Lucene search
+L

26 matches found

Tenable Nessus
Tenable Nessus
added 2025/12/04 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2025-64756

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Glob matches files using patterns the shell uses. Starting in version 10.2.0 and prior to versions 10.5.0 and 11.1.0, the glob CLI contains a command injection...

7.5CVSS7.3AI score0.0309EPSS
SaveExploits1References2
SUSE CVE
SUSE CVE
added 2025/11/29 12:23 a.m.11 views

SUSE CVE-2025-64756

Glob matches files using patterns the shell uses. Starting in version 10.2.0 and prior to versions 10.5.0 and 11.1.0, the glob CLI contains a command injection vulnerability in its -c/--cmd option that allows arbitrary command execution when processing files with malicious names. When glob -c are...

7.5CVSS8.4AI score0.0309EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2025/11/27 6:02 p.m.19 views

CVE-2025-64756

A flaw was found in glob. This vulnerability allows arbitrary command execution via processing files with malicious names when the glob command-line interface CLI is used with the -c/--cmd option, enabling shell metacharacters to trigger command injection. Mitigation To mitigate this issue, avoid...

7.5CVSS5.7AI score0.0309EPSS
SaveExploits1References5
AlpineLinux
AlpineLinux
added 2025/11/17 6:15 p.m.10 views

CVE-2025-64756

Glob matches files using patterns the shell uses. Starting in version 10.2.0 and prior to versions 10.5.0 and 11.1.0, the glob CLI contains a command injection vulnerability in its -c/--cmd option that allows arbitrary command execution when processing files with malicious names. When glob -c are...

7.5CVSS8.1AI score0.0309EPSS
SaveExploits1References3
OSV
OSV
added 2025/11/17 5:38 p.m.12 views

GHSA-5J98-MCP5-4VW2 glob CLI: Command injection via -c/--cmd executes matches with shell:true

Summary The glob CLI contains a command injection vulnerability in its -c/--cmd option that allows arbitrary command execution when processing files with malicious names. When glob -c is used, matched filenames are passed to a shell with shell: true, enabling shell metacharacters in filenames to...

7.5CVSS8.6AI score0.0309EPSS
SaveExploits1References5
OSV
OSV
added 2025/11/17 5:29 p.m.10 views

CVE-2025-64756 glob CLI: Command injection via -c/--cmd executes matches with shell:true

Glob matches files using patterns the shell uses. Starting in version 10.2.0 and prior to versions 10.5.0 and 11.1.0, the glob CLI contains a command injection vulnerability in its -c/--cmd option that allows arbitrary command execution when processing files with malicious names. When glob -c are...

7.5CVSS8.2AI score
SaveExploits0References5
Rows per page
Query Builder