GCVE - cpe:2.3:a:git:git:1.5.5:rc2:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:git:git:1.5.5:rc2:*:*:*:*:*:*

part: a version: 1.5.5 update: rc2

Vendor	Git (`6ebdb489-ead0-5dd4-8271-23d1b43b29e9`)
Product	Git (`a8ebe631-2ea3-5d47-a461-2c01c7e21d38`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/git/git`	purl2cpe	2026-06-01 10:15:42.993886
`pkg:gitlab/gitlab-org/git`	purl2cpe	2026-06-01 10:15:42.993887

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2010-3906`	vulnerable	2026-06-08 04:55:17.860817	Details available Cross-site scripting (XSS) vulnerability in Gitweb 1.7.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) f and (2) fp parameters. Published: 2010-12-17T18:00:00.000Z Updated: 2024-08-07T03:26:12.208Z Open on db.gcve.eu Reference links http://secunia.com/advisories/43457 http://secunia.com/advisories/42645 http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052518.html http://secunia.com/advisories/42731 http://www.vupen.com/english/advisories/2010/3323	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-2108`	vulnerable	2026-06-08 04:51:26.772309	Details available git-daemon in git 1.4.4.5 through 1.6.3 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a request containing extra unrecognized arguments. Published: 2009-06-18T18:00:00.000Z Updated: 2024-08-07T05:36:20.990Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id?1022398 http://www.vupen.com/english/advisories/2009/1579 https://exchange.xforce.ibmcloud.com/vulnerabilities/51083 http://thread.gmane.org/gmane.comp.version-control.git/120724 https://www.redhat.com/archives/fedora-security-list/2009-June/msg00000.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-5916`	vulnerable	2026-06-08 04:50:53.592093	Details available gitweb/gitweb.perl in gitweb in Git 1.6.x before 1.6.0.6, 1.5.6.x before 1.5.6.6, 1.5.5.x before 1.5.5.6, 1.5.4.x before 1.5.4.7, and other versions after 1.4.3 allows local repository owners to execute arbitrary commands by modifying the diff.external configuration variable and executing a crafted gitweb query. Published: 2009-01-21T02:00:00.000Z Updated: 2024-08-07T11:13:13.759Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/47528 http://www.openwall.com/lists/oss-security/2009/01/20/2 http://osvdb.org/50918 http://secunia.com/advisories/33282 http://www.gentoo.org/security/en/glsa/glsa-200903-15.xml	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-5516`	vulnerable	2026-06-08 04:50:51.792262	Details available The web interface in git (gitweb) 1.5.x before 1.5.5 allows remote attackers to execute arbitrary commands via shell metacharacters related to git_search. Published: 2009-01-20T16:00:00.000Z Updated: 2024-08-07T10:56:46.863Z Open on db.gcve.eu Reference links http://www.debian.org/security/2009/dsa-1708 https://bugzilla.redhat.com/show_bug.cgi?id=479715 http://www.gentoo.org/security/en/glsa/glsa-200903-15.xml http://wiki.rpath.com/Advisories:rPSA-2009-0005 http://www.vupen.com/english/advisories/2009/0175	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.