Skip to content
OpenAdvisories

Package · Debian

git

53 known vulnerabilities.

53 results · Feed

  • Unscored —
    CVE-2018-17456 Public exploit EPSS 97%

    Git before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x before 2.18.1, and 2.19.x b…

  • Unscored —

    In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, code …

  • Unscored —
    CVE-2018-11235 Public exploit EPSS 47%

    In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, remot…

  • Unscored —

    GIT version 2.15.1 and earlier contains a Input Validation Error vulnerability in Client that can result in problems in…

  • Unscored —

    Git through 2.14.2 mishandles layers of tree objects, which allows remote attackers to cause a denial of service (memor…

  • Unscored —
    CVE-2017-1000117 Public exploit EPSS 78%

    A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an attempt to visit the URL c…

  • Unscored —
    CVE-2017-14867 EPSS 36%

    Git before 2.10.5, 2.11.x before 2.11.4, 2.12.x before 2.12.5, 2.13.x before 2.13.6, and 2.14.x before 2.14.2 uses unsa…

  • Unscored —
    CVE-2017-8386 Public exploit EPSS 12%

    git-shell in git before 2.4.12, 2.5.x before 2.5.6, 2.6.x before 2.6.7, 2.7.x before 2.7.5, 2.8.x before 2.8.5, 2.9.x b…

  • Unscored —

    contrib/completion/git-prompt.sh in Git before 1.9.3 does not sanitize branch names in the PS1 variable, allowing a mal…

  • Unscored —
    CVE-2015-7545 Public exploit EPSS 19%

    The (1) git-remote-ext and (2) unspecified other remote helper programs in Git before 2.3.10, 2.4.x before 2.4.10, 2.5.…

  • Unscored —
    CVE-2016-2315 EPSS 17%

    revision.c in git before 2.7.4 uses an incorrect integer data type, which allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2016-2324 EPSS 18%

    Integer overflow in Git before 2.7.4 allows remote attackers to execute arbitrary code via a (1) long filename or (2) m…

  • Unscored —
    CVE-2010-3906 Public exploit

    Cross-site scripting (XSS) vulnerability in Gitweb 1.7.3.3 and earlier allows remote attackers to inject arbitrary web …