Approved changes feed: RSS · Atom

cpe:2.3:a:git:git:1.6.0.4:*:*:*:*:*:*:*

part: a version: 1.6.0.4 update: *

VendorGit (6ebdb489-ead0-5dd4-8271-23d1b43b29e9)
ProductGit (a8ebe631-2ea3-5d47-a461-2c01c7e21d38)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/git/git purl2cpe 2026-06-01 10:15:43.014040
pkg:gitlab/gitlab-org/git purl2cpe 2026-06-01 10:15:43.014042

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-3906 vulnerable 2026-06-08 04:55:17.875163 Details available
Cross-site scripting (XSS) vulnerability in Gitweb 1.7.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) f and (2) fp parameters.
Published: 2010-12-17T18:00:00.000Z
Updated: 2024-08-07T03:26:12.208Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2108 vulnerable 2026-06-08 04:51:26.784799 Details available
git-daemon in git 1.4.4.5 through 1.6.3 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a request containing extra unrecognized arguments.
Published: 2009-06-18T18:00:00.000Z
Updated: 2024-08-07T05:36:20.990Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5916 vulnerable 2026-06-08 04:50:53.606148 Details available
gitweb/gitweb.perl in gitweb in Git 1.6.x before 1.6.0.6, 1.5.6.x before 1.5.6.6, 1.5.5.x before 1.5.5.6, 1.5.4.x before 1.5.4.7, and other versions after 1.4.3 allows local repository owners to execute arbitrary commands by modifying the diff.external configuration variable and executing a crafted gitweb query.
Published: 2009-01-21T02:00:00.000Z
Updated: 2024-08-07T11:13:13.759Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.