Lookup for vulnerable packages by Package URL.

Purlpkg:deb/debian/cgit@1.2.3%2Bgit20221219.50.91f2590%2Bgit2.39.1-1?distro=trixie
Typedeb
Namespacedebian
Namecgit
Version1.2.3+git20221219.50.91f2590+git2.39.1-1
Qualifiers
distro trixie
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version1.2.3+git20240802.70.09d24d7+git2.46.0-1
Latest_non_vulnerable_version1.2.3+git20250818.80.3346409+git2.51.0-1
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-4h46-k3sd-3uh8
vulnerability_id VCID-4h46-k3sd-3uh8
summary security update
references
0
reference_url http://git.zx2c4.com/cgit/commit/?id=1c581a072651524f3b0d91f33e22a42c4166dd96
reference_id
reference_type
scores
url http://git.zx2c4.com/cgit/commit/?id=1c581a072651524f3b0d91f33e22a42c4166dd96
1
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176167.html
reference_id
reference_type
scores
url http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176167.html
2
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176198.html
reference_id
reference_type
scores
url http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176198.html
3
reference_url http://lists.opensuse.org/opensuse-updates/2016-01/msg00067.html
reference_id
reference_type
scores
url http://lists.opensuse.org/opensuse-updates/2016-01/msg00067.html
4
reference_url http://lists.opensuse.org/opensuse-updates/2016-01/msg00084.html
reference_id
reference_type
scores
url http://lists.opensuse.org/opensuse-updates/2016-01/msg00084.html
5
reference_url http://lists.zx2c4.com/pipermail/cgit/2016-January/002790.html
reference_id
reference_type
scores
url http://lists.zx2c4.com/pipermail/cgit/2016-January/002790.html
6
reference_url http://lists.zx2c4.com/pipermail/cgit/2016-January/002817.html
reference_id
reference_type
scores
url http://lists.zx2c4.com/pipermail/cgit/2016-January/002817.html
7
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-1899
reference_id
reference_type
scores
0
value 0.00646
scoring_system epss
scoring_elements 0.70759
published_at 2026-04-18T12:55:00Z
1
value 0.00646
scoring_system epss
scoring_elements 0.70752
published_at 2026-04-16T12:55:00Z
2
value 0.00646
scoring_system epss
scoring_elements 0.70643
published_at 2026-04-01T12:55:00Z
3
value 0.00646
scoring_system epss
scoring_elements 0.70659
published_at 2026-04-02T12:55:00Z
4
value 0.00646
scoring_system epss
scoring_elements 0.70677
published_at 2026-04-04T12:55:00Z
5
value 0.00646
scoring_system epss
scoring_elements 0.70655
published_at 2026-04-07T12:55:00Z
6
value 0.00646
scoring_system epss
scoring_elements 0.707
published_at 2026-04-08T12:55:00Z
7
value 0.00646
scoring_system epss
scoring_elements 0.70716
published_at 2026-04-09T12:55:00Z
8
value 0.00646
scoring_system epss
scoring_elements 0.70739
published_at 2026-04-11T12:55:00Z
9
value 0.00646
scoring_system epss
scoring_elements 0.70722
published_at 2026-04-12T12:55:00Z
10
value 0.00646
scoring_system epss
scoring_elements 0.70707
published_at 2026-04-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-1899
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1899
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1899
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1900
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1900
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1901
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1901
11
reference_url http://www.debian.org/security/2016/dsa-3545
reference_id
reference_type
scores
url http://www.debian.org/security/2016/dsa-3545
12
reference_url http://www.openwall.com/lists/oss-security/2016/01/14/3
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2016/01/14/3
13
reference_url http://www.openwall.com/lists/oss-security/2016/01/14/6
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2016/01/14/6
14
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=812411
reference_id 812411
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=812411
15
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:cgit_project:cgit:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:cgit_project:cgit:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:cgit_project:cgit:*:*:*:*:*:*:*:*
16
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*
reference_id cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*
17
reference_url https://nvd.nist.gov/vuln/detail/CVE-2016-1899
reference_id CVE-2016-1899
reference_type
scores
0
value 4.3
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:N/I:P/A:N
1
value 3.7
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
url https://nvd.nist.gov/vuln/detail/CVE-2016-1899
fixed_packages
0
url pkg:deb/debian/cgit@0.11.2.git2.3.2-1.1?distro=trixie
purl pkg:deb/debian/cgit@0.11.2.git2.3.2-1.1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cgit@0.11.2.git2.3.2-1.1%3Fdistro=trixie
1
url pkg:deb/debian/cgit@1.2.3%2Bgit2.25.1-1?distro=trixie
purl pkg:deb/debian/cgit@1.2.3%2Bgit2.25.1-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cgit@1.2.3%252Bgit2.25.1-1%3Fdistro=trixie
2
url pkg:deb/debian/cgit@1.2.3%2Bgit20221219.50.91f2590%2Bgit2.39.1-1?distro=trixie
purl pkg:deb/debian/cgit@1.2.3%2Bgit20221219.50.91f2590%2Bgit2.39.1-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cgit@1.2.3%252Bgit20221219.50.91f2590%252Bgit2.39.1-1%3Fdistro=trixie
3
url pkg:deb/debian/cgit@1.2.3%2Bgit20240802.70.09d24d7%2Bgit2.46.0-1?distro=trixie
purl pkg:deb/debian/cgit@1.2.3%2Bgit20240802.70.09d24d7%2Bgit2.46.0-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cgit@1.2.3%252Bgit20240802.70.09d24d7%252Bgit2.46.0-1%3Fdistro=trixie
4
url pkg:deb/debian/cgit@1.2.3%2Bgit20250818.80.3346409%2Bgit2.51.0-1?distro=trixie
purl pkg:deb/debian/cgit@1.2.3%2Bgit20250818.80.3346409%2Bgit2.51.0-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cgit@1.2.3%252Bgit20250818.80.3346409%252Bgit2.51.0-1%3Fdistro=trixie
aliases CVE-2016-1899
risk_score 1.9
exploitability 0.5
weighted_severity 3.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-4h46-k3sd-3uh8
1
url VCID-brus-h5y6-dffb
vulnerability_id VCID-brus-h5y6-dffb
summary security update
references
0
reference_url http://git.zx2c4.com/cgit/commit/?id=4458abf64172a62b92810c2293450106e6dfc763
reference_id
reference_type
scores
url http://git.zx2c4.com/cgit/commit/?id=4458abf64172a62b92810c2293450106e6dfc763
1
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176167.html
reference_id
reference_type
scores
url http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176167.html
2
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176198.html
reference_id
reference_type
scores
url http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176198.html
3
reference_url http://lists.opensuse.org/opensuse-updates/2016-01/msg00067.html
reference_id
reference_type
scores
url http://lists.opensuse.org/opensuse-updates/2016-01/msg00067.html
4
reference_url http://lists.opensuse.org/opensuse-updates/2016-01/msg00084.html
reference_id
reference_type
scores
url http://lists.opensuse.org/opensuse-updates/2016-01/msg00084.html
5
reference_url http://lists.zx2c4.com/pipermail/cgit/2016-January/002817.html
reference_id
reference_type
scores
url http://lists.zx2c4.com/pipermail/cgit/2016-January/002817.html
6
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-1901
reference_id
reference_type
