https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:43:17.582259+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2015-06193 bdu:2015-06193 2026-10-02T17:43:17.613194+00:00 bdu:2015-06193 https://cve.radiocsirt.org/vuln/euvd-2026-102754 EUVD-2026-102754 2026-10-02T17:43:17.613235+00:00 EUVD-2026-102754 https://cve.radiocsirt.org/vuln/fkie_cve-2014-7817 fkie_cve-2014-7817 2026-10-02T17:43:17.613250+00:00

The wordexp function in GNU C Library (aka glibc) 2.21 does not enforce the WRDE_NOCMD flag, which allows context-dependent attackers to execute arbitrary commands, as demonstrated by input containing "$((`...`))".

 https://cve.radiocsirt.org/vuln/ghsa-47cv-pfmg-555j GHSA-47cv-pfmg-555j 2026-10-02T17:43:17.613280+00:00

The wordexp function in GNU C Library (aka glibc) 2.21 does not enforce the WRDE_NOCMD flag, which allows context-dependent attackers to execute arbitrary commands, as demonstrated by input containing "$((`...`))".

 https://cve.radiocsirt.org/vuln/gsd-2014-7817 gsd-2014-7817 2026-10-02T17:43:17.613295+00:00 gsd-2014-7817 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10154-1 openSUSE-SU-2024:10154-1 — glibc-2.24-2.3 on GA media 2026-10-02T17:43:17.613305+00:00

glibc-2.24-2.3 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2015:0016 RHSA-2015:0016 — Red Hat Security Advisory: glibc security and bug fix update 2026-10-02T17:43:17.613339+00:00

glibc: crash in code page decoding functions (IBM933, IBM935, IBM937, IBM939, IBM1364) glibc: command execution in wordexp() with WRDE_NOCMD specified

 https://cve.radiocsirt.org/vuln/suse-ru-2015:0794-1 SUSE-RU-2015:0794-1 — Security update for glibc 2026-10-02T17:43:17.613357+00:00

Security update for glibc

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-7817 UBUNTU-CVE-2014-7817 2026-10-02T17:43:17.613380+00:00

Affected: Ubuntu:14.04:LTS: eglibc

The wordexp function in GNU C Library (aka glibc) 2.21 does not enforce the WRDE_NOCMD flag, which allows context-dependent attackers to execute arbitrary commands, as demonstrated by input containing "$((`...`))".