GCVE - cpe:2.3:a:git:git:1.5.5.3:r1:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:git:git:1.5.5.3:r1:*:*:*:*:*:*

part: a version: 1.5.5.3 update: r1

Vendor	Git (`6ebdb489-ead0-5dd4-8271-23d1b43b29e9`)
Product	Git (`a8ebe631-2ea3-5d47-a461-2c01c7e21d38`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/git/git`	purl2cpe	2026-06-01 10:15:42.987671
`pkg:gitlab/gitlab-org/git`	purl2cpe	2026-06-01 10:15:42.987673

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2010-3906`	vulnerable	2026-06-08 04:55:17.863131	Details available Cross-site scripting (XSS) vulnerability in Gitweb 1.7.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) f and (2) fp parameters. Published: 2010-12-17T18:00:00.000Z Updated: 2024-08-07T03:26:12.208Z Open on db.gcve.eu Reference links http://secunia.com/advisories/43457 http://secunia.com/advisories/42645 http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052518.html http://secunia.com/advisories/42731 http://www.vupen.com/english/advisories/2010/3323	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-2108`	vulnerable	2026-06-08 04:51:26.774215	Details available git-daemon in git 1.4.4.5 through 1.6.3 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a request containing extra unrecognized arguments. Published: 2009-06-18T18:00:00.000Z Updated: 2024-08-07T05:36:20.990Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id?1022398 http://www.vupen.com/english/advisories/2009/1579 https://exchange.xforce.ibmcloud.com/vulnerabilities/51083 http://thread.gmane.org/gmane.comp.version-control.git/120724 https://www.redhat.com/archives/fedora-security-list/2009-June/msg00000.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-5916`	vulnerable	2026-06-08 04:50:53.598979	Details available gitweb/gitweb.perl in gitweb in Git 1.6.x before 1.6.0.6, 1.5.6.x before 1.5.6.6, 1.5.5.x before 1.5.5.6, 1.5.4.x before 1.5.4.7, and other versions after 1.4.3 allows local repository owners to execute arbitrary commands by modifying the diff.external configuration variable and executing a crafted gitweb query. Published: 2009-01-21T02:00:00.000Z Updated: 2024-08-07T11:13:13.759Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/47528 http://www.openwall.com/lists/oss-security/2009/01/20/2 http://osvdb.org/50918 http://secunia.com/advisories/33282 http://www.gentoo.org/security/en/glsa/glsa-200903-15.xml	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-3546`	vulnerable	2026-06-08 04:50:35.198093	Details available Stack-based buffer overflow in the (1) diff_addremove and (2) diff_change functions in GIT before 1.5.6.4 might allow local users to execute arbitrary code via a PATH whose length is larger than the system's PATH_MAX when running GIT utilities such as git-diff or git-grep. Published: 2008-08-07T21:00:00.000Z Updated: 2024-08-07T09:45:18.573Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/495391/100/0/threaded http://www.kernel.org/pub/software/scm/git/docs/RelNotes-1.5.6.4.txt http://secunia.com/advisories/32029 http://wiki.rpath.com/Advisories:rPSA-2008-0253 https://exchange.xforce.ibmcloud.com/vulnerabilities/44217	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.