scores
0
value 0.04365
scoring_system epss
scoring_elements 0.88974
published_at 2026-04-18T12:55:00Z
1
value 0.04365
scoring_system epss
scoring_elements 0.88975
published_at 2026-04-16T12:55:00Z
2
value 0.04365
scoring_system epss
scoring_elements 0.88908
published_at 2026-04-01T12:55:00Z
3
value 0.04365
scoring_system epss
scoring_elements 0.88916
published_at 2026-04-02T12:55:00Z
4
value 0.04365
scoring_system epss
scoring_elements 0.88932
published_at 2026-04-04T12:55:00Z
5
value 0.04365
scoring_system epss
scoring_elements 0.88935
published_at 2026-04-07T12:55:00Z
6
value 0.04365
scoring_system epss
scoring_elements 0.88953
published_at 2026-04-08T12:55:00Z
7
value 0.04365
scoring_system epss
scoring_elements 0.88958
published_at 2026-04-09T12:55:00Z
8
value 0.04365
scoring_system epss
scoring_elements 0.8897
published_at 2026-04-11T12:55:00Z
9
value 0.04365
scoring_system epss
scoring_elements 0.88964
published_at 2026-04-12T12:55:00Z
10
value 0.04365
scoring_system epss
scoring_elements 0.88962
published_at 2026-04-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-1901
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1899
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1899
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1900
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1900
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1901
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1901
10
reference_url http://www.debian.org/security/2016/dsa-3545
reference_id
reference_type
scores
url http://www.debian.org/security/2016/dsa-3545
11
reference_url http://www.openwall.com/lists/oss-security/2016/01/14/3
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2016/01/14/3
12
reference_url http://www.openwall.com/lists/oss-security/2016/01/14/6
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2016/01/14/6
13
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=812411
reference_id 812411
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=812411
14
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:cgit_project:cgit:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:cgit_project:cgit:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:cgit_project:cgit:*:*:*:*:*:*:*:*
15
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*
reference_id cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*
16
reference_url https://nvd.nist.gov/vuln/detail/CVE-2016-1901
reference_id CVE-2016-1901
reference_type
scores
0
value 7.5
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:P/I:P/A:P
1
value 9.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://nvd.nist.gov/vuln/detail/CVE-2016-1901
fixed_packages
0
url pkg:deb/debian/cgit@0.11.2.git2.3.2-1.1?distro=trixie
purl pkg:deb/debian/cgit@0.11.2.git2.3.2-1.1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cgit@0.11.2.git2.3.2-1.1%3Fdistro=trixie
1
url pkg:deb/debian/cgit@1.2.3%2Bgit2.25.1-1?distro=trixie
purl pkg:deb/debian/cgit@1.2.3%2Bgit2.25.1-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cgit@1.2.3%252Bgit2.25.1-1%3Fdistro=trixie
2
url pkg:deb/debian/cgit@1.2.3%2Bgit20221219.50.91f2590%2Bgit2.39.1-1?distro=trixie
purl pkg:deb/debian/cgit@1.2.3%2Bgit20221219.50.91f2590%2Bgit2.39.1-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cgit@1.2.3%252Bgit20221219.50.91f2590%252Bgit2.39.1-1%3Fdistro=trixie
3
url pkg:deb/debian/cgit@1.2.3%2Bgit20240802.70.09d24d7%2Bgit2.46.0-1?distro=trixie
purl pkg:deb/debian/cgit@1.2.3%2Bgit20240802.70.09d24d7%2Bgit2.46.0-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cgit@1.2.3%252Bgit20240802.70.09d24d7%252Bgit2.46.0-1%3Fdistro=trixie
4
url pkg:deb/debian/cgit@1.2.3%2Bgit20250818.80.3346409%2Bgit2.51.0-1?distro=trixie
purl pkg:deb/debian/cgit@1.2.3%2Bgit20250818.80.3346409%2Bgit2.51.0-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cgit@1.2.3%252Bgit20250818.80.3346409%252Bgit2.51.0-1%3Fdistro=trixie
aliases CVE-2016-1901
risk_score 4.4
exploitability 0.5
weighted_severity 8.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-brus-h5y6-dffb
2
url VCID-chdb-9uwu-67f8
vulnerability_id VCID-chdb-9uwu-67f8
summary
Git contains multiple vulnerabilities that allow for the remote
    execution of arbitrary code.
references
0
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183147.html
reference_id
reference_type
scores
url http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183147.html
1
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179121.html
reference_id
reference_type
scores
url http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179121.html
2
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2016-March/180763.html
reference_id
reference_type
scores
url http://lists.fedoraproject.org/pipermail/package-announce/2016-March/180763.html
3
reference_url http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00059.html
reference_id
reference_type
scores
url http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00059.html
4
reference_url http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00060.html
reference_id
reference_type
scores
url http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00060.html
5
reference_url http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00061.html
reference_id
reference_type
scores
url http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00061.html
6
reference_url http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00062.html
reference_id
reference_type
scores
url http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00062.html
7
reference_url http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00071.html
reference_id
reference_type
scores
url http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00071.html
8
reference_url http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00074.html
reference_id
reference_type
scores
url http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00074.html
9
reference_url http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00076.html
reference_id
reference_type
scores
url http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00076.html
10
reference_url http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00077.html
reference_id
reference_type
scores
url http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00077.html
11
reference_url http://lists.opensuse.org/opensuse-updates/2016-04/msg00011.html
reference_id
reference_type
scores
url http://lists.opensuse.org/opensuse-updates/2016-04/msg00011.html
12
reference_url http://pastebin.com/UX2P2jjg
reference_id
reference_type
scores
url http://pastebin.com/UX2P2jjg
13
reference_url http://rhn.redhat.com/errata/RHSA-2016-0496.html
reference_id
reference_type
scores
url http://rhn.redhat.com/errata/RHSA-2016-0496.html
14
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2315.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2315.json
15
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-2315
reference_id
reference_type
scores
0
value 0.17652
scoring_system epss
scoring_elements 0.95115
published_at 2026-04-18T12:55:00Z
1
value 0.17652
scoring_system epss
scoring_elements 0.95113
published_at 2026-04-16T12:55:00Z
2
value 0.17652
scoring_system epss
scoring_elements 0.95069
published_at 2026-04-01T12:55:00Z
3
value 0.17652
scoring_system epss
scoring_elements 0.9508
published_at 2026-04-04T12:55:00Z
4
value 0.17652
scoring_system epss
scoring_elements 0.95082
published_at 2026-04-07T12:55:00Z
5
value 0.17652
scoring_system epss
scoring_elements 0.9509
published_at 2026-04-08T12:55:00Z
6
value 0.17652
scoring_system epss
scoring_elements 0.95093
published_at 2026-04-09T12:55:00Z
7
value 0.17652
scoring_system epss
scoring_elements 0.95099
published_at 2026-04-11T12:55:00Z
8
value 0.17652
scoring_system epss
scoring_elements 0.95101
published_at 2026-04-12T12:55:00Z
9
value 0.17652
scoring_system epss
scoring_elements 0.95104
published_at 2026-04-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-2315
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2315
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2315
17
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2324
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2324
18
reference_url https://github.com/git/git/commit/34fa79a6cde56d6d428ab0d3160cb094ebad3305
reference_id
reference_type
scores
url https://github.com/git/git/commit/34fa79a6cde56d6d428ab0d3160cb094ebad3305
19
reference_url https://github.com/git/git/commit/de1e67d0703894cb6ea782e36abb63976ab07e60
reference_id
reference_type
scores
url https://github.com/git/git/commit/de1e67d0703894cb6ea782e36abb63976ab07e60
20
reference_url https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.7.4.txt
reference_id
reference_type
scores
url https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.7.4.txt
21
reference_url http://www.debian.org/security/2016/dsa-3521
reference_id
reference_type
scores
url http://www.debian.org/security/2016/dsa-3521
22
reference_url http://www.openwall.com/lists/oss-security/2016/03/15/5
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2016/03/15/5
23
reference_url http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
reference_id
reference_type
scores
url http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
24
reference_url http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
reference_id
reference_type
scores
url http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
25
reference_url http://www.securityfocus.com/bid/84355
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/84355
26
reference_url http://www.securitytracker.com/id/1035290
reference_id
reference_type
scores
url http://www.securitytracker.com/id/1035290
27
reference_url http://www.ubuntu.com/usn/USN-2938-1
reference_id
reference_type
scores
url http://www.ubuntu.com/usn/USN-2938-1
28
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1317981
reference_id 1317981
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1317981
29
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=818318
reference_id 818318
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=818318
30
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:git-scm:git:2.7.3:*:*:*:*:*:*:*
reference_id cpe:2.3:a:git-scm:git:2.7.3:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:git-scm:git:2.7.3:*:*:*:*:*:*:*
31
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp4:*:*:*:*:*:*
reference_id cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp4:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp4:*:*:*:*:*:*
32
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:suse:openstack_cloud:5:*:*:*:*:*:*:*
reference_id cpe:2.3:a:suse:openstack_cloud:5:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:suse:openstack_cloud:5:*:*:*:*:*:*:*
33
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*
reference_id cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*
34
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*
reference_id cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*
35
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:suse:linux_enterprise_server:12:sp1:*:*:*:*:*:*
reference_id cpe:2.3:o:suse:linux_enterprise_server:12:sp1:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:suse:linux_enterprise_server:12:sp1:*:*:*:*:*:*
36
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp4:*:*:*:*:*:*
reference_id cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp4:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp4:*:*:*:*:*:*
37
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:*:*:*:*:*:*:*
reference_id cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:*:*:*:*:*:*:*
38
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp1:*:*:*:*:*:*
reference_id cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp1:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp1:*:*:*:*:*:*
39
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:suse:suse_linux_enterprise_server:12:*:*:*:*:*:*:*
reference_id cpe:2.3:o:suse:suse_linux_enterprise_server:12:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:suse:suse_linux_enterprise_server:12:*:*:*:*:*:*:*
40
reference_url https://nvd.nist.gov/vuln/detail/CVE-2016-2315
reference_id CVE-2016-2315
reference_type
scores
0
value 10.0
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:C/I:C/A:C
1
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://nvd.nist.gov/vuln/detail/CVE-2016-2315
41
reference_url https://security.gentoo.org/glsa/201605-01
reference_id GLSA-201605-01
reference_type
scores
url https://security.gentoo.org/glsa/201605-01
42
reference_url https://access.redhat.com/errata/RHSA-2016:0496
reference_id RHSA-2016:0496
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:0496
43
reference_url https://access.redhat.com/errata/RHSA-2016:0497
reference_id RHSA-2016:0497
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:0497
44
reference_url https://usn.ubuntu.com/2938-1/
reference_id USN-2938-1
reference_type
scores
url https://usn.ubuntu.com/2938-1/
fixed_packages
0
url pkg:deb/debian/cgit@0?distro=trixie
purl pkg:deb/debian/cgit@0?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cgit@0%3Fdistro=trixie
1
url pkg:deb/debian/cgit@1.2.3%2Bgit2.25.1-1?distro=trixie
purl pkg:deb/debian/cgit@1.2.3%2Bgit2.25.1-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cgit@1.2.3%252Bgit2.25.1-1%3Fdistro=trixie
2
url pkg:deb/debian/cgit@1.2.3%2Bgit20221219.50.91f2590%2Bgit2.39.1-1?distro=trixie
purl pkg:deb/debian/cgit@1.2.3%2Bgit20221219.50.91f2590%2Bgit2.39.1-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cgit@1.2.3%252Bgit20221219.50.91f2590%252Bgit2.39.1-1%3Fdistro=trixie
3
url pkg:deb/debian/cgit@1.2.3%2Bgit20240802.70.09d24d7%2Bgit2.46.0-1?distro=trixie
purl pkg:deb/debian/cgit@1.2.3%2Bgit20240802.70.09d24d7%2Bgit2.46.0-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cgit@1.2.3%252Bgit20240802.70.09d24d7%252Bgit2.46.0-1%3Fdistro=trixie
4
url pkg:deb/debian/cgit@1.2.3%2Bgit20250818.80.3346409%2Bgit2.51.0-1?distro=trixie
purl pkg:deb/debian/cgit@1.2.3%2Bgit20250818.80.3346409%2Bgit2.51.0-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cgit@1.2.3%252Bgit20250818.80.3346409%252Bgit2.51.0-1%3Fdistro=trixie
aliases CVE-2016-2315
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-chdb-9uwu-67f8
3
url VCID-cz1b-nsxp-57hu
vulnerability_id VCID-cz1b-nsxp-57hu
summary Argument injection vulnerability in syntax-highlighting.sh in cgit 9.0.3 and earlier allows remote authenticated users with permissions to add files to execute arbitrary commands via the --plug-in argument to the highlight command.
references
0
reference_url http://git.zx2c4.com/cgit/commit/?id=7ea35f9f8ecf61ab42be9947aae1176ab6e089bd
reference_id
reference_type
scores
url http://git.zx2c4.com/cgit/commit/?id=7ea35f9f8ecf61ab42be9947aae1176ab6e089bd
1
reference_url http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00021.html
reference_id
reference_type
scores
url http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00021.html
2
reference_url http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00022.html
reference_id
reference_type
scores
url http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00022.html
3
reference_url http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00003.html
reference_id
reference_type
scores
url http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00003.html
4
reference_url http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00004.html
reference_id
reference_type
scores
url http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00004.html
5
reference_url https://api.first.org/data/v1/epss?cve=CVE-2012-4548
reference_id
reference_type
scores
0
value 0.00676
scoring_system epss
scoring_elements 0.71527
published_at 2026-04-18T12:55:00Z
1
value 0.00676
scoring_system epss
scoring_elements 0.71438
published_at 2026-04-01T12:55:00Z
2
value 0.00676
scoring_system epss
scoring_elements 0.71446
published_at 2026-04-02T12:55:00Z
3
value 0.00676
scoring_system epss
scoring_elements 0.71463
published_at 2026-04-04T12:55:00Z
4
value 0.00676
scoring_system epss
scoring_elements 0.71436
published_at 2026-04-07T12:55:00Z
5
value 0.00676
scoring_system epss
scoring_elements 0.71476
published_at 2026-04-13T12:55:00Z
6
value 0.00676
scoring_system epss
scoring_elements 0.71488
published_at 2026-04-09T12:55:00Z
7
value 0.00676
scoring_system epss
scoring_elements 0.71511
published_at 2026-04-11T12:55:00Z
8
value 0.00676
scoring_system epss
scoring_elements 0.71495
published_at 2026-04-12T12:55:00Z
9
value 0.00676
scoring_system epss
scoring_elements 0.71522
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2012-4548
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=870713
reference_id
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=870713
7
reference_url http://secunia.com/advisories/50734
reference_id
reference_type
scores
url http://secunia.com/advisories/50734
8
reference_url http://secunia.com/advisories/51167
reference_id
reference_type
scores
url http://secunia.com/advisories/51167
9
reference_url http://secunia.com/advisories/51222
reference_id
reference_type
scores
url http://secunia.com/advisories/51222
10
reference_url https://exchange.xforce.ibmcloud.com/vulnerabilities/79665
reference_id
reference_type
scores
url https://exchange.xforce.ibmcloud.com/vulnerabilities/79665
11
reference_url http://www.openwall.com/lists/oss-security/2012/10/28/1
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2012/10/28/1
12
reference_url http://www.openwall.com/lists/oss-security/2012/10/28/2
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2012/10/28/2
13
reference_url http://www.securityfocus.com/bid/56315
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/56315
14
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:lars_hjemli:cgit:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:*:*:*:*:*:*:*:*
15
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:lars_hjemli:cgit:0.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.1:*:*:*:*:*:*:*
16
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:lars_hjemli:cgit:0.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.2:*:*:*:*:*:*:*
17
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.3:*:*:*:*:*:*:*
reference_id cpe:2.3:a:lars_hjemli:cgit:0.3:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.3:*:*:*:*:*:*:*
18
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.4:*:*:*:*:*:*:*
reference_id cpe:2.3:a:lars_hjemli:cgit:0.4:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.4:*:*:*:*:*:*:*
19
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.5:*:*:*:*:*:*:*
reference_id cpe:2.3:a:lars_hjemli:cgit:0.5:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.5:*:*:*:*:*:*:*
20
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.6:*:*:*:*:*:*:*
reference_id cpe:2.3:a:lars_hjemli:cgit:0.6:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.6:*:*:*:*:*:*:*
21
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.6.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:lars_hjemli:cgit:0.6.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.6.1:*:*:*:*:*:*:*
22
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.6.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:lars_hjemli:cgit:0.6.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.6.2:*:*:*:*:*:*:*
23
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.6.3:*:*:*:*:*:*:*
reference_id cpe:2.3:a:lars_hjemli:cgit:0.6.3:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.6.3:*:*:*:*:*:*:*
24
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.7:*:*:*:*:*:*:*
reference_id cpe:2.3:a:lars_hjemli:cgit:0.7:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.7:*:*:*:*:*:*:*
25
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.7.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:lars_hjemli:cgit:0.7.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.7.1:*:*:*:*:*:*:*
26
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.7.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:lars_hjemli:cgit:0.7.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.7.2:*:*:*:*:*:*:*
27
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.8:*:*:*:*:*:*:*
reference_id cpe:2.3:a:lars_hjemli:cgit:0.8:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.8:*:*:*:*:*:*:*
28
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.8.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:lars_hjemli:cgit:0.8.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.8.1:*:*:*:*:*:*:*
29
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.8.1.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:lars_hjemli:cgit:0.8.1.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.8.1.1:*:*:*:*:*:*:*
30
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.8.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:lars_hjemli:cgit:0.8.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.8.2:*:*:*:*:*:*:*
31
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.8.2.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:lars_hjemli:cgit:0.8.2.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.8.2.1:*:*:*:*:*:*:*
32
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.8.2.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:lars_hjemli:cgit:0.8.2.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.8.2.2:*:*:*:*:*:*:*
33
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.8.3:*:*:*:*:*:*:*
reference_id cpe:2.3:a:lars_hjemli:cgit:0.8.3:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.8.3:*:*:*:*:*:*:*
34
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.8.3.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:lars_hjemli:cgit:0.8.3.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.8.3.1:*:*:*:*:*:*:*
35
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.8.3.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:lars_hjemli:cgit:0.8.3.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.8.3.2:*:*:*:*:*:*:*
36
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.8.3.3:*:*:*:*:*:*:*
reference_id cpe:2.3:a:lars_hjemli:cgit:0.8.3.3:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.8.3.3:*:*:*:*:*:*:*
37
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.8.3.4:*:*:*:*:*:*:*
reference_id cpe:2.3:a:lars_hjemli:cgit:0.8.3.4:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.8.3.4:*:*:*:*:*:*:*
38
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.8.3.5:*:*:*:*:*:*:*
reference_id cpe:2.3:a:lars_hjemli:cgit:0.8.3.5:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.8.3.5:*:*:*:*:*:*:*
39
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.9:*:*:*:*:*:*:*
reference_id cpe:2.3:a:lars_hjemli:cgit:0.9:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.9:*:*:*:*:*:*:*
40
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.9.0.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:lars_hjemli:cgit:0.9.0.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.9.0.1:*:*:*:*:*:*:*
41
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.9.0.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:lars_hjemli:cgit:0.9.0.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.9.0.2:*:*:*:*:*:*:*
42
reference_url https://nvd.nist.gov/vuln/detail/CVE-2012-4548
reference_id CVE-2012-4548
reference_type
scores
0
value 6.0
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:S/C:P/I:P/A:P
url https://nvd.nist.gov/vuln/detail/CVE-2012-4548
fixed_packages
0
url pkg:deb/debian/cgit@0?distro=trixie
purl pkg:deb/debian/cgit@0?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cgit@0%3Fdistro=trixie
1
url pkg:deb/debian/cgit@1.2.3%2Bgit2.25.1-1?distro=trixie
purl pkg:deb/debian/cgit@1.2.3%2Bgit2.25.1-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cgit@1.2.3%252Bgit2.25.1-1%3Fdistro=trixie
2
url pkg:deb/debian/cgit@1.2.3%2Bgit20221219.50.91f2590%2Bgit2.39.1-1?distro=trixie
purl pkg:deb/debian/cgit@1.2.3%2Bgit20221219.50.91f2590%2Bgit2.39.1-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cgit@1.2.3%252Bgit20221219.50.91f2590%252Bgit2.39.1-1%3Fdistro=trixie
3
url pkg:deb/debian/cgit@1.2.3%2Bgit20240802.70.09d24d7%2Bgit2.46.0-1?distro=trixie
purl pkg:deb/debian/cgit@1.2.3%2Bgit20240802.70.09d24d7%2Bgit2.46.0-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cgit@1.2.3%252Bgit20240802.70.09d24d7%252Bgit2.46.0-1%3Fdistro=trixie
4
url pkg:deb/debian/cgit@1.2.3%2Bgit20250818.80.3346409%2Bgit2.51.0-1?distro=trixie
purl pkg:deb/debian/cgit@1.2.3%2Bgit20250818.80.3346409%2Bgit2.51.0-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cgit@1.2.3%252Bgit20250818.80.3346409%252Bgit2.51.0-1%3Fdistro=trixie
aliases CVE-2012-4548
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-cz1b-nsxp-57hu
4
url VCID-dwux-f8gv-bbfq
vulnerability_id VCID-dwux-f8gv-bbfq
summary Directory traversal vulnerability in the cgit_parse_readme function in ui-summary.c in cgit before 0.9.2, when a readme file is set to a filesystem path, allows remote attackers to read arbitrary files via a .. (dot dot) in the url parameter.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2013-2117
reference_id
reference_type
scores
0
value 0.00462
scoring_system epss
scoring_elements 0.64136
published_at 2026-04-01T12:55:00Z
1
value 0.00462
scoring_system epss
scoring_elements 0.64193
published_at 2026-04-02T12:55:00Z
2
value 0.00462
scoring_system epss
scoring_elements 0.6422
published_at 2026-04-13T12:55:00Z
3
value 0.00462
scoring_system epss
scoring_elements 0.6418
published_at 2026-04-07T12:55:00Z
4
value 0.00462
scoring_system epss
scoring_elements 0.6423
published_at 2026-04-08T12:55:00Z
5
value 0.00462
scoring_system epss
scoring_elements 0.64246
published_at 2026-04-09T12:55:00Z
6
value 0.00462
scoring_system epss
scoring_elements 0.6426
published_at 2026-04-11T12:55:00Z
7
value 0.00462
scoring_system epss
scoring_elements 0.64248
published_at 2026-04-12T12:55:00Z
8
value 0.00462
scoring_system epss
scoring_elements 0.64256
published_at 2026-04-16T12:55:00Z
9
value 0.00462
scoring_system epss
scoring_elements 0.64266
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2013-2117
fixed_packages
0
url pkg:deb/debian/cgit@0?distro=trixie
purl pkg:deb/debian/cgit@0?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cgit@0%3Fdistro=trixie
1
url pkg:deb/debian/cgit@1.2.3%2Bgit2.25.1-1?distro=trixie
purl pkg:deb/debian/cgit@1.2.3%2Bgit2.25.1-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cgit@1.2.3%252Bgit2.25.1-1%3Fdistro=trixie
2
url pkg:deb/debian/cgit@1.2.3%2Bgit20221219.50.91f2590%2Bgit2.39.1-1?distro=trixie
purl pkg:deb/debian/cgit@1.2.3%2Bgit20221219.50.91f2590%2Bgit2.39.1-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cgit@1.2.3%252Bgit20221219.50.91f2590%252Bgit2.39.1-1%3Fdistro=trixie
3
url pkg:deb/debian/cgit@1.2.3%2Bgit20240802.70.09d24d7%2Bgit2.46.0-1?distro=trixie
purl pkg:deb/debian/cgit@1.2.3%2Bgit20240802.70.09d24d7%2Bgit2.46.0-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cgit@1.2.3%252Bgit20240802.70.09d24d7%252Bgit2.46.0-1%3Fdistro=trixie
4
url pkg:deb/debian/cgit@1.2.3%2Bgit20250818.80.3346409%2Bgit2.51.0-1?distro=trixie
purl pkg:deb/debian/cgit@1.2.3%2Bgit20250818.80.3346409%2Bgit2.51.0-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cgit@1.2.3%252Bgit20250818.80.3346409%252Bgit2.51.0-1%3Fdistro=trixie
aliases CVE-2013-2117
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-dwux-f8gv-bbfq
5
url VCID-e67s-whs3-bydn
vulnerability_id VCID-e67s-whs3-bydn
summary security update
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-14912
reference_id
reference_type
scores
0
value 0.91474
scoring_system epss
scoring_elements 0.99671
published_at 2026-04-18T12:55:00Z
1
value 0.91474
scoring_system epss
scoring_elements 0.99663
published_at 2026-04-02T12:55:00Z
2
value 0.91474
scoring_system epss
scoring_elements 0.99665
published_at 2026-04-04T12:55:00Z
3
value 0.91474
scoring_system epss
scoring_elements 0.99666
published_at 2026-04-07T12:55:00Z
4
value 0.91474
scoring_system epss
scoring_elements 0.99667
published_at 2026-04-11T12:55:00Z
5
value 0.91474
scoring_system epss
scoring_elements 0.99668
published_at 2026-04-13T12:55:00Z
6
value 0.91474
scoring_system epss
scoring_elements 0.99669
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-14912
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14912
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14912
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=905382
reference_id 905382
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=905382
3
reference_url https://security.archlinux.org/ASA-201808-2
reference_id ASA-201808-2
reference_type
scores
url https://security.archlinux.org/ASA-201808-2
4
reference_url https://security.archlinux.org/AVG-745
reference_id AVG-745
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-745
5
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/webapps/45195.rb
reference_id CVE-2018-14912
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/webapps/45195.rb
fixed_packages
0
url pkg:deb/debian/cgit@1.1%2Bgit2.10.2-3.1?distro=trixie
purl pkg:deb/debian/cgit@1.1%2Bgit2.10.2-3.1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cgit@1.1%252Bgit2.10.2-3.1%3Fdistro=trixie
1
url pkg:deb/debian/cgit@1.2.3%2Bgit2.25.1-1?distro=trixie
purl pkg:deb/debian/cgit@1.2.3%2Bgit2.25.1-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cgit@1.2.3%252Bgit2.25.1-1%3Fdistro=trixie
2
url pkg:deb/debian/cgit@1.2.3%2Bgit20221219.50.91f2590%2Bgit2.39.1-1?distro=trixie
purl pkg:deb/debian/cgit@1.2.3%2Bgit20221219.50.91f2590%2Bgit2.39.1-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cgit@1.2.3%252Bgit20221219.50.91f2590%252Bgit2.39.1-1%3Fdistro=trixie
3
url pkg:deb/debian/cgit@1.2.3%2Bgit20240802.70.09d24d7%2Bgit2.46.0-1?distro=trixie
purl pkg:deb/debian/cgit@1.2.3%2Bgit20240802.70.09d24d7%2Bgit2.46.0-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cgit@1.2.3%252Bgit20240802.70.09d24d7%252Bgit2.46.0-1%3Fdistro=trixie
4
url pkg:deb/debian/cgit@1.2.3%2Bgit20250818.80.3346409%2Bgit2.51.0-1?distro=trixie
purl pkg:deb/debian/cgit@1.2.3%2Bgit20250818.80.3346409%2Bgit2.51.0-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cgit@1.2.3%252Bgit20250818.80.3346409%252Bgit2.51.0-1%3Fdistro=trixie
aliases CVE-2018-14912
risk_score 10.0
exploitability 2.0
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-e67s-whs3-bydn
6
url VCID-qh4p-ng26-s7cw
vulnerability_id VCID-qh4p-ng26-s7cw
summary security update
references
0
reference_url http://git.zx2c4.com/cgit/commit/?id=513b3863d999f91b47d7e9f26710390db55f9463
reference_id
reference_type
scores
url http://git.zx2c4.com/cgit/commit/?id=513b3863d999f91b47d7e9f26710390db55f9463
1
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176167.html
reference_id
reference_type
scores
url http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176167.html
2
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176198.html
reference_id
reference_type
scores
url http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176198.html
3
reference_url http://lists.opensuse.org/opensuse-updates/2016-01/msg00067.html
reference_id
reference_type
scores
url http://lists.opensuse.org/opensuse-updates/2016-01/msg00067.html
4
reference_url http://lists.opensuse.org/opensuse-updates/2016-01/msg00084.html
reference_id
reference_type
scores
url http://lists.opensuse.org/opensuse-updates/2016-01/msg00084.html
5
reference_url http://lists.zx2c4.com/pipermail/cgit/2016-January/002790.html
reference_id
reference_type
scores
url http://lists.zx2c4.com/pipermail/cgit/2016-January/002790.html
6
reference_url http://lists.zx2c4.com/pipermail/cgit/2016-January/002817.html
reference_id
reference_type
scores
url http://lists.zx2c4.com/pipermail/cgit/2016-January/002817.html
7
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-1900
reference_id
reference_type
scores
0
value 0.00646
scoring_system epss
scoring_elements 0.70759
published_at 2026-04-18T12:55:00Z
1
value 0.00646
scoring_system epss
scoring_elements 0.70752
published_at 2026-04-16T12:55:00Z
2
value 0.00646
scoring_system epss
scoring_elements 0.70643
published_at 2026-04-01T12:55:00Z
3
value 0.00646
scoring_system epss
scoring_elements 0.70659
published_at 2026-04-02T12:55:00Z
4
value 0.00646
scoring_system epss
scoring_elements 0.70677
published_at 2026-04-04T12:55:00Z
5
value 0.00646
scoring_system epss
scoring_elements 0.70655
published_at 2026-04-07T12:55:00Z
6
value 0.00646
scoring_system epss
scoring_elements 0.707
published_at 2026-04-08T12:55:00Z
7
value 0.00646
scoring_system epss
scoring_elements 0.70716
published_at 2026-04-09T12:55:00Z
8
value 0.00646
scoring_system epss
scoring_elements 0.70739
published_at 2026-04-11T12:55:00Z
9
value 0.00646
scoring_system epss
scoring_elements 0.70722
published_at 2026-04-12T12:55:00Z
10
value 0.00646
scoring_system epss
scoring_elements 0.70707
published_at 2026-04-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-1900
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1899
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1899
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1900
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1900
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1901
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1901
11
reference_url http://www.debian.org/security/2016/dsa-3545
reference_id
reference_type
scores
url http://www.debian.org/security/2016/dsa-3545
12
reference_url http://www.openwall.com/lists/oss-security/2016/01/14/3
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2016/01/14/3
13
reference_url http://www.openwall.com/lists/oss-security/2016/01/14/6
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2016/01/14/6
14
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=812411
reference_id 812411
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=812411
15
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:cgit_project:cgit:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:cgit_project:cgit:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:cgit_project:cgit:*:*:*:*:*:*:*:*
16
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*
reference_id cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*
17
reference_url https://nvd.nist.gov/vuln/detail/CVE-2016-1900
reference_id CVE-2016-1900
reference_type
scores
0
value 4.3
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:N/I:P/A:N
1
value 3.7
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
url https://nvd.nist.gov/vuln/detail/CVE-2016-1900
fixed_packages
0
url pkg:deb/debian/cgit@0.11.2.git2.3.2-1.1?distro=trixie
purl pkg:deb/debian/cgit@0.11.2.git2.3.2-1.1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cgit@0.11.2.git2.3.2-1.1%3Fdistro=trixie
1
url pkg:deb/debian/cgit@1.2.3%2Bgit2.25.1-1?distro=trixie
purl pkg:deb/debian/cgit@1.2.3%2Bgit2.25.1-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cgit@1.2.3%252Bgit2.25.1-1%3Fdistro=trixie
2
url pkg:deb/debian/cgit@1.2.3%2Bgit20221219.50.91f2590%2Bgit2.39.1-1?distro=trixie
purl pkg:deb/debian/cgit@1.2.3%2Bgit20221219.50.91f2590%2Bgit2.39.1-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cgit@1.2.3%252Bgit20221219.50.91f2590%252Bgit2.39.1-1%3Fdistro=trixie
3
url pkg:deb/debian/cgit@1.2.3%2Bgit20240802.70.09d24d7%2Bgit2.46.0-1?distro=trixie
purl pkg:deb/debian/cgit@1.2.3%2Bgit20240802.70.09d24d7%2Bgit2.46.0-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cgit@1.2.3%252Bgit20240802.70.09d24d7%252Bgit2.46.0-1%3Fdistro=trixie
4
url pkg:deb/debian/cgit@1.2.3%2Bgit20250818.80.3346409%2Bgit2.51.0-1?distro=trixie
purl pkg:deb/debian/cgit@1.2.3%2Bgit20250818.80.3346409%2Bgit2.51.0-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cgit@1.2.3%252Bgit20250818.80.3346409%252Bgit2.51.0-1%3Fdistro=trixie
aliases CVE-2016-1900
risk_score 1.9
exploitability 0.5
weighted_severity 3.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-qh4p-ng26-s7cw
7
url VCID-r2s1-ekyx-j3hc
vulnerability_id VCID-r2s1-ekyx-j3hc
summary Heap-based buffer overflow in the substr function in parsing.c in cgit 0.9.0.3 and earlier allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via an empty username in the "Author" field in a commit.
references
0
reference_url http://git.zx2c4.com/cgit/commit/?id=7757d1b046ecb67b830151d20715c658867df1ec
reference_id
reference_type
scores
url http://git.zx2c4.com/cgit/commit/?id=7757d1b046ecb67b830151d20715c658867df1ec
1
reference_url http://hjemli.net/pipermail/cgit/2012-July/000652.html
reference_id
reference_type
scores
url http://hjemli.net/pipermail/cgit/2012-July/000652.html
2
reference_url https://api.first.org/data/v1/epss?cve=CVE-2012-4465
reference_id
reference_type
scores
0
value 0.03459
scoring_system epss
scoring_elements 0.87541
published_at 2026-04-18T12:55:00Z
1
value 0.03459
scoring_system epss
scoring_elements 0.8747
published_at 2026-04-01T12:55:00Z
2
value 0.03459
scoring_system epss
scoring_elements 0.8748
published_at 2026-04-02T12:55:00Z
3
value 0.03459
scoring_system epss
scoring_elements 0.87494
published_at 2026-04-04T12:55:00Z
4
value 0.03459
scoring_system epss
scoring_elements 0.87497
published_at 2026-04-07T12:55:00Z
5
value 0.03459
scoring_system epss
scoring_elements 0.87516
published_at 2026-04-08T12:55:00Z
6
value 0.03459
scoring_system epss
scoring_elements 0.87523
published_at 2026-04-09T12:55:00Z
7
value 0.03459
scoring_system epss
scoring_elements 0.87534
published_at 2026-04-11T12:55:00Z
8
value 0.03459
scoring_system epss
scoring_elements 0.8753
published_at 2026-04-12T12:55:00Z
9
value 0.03459
scoring_system epss
scoring_elements 0.87526
published_at 2026-04-13T12:55:00Z
10
value 0.03459
scoring_system epss
scoring_elements 0.8754
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2012-4465
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=820733
reference_id
