Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
git git 1.0.0 vulnerabilities and exploits
(subscribe to this query)
7.5
CVSSv2
CVE-2021-3028
git-big-picture prior to 1.0.0 mishandles ' characters in a branch name, leading to code execution.
Git-big-picture Project Git-big-picture
1 Github repository
7.5
CVSSv2
CVE-2020-7630
git-add-remote up to and including 1.0.0 is vulnerable to Command Injection. It allows execution of arbitrary commands via the name argument.
Git-add-remote Project Git-add-remote
7.5
CVSSv2
CVE-2008-5516
The web interface in git (gitweb) 1.5.x prior to 1.5.5 allows remote malicious users to execute arbitrary commands via shell metacharacters related to git_search.
Git Git 0.99.9j
Git Git 0.99.9k
Git Git 0.99.9l
Git Git 0.99.9m
Git Git 0.99.9n
Git Git 1.0.0
Git Git 1.0.0b
Git Git 1.0.3
Git Git 1.0.4
Git Git 1.0.5
Git Git 1.0.6
Git Git 1.0.7
Git Git 1.0.8
Git Git 1.1.1
Git Git 1.1.2
Git Git 1.1.3
Git Git 1.1.4
Git Git 1.1.5
Git Git 1.1.6
Git Git 1.2.0
Git Git 1.2.1
Git Git 1.2.2
7.5
CVSSv2
CVE-2006-0477
Buffer overflow in git-checkout-index in GIT prior to 1.1.5 allows remote malicious users to execute arbitrary code via an index file with a long symbolic link.
Git Git 1.0.3
Git Git 1.0.4
Git Git 1.1.2
Git Git 1.1.3
Git Git 1.0.5
Git Git 1.0.6
Git Git 1.1.4
Git Git 1.0.0
Git Git 1.0.0b
Git Git 1.1.0
Git Git 1.1.1
Git Git 1.0.7
Git Git 1.0.8
6.5
CVSSv2
CVE-2022-24768
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. All unpatched versions of Argo CD starting with 1.0.0 are vulnerable to an improper access control bug, allowing a malicious user to potentially escalate their privileges to admin-level. Versions starting w...
Linuxfoundation Argo-cd
6.5
CVSSv2
CVE-2020-15272
In the git-tag-annotation-action (open source GitHub Action) before version 1.0.1, an attacker can execute arbitrary (*) shell commands if they can control the value of [the `tag` input] or manage to alter the value of [the `GITHUB_REF` environment variable]. The problem has been...
Git-tag-annotation-action Project Git-tag-annotation-action
4.3
CVSSv2
CVE-2010-3906
Cross-site scripting (XSS) vulnerability in Gitweb 1.7.3.3 and previous versions allows remote malicious users to inject arbitrary web script or HTML via the (1) f and (2) fp parameters.
Git Git 1.4.2.4
Git Git 1.4.2
Git Git 1.1.3
Git Git 1.3.2
Git Git 1.0.7
Git Git 1.1.5
Git Git 1.0.3
Git Git 1.2.2
Git-scm Git 0.04
Git-scm Git 0.7.0
Git Git 1.5.2.1
Git Git 1.5.1.5
Git Git 1.4.2.2
Git Git 1.4.2.3
Git Git 1.1.4
Git Git 1.3.1
Git Git 1.1.0
Git Git 1.4.1.1
Git Git 1.0.6
Git Git 1.1.6
Git Git 1.2.3
Git-scm Git 0.5
1 EDB exploit
2.6
CVSSv2
CVE-2017-1000092
Git Plugin connects to a user-specified Git repository as part of form validation. An attacker with no direct access to Jenkins but able to guess at a username/password credentials ID could trick a developer with job configuration permissions into following a link with a maliciou...
Jenkins Git 0.9.0
Jenkins Git 0.9.1
Jenkins Git 0.9.2
Jenkins Git 1.0.0
Jenkins Git 1.1.11
Jenkins Git 1.1.12
Jenkins Git 1.1.13
Jenkins Git 1.1.14
Jenkins Git 1.1.28
Jenkins Git 1.1.29
Jenkins Git 1.2.0
Jenkins Git 1.3.0
Jenkins Git 2.2.0
Jenkins Git 2.2.1
Jenkins Git 2.2.2
Jenkins Git 2.2.3
Jenkins Git 2.3.0
Jenkins Git 2.3.1
Jenkins Git 2.3.2
Jenkins Git 2.3.3
Jenkins Git 2.5.0
Jenkins Git 2.5.1
NA
CVE-2024-29269
An issue discovered in Telesquare TLR-2005Ksh 1.0.0 and 1.1.4 allows malicious users to run arbitrary system commands via the Cmd parameter.
2 Github repositories
NA
CVE-2023-46402
git-urls 1.0.0 allows ReDOS (Regular Expression Denial of Service) in urls.go.
Git-urls Project Git-urls 1.0.1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-49333
CVE-2024-33901
CVE-2024-36001
CVE-2024-2835
firewall
XPath injection
authentication bypass
CVE-2024-22120
CVE-2024-32002
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »