Lucene search
+L

18682 matches found

OSV
OSV
added 2026/04/15 12:03 p.m.14 views

RLSA-2026:7679 Important: perl-XML-Parser security update

This module provides ways to parse XML documents. It is built on top of XML::Parser::Expat, which is a lower level interface to James Clark's expat library. Each call to one of the parsing methods creates a new instance of XML::Parser::Expat which is then used to parse the document. Expat options...

8.8CVSS5.8AI score0.00604EPSS
SaveExploits0References3
Rockylinux
Rockylinux
added 2026/04/15 12:03 p.m.20 views

perl-XML-Parser security update

An update is available for perl-XML-Parser. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list This module provides ways to parse XML documents. It is built on top ...

9.8CVSS5.8AI score0.00604EPSS
SaveExploits0
OSV
OSV
added 2026/04/15 10:10 a.m.7 views

RHSA-2026:8096 Red Hat Security Advisory: perl:5.32 security update

Bulletin has no description...

5.9CVSS6.8AI score0.00498EPSS
SaveExploits0References14
NVD
NVD
added 2026/04/15 8:16 a.m.9 views

CVE-2026-5088

Apache::API::Password versions through 0.5.2 for Perl can generate insecure random values for salts. The makesalt and makesaltbcrypt methods will attept to load Crypt::URandom and then Bytes::Random::Secure to generate random bytes for the salt. If those modules are unavailable, it will simply...

7.5CVSS0.00572EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/04/15 7:03 a.m.11 views

CVE-2026-5088

Apache::API::Password versions through 0.5.2 for Perl can generate insecure random values for salts. The makesalt and makesaltbcrypt methods will attept to load Crypt::URandom and then Bytes::Random::Secure to generate random bytes for the salt. If those modules are unavailable, it will simply...

7.5CVSS5.8AI score0.00572EPSS
SaveExploits0References5
CVE
CVE
added 2026/04/15 7:03 a.m.25 views

CVE-2026-5088

CVE-2026-5088 affects Apache::API::Password for Perl up to version 0.5.2, where salts may be generated with non-cryptographically secure randomness. The _make_salt and _make_salt_bcrypt routines attempt Crypt::URandom and Bytes::Random::Secure; if these modules are unavailable, salts are produced...

7.5CVSS5.8AI score0.00572EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
added 2026/04/15 7:03 a.m.37 views

CVE-2026-5088 Apache::API::Password versions through 0.5.2 for Perl can generate insecure random values for salts

Apache::API::Password versions through 0.5.2 for Perl can generate insecure random values for salts. The makesalt and makesaltbcrypt methods will attept to load Crypt::URandom and then Bytes::Random::Secure to generate random bytes for the salt. If those modules are unavailable, it will simply...

0.00572EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/04/15 7:03 a.m.9 views

CVE-2026-5088 Apache::API::Password versions through 0.5.2 for Perl can generate insecure random values for salts

Apache::API::Password versions through 0.5.2 for Perl can generate insecure random values for salts. The makesalt and makesaltbcrypt methods will attept to load Crypt::URandom and then Bytes::Random::Secure to generate random bytes for the salt. If those modules are unavailable, it will simply...

5.8AI score0.00572EPSS
SaveExploits0References4
OSV
OSV
added 2026/04/15 7:03 a.m.14 views

CVE-2026-5088 Apache::API::Password versions through 0.5.2 for Perl can generate insecure random values for salts

Apache::API::Password versions through 0.5.2 for Perl can generate insecure random values for salts. The makesalt and makesaltbcrypt methods will attept to load Crypt::URandom and then Bytes::Random::Secure to generate random bytes for the salt. If those modules are unavailable, it will simply...

7.5CVSS5.9AI score
SaveExploits0References10
OSV
OSV
added 2026/04/15 12:00 a.m.6 views

OPENSUSE-SU-2026:10551-1 perl-YAML-Syck-1.440.0-1.1 on GA media

These are all security issues fixed in the perl-YAML-Syck-1.440.0-1.1 package on the GA media of openSUSE Tumbleweed...

9.1CVSS5.8AI score0.00429EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2026/04/15 12:00 a.m.12 views

Ubuntu: Security Advisory (USN-8174-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS5.8AI score0.00604EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/04/15 12:00 a.m.9 views

RockyLinux 10 : perl-XML-Parser (RLSA-2026:7680)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:7680 advisory. perl-xml-parser: XML::Parser: Memory corruption via deeply nested XML files CVE-2006-10003 perl-xml-parser: XML::Parser for Perl: Heap corruption and...

9.8CVSS5.9AI score0.00604EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/04/15 12:00 a.m.32 views

PT-2026-33009

Apache::API::Password versions through v0.5.2 for Perl can generate insecure random values for salts. The make salt and make salt bcrypt methods will attept to load Crypt::URandom and then Bytes::Random::Secure to generate random bytes for the salt. If those modules are unavailable, it will simpl...

5.8AI score0.00572EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2026/04/14 11:25 p.m.18 views

SUSE CVE-2026-40199

Net::CIDR::Lite versions before 0.23 for Perl mishandles IPv4 mapped IPv6 addresses, which may allow IP ACL bypass. packipv6 includes the sentinel byte from packipv4 when building the packed representation of IPv4 mapped addresses like ::ffff:192.168.1.1. This produces an 18 byte value instead of...

6.5CVSS5.8AI score0.00307EPSS
SaveExploits0References4
Rockylinux
Rockylinux
added 2026/04/14 6:01 p.m.14 views

perl:5.32 security update

An update is available for module.perl-CPAN-DistnameInfo, module.perl-Text-Diff, module.perl-Carp, perl-Data-Section, perl-Pod-Simple, perl-File-Fetch, perl-parent, perl-CPAN-Meta, module.perl-Exporter, module.perl-File-Fetch, perl-Pod-Usage, module.perl-Pod-Checker,...

5.9CVSS7.1AI score0.00498EPSS
SaveExploits0
OSV
OSV
added 2026/04/14 6:01 p.m.9 views

RLSA-2026:8096 Moderate: perl:5.32 security update

Perl is a high-level programming language that is commonly used for system administration utilities and web programming. Security Fixes: perl: Perl threads have a working directory race condition where file operations may target unintended paths CVE-2025-40909 For more details about the security...

5.9CVSS7.2AI score0.00498EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/04/14 4:21 p.m.11 views

perl: Perl threads have a working directory race condition where file operations may target unintended paths

A flaw was found in the Perl standard library threads component. This vulnerability can allow a local attacker to exploit a race condition in directory handling to access files or load code from unexpected locations...

5.9CVSS6.8AI score0.00498EPSS
SaveExploits0References11
RedHat Linux
RedHat Linux
added 2026/04/14 4:21 p.m.24 views

Moderate: Red Hat Security Advisory: perl:5.32 security update

An update for the perl:5.32 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

5.9CVSS6.9AI score0.00498EPSS
SaveExploits0References2
OSV
OSV
added 2026/04/14 12:01 p.m.11 views

RLSA-2026:7681 Important: perl-XML-Parser security update

This module provides ways to parse XML documents. It is built on top of XML::Parser::Expat, which is a lower level interface to James Clark's expat library. Each call to one of the parsing methods creates a new instance of XML::Parser::Expat which is then used to parse the document. Expat options...

8.8CVSS5.8AI score0.00604EPSS
SaveExploits0References3
Rockylinux
Rockylinux
added 2026/04/14 12:01 p.m.24 views

perl-XML-Parser security update

An update is available for perl-XML-Parser. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list This module provides ways to parse XML documents. It is built on top ...

9.8CVSS5.8AI score0.00604EPSS
SaveExploits0
Rows per page
Query Builder