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=820733
4
reference_url http://secunia.com/advisories/50734
reference_id
reference_type
scores
url http://secunia.com/advisories/50734
5
reference_url http://www.openwall.com/lists/oss-security/2012/09/30/1
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2012/09/30/1
6
reference_url http://www.openwall.com/lists/oss-security/2012/10/03/7
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2012/10/03/7
7
reference_url http://www.securityfocus.com/bid/55724
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/55724
8
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:lars_hjemli:cgit:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:*:*:*:*:*:*:*:*
9
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:lars_hjemli:cgit:0.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.1:*:*:*:*:*:*:*
10
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:lars_hjemli:cgit:0.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.2:*:*:*:*:*:*:*
11
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.3:*:*:*:*:*:*:*
reference_id cpe:2.3:a:lars_hjemli:cgit:0.3:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.3:*:*:*:*:*:*:*
12
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.4:*:*:*:*:*:*:*
reference_id cpe:2.3:a:lars_hjemli:cgit:0.4:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.4:*:*:*:*:*:*:*
13
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.5:*:*:*:*:*:*:*
reference_id cpe:2.3:a:lars_hjemli:cgit:0.5:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.5:*:*:*:*:*:*:*
14
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.6:*:*:*:*:*:*:*
reference_id cpe:2.3:a:lars_hjemli:cgit:0.6:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.6:*:*:*:*:*:*:*
15
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.6.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:lars_hjemli:cgit:0.6.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.6.1:*:*:*:*:*:*:*
16
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.6.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:lars_hjemli:cgit:0.6.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.6.2:*:*:*:*:*:*:*
17
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.6.3:*:*:*:*:*:*:*
reference_id cpe:2.3:a:lars_hjemli:cgit:0.6.3:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.6.3:*:*:*:*:*:*:*
18
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.7:*:*:*:*:*:*:*
reference_id cpe:2.3:a:lars_hjemli:cgit:0.7:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.7:*:*:*:*:*:*:*
19
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.7.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:lars_hjemli:cgit:0.7.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.7.1:*:*:*:*:*:*:*
20
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.7.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:lars_hjemli:cgit:0.7.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.7.2:*:*:*:*:*:*:*
21
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.8:*:*:*:*:*:*:*
reference_id cpe:2.3:a:lars_hjemli:cgit:0.8:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.8:*:*:*:*:*:*:*
22
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.8.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:lars_hjemli:cgit:0.8.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.8.1:*:*:*:*:*:*:*
23
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.8.1.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:lars_hjemli:cgit:0.8.1.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.8.1.1:*:*:*:*:*:*:*
24
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.8.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:lars_hjemli:cgit:0.8.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.8.2:*:*:*:*:*:*:*
25
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.8.2.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:lars_hjemli:cgit:0.8.2.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.8.2.1:*:*:*:*:*:*:*
26
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.8.2.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:lars_hjemli:cgit:0.8.2.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.8.2.2:*:*:*:*:*:*:*
27
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.8.3:*:*:*:*:*:*:*
reference_id cpe:2.3:a:lars_hjemli:cgit:0.8.3:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.8.3:*:*:*:*:*:*:*
28
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.8.3.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:lars_hjemli:cgit:0.8.3.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.8.3.1:*:*:*:*:*:*:*
29
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.8.3.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:lars_hjemli:cgit:0.8.3.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.8.3.2:*:*:*:*:*:*:*
30
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.8.3.3:*:*:*:*:*:*:*
reference_id cpe:2.3:a:lars_hjemli:cgit:0.8.3.3:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.8.3.3:*:*:*:*:*:*:*
31
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.8.3.4:*:*:*:*:*:*:*
reference_id cpe:2.3:a:lars_hjemli:cgit:0.8.3.4:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.8.3.4:*:*:*:*:*:*:*
32
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.8.3.5:*:*:*:*:*:*:*
reference_id cpe:2.3:a:lars_hjemli:cgit:0.8.3.5:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.8.3.5:*:*:*:*:*:*:*
33
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.9:*:*:*:*:*:*:*
reference_id cpe:2.3:a:lars_hjemli:cgit:0.9:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.9:*:*:*:*:*:*:*
34
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.9.0.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:lars_hjemli:cgit:0.9.0.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.9.0.1:*:*:*:*:*:*:*
35
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.9.0.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:lars_hjemli:cgit:0.9.0.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lars_hjemli:cgit:0.9.0.2:*:*:*:*:*:*:*
36
reference_url https://nvd.nist.gov/vuln/detail/CVE-2012-4465
reference_id CVE-2012-4465
reference_type
scores
0
value 6.5
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:S/C:P/I:P/A:P
url https://nvd.nist.gov/vuln/detail/CVE-2012-4465
fixed_packages
0
url pkg:deb/debian/cgit@0?distro=trixie
purl pkg:deb/debian/cgit@0?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cgit@0%3Fdistro=trixie
1
url pkg:deb/debian/cgit@1.2.3%2Bgit2.25.1-1?distro=trixie
purl pkg:deb/debian/cgit@1.2.3%2Bgit2.25.1-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cgit@1.2.3%252Bgit2.25.1-1%3Fdistro=trixie
2
url pkg:deb/debian/cgit@1.2.3%2Bgit20221219.50.91f2590%2Bgit2.39.1-1?distro=trixie
purl pkg:deb/debian/cgit@1.2.3%2Bgit20221219.50.91f2590%2Bgit2.39.1-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cgit@1.2.3%252Bgit20221219.50.91f2590%252Bgit2.39.1-1%3Fdistro=trixie
3
url pkg:deb/debian/cgit@1.2.3%2Bgit20240802.70.09d24d7%2Bgit2.46.0-1?distro=trixie
purl pkg:deb/debian/cgit@1.2.3%2Bgit20240802.70.09d24d7%2Bgit2.46.0-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cgit@1.2.3%252Bgit20240802.70.09d24d7%252Bgit2.46.0-1%3Fdistro=trixie
4
url pkg:deb/debian/cgit@1.2.3%2Bgit20250818.80.3346409%2Bgit2.51.0-1?distro=trixie
purl pkg:deb/debian/cgit@1.2.3%2Bgit20250818.80.3346409%2Bgit2.51.0-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cgit@1.2.3%252Bgit20250818.80.3346409%252Bgit2.51.0-1%3Fdistro=trixie
aliases CVE-2012-4465
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-r2s1-ekyx-j3hc
8
url VCID-vjnp-dnar-p7gy
vulnerability_id VCID-vjnp-dnar-p7gy
summary
Git contains multiple vulnerabilities that allow for the remote
    execution of arbitrary code.
references
0
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183147.html
reference_id
reference_type
scores
url http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183147.html
1
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179121.html
reference_id
reference_type
scores
url http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179121.html
2
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2016-March/180763.html
reference_id
reference_type
scores
url http://lists.fedoraproject.org/pipermail/package-announce/2016-March/180763.html
3
reference_url http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00059.html
reference_id
reference_type
scores
url http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00059.html
4
reference_url http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00060.html
reference_id
reference_type
scores
url http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00060.html
5
reference_url http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00061.html
reference_id
reference_type
scores
url http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00061.html
6
reference_url http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00062.html
reference_id
reference_type
scores
url http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00062.html
7
reference_url http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00071.html
reference_id
reference_type
scores
url http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00071.html
8
reference_url http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00074.html
reference_id
reference_type
scores
url http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00074.html
9
reference_url http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00076.html
reference_id
reference_type
scores
url http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00076.html
10
reference_url http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00077.html
reference_id
reference_type
scores
url http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00077.html
11
reference_url http://lists.opensuse.org/opensuse-updates/2016-04/msg00011.html
reference_id
reference_type
scores
url http://lists.opensuse.org/opensuse-updates/2016-04/msg00011.html
12
reference_url http://pastebin.com/UX2P2jjg
reference_id
reference_type
scores
url http://pastebin.com/UX2P2jjg
13
reference_url http://rhn.redhat.com/errata/RHSA-2016-0496.html
reference_id
reference_type
scores
url http://rhn.redhat.com/errata/RHSA-2016-0496.html
14
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2324.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2324.json
15
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-2324
reference_id
reference_type
scores
0
value 0.2205
scoring_system epss
scoring_elements 0.95798
published_at 2026-04-18T12:55:00Z
1
value 0.2205
scoring_system epss
scoring_elements 0.95784
published_at 2026-04-13T12:55:00Z
2
value 0.2205
scoring_system epss
scoring_elements 0.95794
published_at 2026-04-16T12:55:00Z
3
value 0.2205
scoring_system epss
scoring_elements 0.95748
published_at 2026-04-01T12:55:00Z
4
value 0.2205
scoring_system epss
scoring_elements 0.95757
published_at 2026-04-02T12:55:00Z
5
value 0.2205
scoring_system epss
scoring_elements 0.95765
published_at 2026-04-04T12:55:00Z
6
value 0.2205
scoring_system epss
scoring_elements 0.95767
published_at 2026-04-07T12:55:00Z
7
value 0.2205
scoring_system epss
scoring_elements 0.95776
published_at 2026-04-08T12:55:00Z
8
value 0.2205
scoring_system epss
scoring_elements 0.95779
published_at 2026-04-09T12:55:00Z
9
value 0.2205
scoring_system epss
scoring_elements 0.95783
published_at 2026-04-11T12:55:00Z
10
value 0.2205
scoring_system epss
scoring_elements 0.95782
published_at 2026-04-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-2324
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2315
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2315
17
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2324
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2324
18
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:P/I:P/A:P
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
19
reference_url https://github.com/git/git/commit/de1e67d0703894cb6ea782e36abb63976ab07e60
reference_id
reference_type
scores
url https://github.com/git/git/commit/de1e67d0703894cb6ea782e36abb63976ab07e60
20
reference_url https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.7.4.txt
reference_id
reference_type
scores
url https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.7.4.txt
21
reference_url http://www.debian.org/security/2016/dsa-3521
reference_id
reference_type
scores
url http://www.debian.org/security/2016/dsa-3521
22
reference_url http://www.openwall.com/lists/oss-security/2016/03/15/5
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2016/03/15/5
23
reference_url http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
reference_id
reference_type
scores
url http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
24
reference_url http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
reference_id
reference_type
scores
url http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
25
reference_url http://www.securityfocus.com/bid/84355
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/84355
26
reference_url http://www.securitytracker.com/id/1035290
reference_id
reference_type
scores
url http://www.securitytracker.com/id/1035290
27
reference_url http://www.ubuntu.com/usn/USN-2938-1
reference_id
reference_type
scores
url http://www.ubuntu.com/usn/USN-2938-1
28
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1317981
reference_id 1317981
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1317981
29
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=818318
reference_id 818318
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=818318
30
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*
31
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp4:*:*:*:*:*:*
reference_id cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp4:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp4:*:*:*:*:*:*
32
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:suse:openstack_cloud:5:*:*:*:*:*:*:*
reference_id cpe:2.3:a:suse:openstack_cloud:5:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:suse:openstack_cloud:5:*:*:*:*:*:*:*
33
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*
reference_id cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*
34
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*
reference_id cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*
35
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:suse:linux_enterprise_server:12.0:sp1:*:*:*:*:*:*
reference_id cpe:2.3:o:suse:linux_enterprise_server:12.0:sp1:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:suse:linux_enterprise_server:12.0:sp1:*:*:*:*:*:*
36
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp4:*:*:*:*:*:*
reference_id cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp4:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp4:*:*:*:*:*:*
37
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:*:*:*:*:*:*:*
reference_id cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:*:*:*:*:*:*:*
38
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:suse:linux_enterprise_software_development_kit:12.0:sp1:*:*:*:*:*:*
reference_id cpe:2.3:o:suse:linux_enterprise_software_development_kit:12.0:sp1:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:suse:linux_enterprise_software_development_kit:12.0:sp1:*:*:*:*:*:*
39
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:suse:suse_linux_enterprise_server:12:*:*:*:*:*:*:*
reference_id cpe:2.3:o:suse:suse_linux_enterprise_server:12:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:suse:suse_linux_enterprise_server:12:*:*:*:*:*:*:*
40
reference_url https://nvd.nist.gov/vuln/detail/CVE-2016-2324
reference_id CVE-2016-2324
reference_type
scores
0
value 10.0
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:C/I:C/A:C
1
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://nvd.nist.gov/vuln/detail/CVE-2016-2324
41
reference_url https://security.gentoo.org/glsa/201605-01
reference_id GLSA-201605-01
reference_type
scores
url https://security.gentoo.org/glsa/201605-01
42
reference_url https://access.redhat.com/errata/RHSA-2016:0496
reference_id RHSA-2016:0496
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:0496
43
reference_url https://access.redhat.com/errata/RHSA-2016:0497
reference_id RHSA-2016:0497
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:0497
44
reference_url https://usn.ubuntu.com/2938-1/
reference_id USN-2938-1
reference_type
scores
url https://usn.ubuntu.com/2938-1/
fixed_packages
0
url pkg:deb/debian/cgit@0?distro=trixie
purl pkg:deb/debian/cgit@0?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cgit@0%3Fdistro=trixie
1
url pkg:deb/debian/cgit@1.2.3%2Bgit2.25.1-1?distro=trixie
purl pkg:deb/debian/cgit@1.2.3%2Bgit2.25.1-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cgit@1.2.3%252Bgit2.25.1-1%3Fdistro=trixie
2
url pkg:deb/debian/cgit@1.2.3%2Bgit20221219.50.91f2590%2Bgit2.39.1-1?distro=trixie
purl pkg:deb/debian/cgit@1.2.3%2Bgit20221219.50.91f2590%2Bgit2.39.1-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cgit@1.2.3%252Bgit20221219.50.91f2590%252Bgit2.39.1-1%3Fdistro=trixie
3
url pkg:deb/debian/cgit@1.2.3%2Bgit20240802.70.09d24d7%2Bgit2.46.0-1?distro=trixie
purl pkg:deb/debian/cgit@1.2.3%2Bgit20240802.70.09d24d7%2Bgit2.46.0-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cgit@1.2.3%252Bgit20240802.70.09d24d7%252Bgit2.46.0-1%3Fdistro=trixie
4
url pkg:deb/debian/cgit@1.2.3%2Bgit20250818.80.3346409%2Bgit2.51.0-1?distro=trixie
purl pkg:deb/debian/cgit@1.2.3%2Bgit20250818.80.3346409%2Bgit2.51.0-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cgit@1.2.3%252Bgit20250818.80.3346409%252Bgit2.51.0-1%3Fdistro=trixie
aliases CVE-2016-2324
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-vjnp-dnar-p7gy
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:deb/debian/cgit@1.2.3%252Bgit20221219.50.91f2590%252Bgit2.39.1-1%3Fdistro=trixie