.14.2 mishandles layers of tree objects, which allows remote attackers to cause a denial of service (memory consumption) via a crafted repository, aka a Git bomb
CVE-2017-1000117
GI
Git
Git-scm
8.8
78%
Oct 5A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an attempt to visit the URL can result in any program that exists on the victim's machine…
CVE-2017-14867
GI
Git
Git-scm
8.8
36%
Sep 29Git before 2.10.5, 2.11.x before 2.11.4, 2.12.x before 2.12.5, 2.13.x before 2.13.6, and 2.14.x before 2.14.2 uses unsafe Perl scripts to support subcommands such as cvsserver,…
CVE-2014-9938
GI
Git
Git-scm
8.8
2%
Mar 20contrib/completion/git-prompt.sh in Git before 1.9.3 does not sanitize branch names in the PS1 variable, allowing a malicious repository to cause code execution
CVE-2016-2324
GI
Git
Git-scm
9.8
18%
Apr 8Integer overflow in Git before 2.7.4 allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees, which triggers a heap-based buffer…
CVE-2016-2315
GI
Git
Git-scm
9.8
17%
Apr 8revision.c in git before 2.7.4 uses an incorrect integer data type, which allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees,…
CVE-2013-0308
GI
Git
Git-scm
–
2%
Mar 8The imap-send command in GIT before 1.8.1.4 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509…
CVE-2010-3906
GI
Git
Git-scm
–
6%
Dec 17Cross-site scripting (XSS) vulnerability in Gitweb 1.7.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) f and (2) fp parameters
CVE-2010-2542
GI
Git
Git-scm
–
3%
Aug 11Stack-based buffer overflow in the is_git_directory function in setup.c in Git before 1.7.2.1 allows local users to gain privileges via a long gitdir: field in a .git file in a…
CVE-2008-5516
GI
Git
Git-scm
–
4%
Jan 20The web interface in git (gitweb) 1.5.x before 1.5.5 allows remote attackers to execute arbitrary commands via shell metacharacters related to git_search