Global (Gnu) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2024-06-16. Vendor: Gnu.

CVEs of Global

• CVE-2024-38448 - CVSS 9.1 (critical), 2024-06-16: htags in GNU Global through 6.6.12 allows code execution in situations where dbpath (aka -d) is untrusted, because shell metacharacters may be used.
• CVE-2017-17531 - CVSS 8.8 (high), 2017-12-14: gozilla.c in GNU GLOBAL 4.8.6 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote…