18801 matches found
perl-App-cpanminus:1.7044 security update
An update is available for module.perl-CPAN-DistnameInfo, module.perl-Parse-PMFile, perl-String-ShellQuote, perl-App-cpanminus, perl-File-pushd, module.perl-File-pushd, module.perl-String-ShellQuote, perl-Parse-PMFile, module.perl-App-cpanminus, perl-CPAN-DistnameInfo, module.perl-CPAN-Meta-Check...
RockyLinux 8 : perl-App-cpanminus:1.7044 (RLSA-2024:10219)
The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:10219 advisory. perl-App-cpanminus: Insecure HTTP in App::cpanminus Allows Code Execution Vulnerability CVE-2024-45321 Tenable has extracted the preceding description block...
The vulnerability of the _execve50c() function in the POSIX.1-2008 standard library for the Perl language in version 2008 allows a attacker to execute arbitrary code or cause a service failure.
The vulnerability of the execve50c function in the POSIX.1-2008 standard library for the Perl language in POSIX.2008 is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause...
PT-2025-16185
Name of the Vulnerable Software and Affected Versions Perl versions 5.33.1 through 5.41.10 Perl versions 5.34, 5.36, 5.38, and 5.40 Description A heap buffer overflow vulnerability was discovered in Perl. When there are non-ASCII bytes in the left-hand-side of the tr operator, S do trans invmap c...
CLSA-2024-1734372021 postgresql: Fix of CVE-2024-10979
CVE-2024-10979: Prevent trusted PL/Perl code from changing environment variables...
CVE-2024-55918
An issue was discovered in the Graphics::ColorNames package before 3.2.0 for Perl. There is an ambiguity between modules and filenames that can lead to HTML injection by an attacker who can create a file in the current working directory...
DEBIAN-CVE-2024-55918
An issue was discovered in the Graphics::ColorNames package before 3.2.0 for Perl. There is an ambiguity between modules and filenames that can lead to HTML injection by an attacker who can create a file in the current working directory...
CVE-2024-55918
An issue was discovered in the Graphics::ColorNames package before 3.2.0 for Perl. There is an ambiguity between modules and filenames that can lead to HTML injection by an attacker who can create a file in the current working directory...
UBUNTU-CVE-2024-55918
An issue was discovered in the Graphics::ColorNames package before 3.2.0 for Perl. There is an ambiguity between modules and filenames that can lead to HTML injection by an attacker who can create a file in the current working directory...
CVE-2024-55918
An issue was discovered in the Graphics::ColorNames package before 3.2.0 for Perl. There is an ambiguity between modules and filenames that can lead to HTML injection by an attacker who can create a file in the current working directory...
PT-2024-36610 · Unknown · Graphics::Colornames
Name of the Vulnerable Software and Affected Versions: Graphics::ColorNames versions prior to 3.2.0 Description: The issue is related to an ambiguity between modules and filenames in the Graphics::ColorNames package for Perl, which can lead to HTML injection by an attacker who can create a file i...
CVE-2024-55918
CVE-2024-55918 affects the Perl package Graphics::ColorNames prior to version 3.2.0. Affected: module/filename ambiguity in ColorNames can allow HTML injection if an attacker can create a file in the current working directory. Remediation: upgrade to 3.2.0 or later (per PT-2024-36610). Public sou...
Important: Red Hat Security Advisory: postgresql security update
An update for postgresql is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...
postgresql: PostgreSQL PL/Perl environment variable changes execute arbitrary code
A flaw was found in PostgreSQL PL/Perl. This vulnerability allows an unprivileged database user to change sensitive process environment variables e.g., PATH via incorrect control of environment variables...
CVE-2024-55564
The POSIX::2008 package before 0.24 for Perl has a potential execve50c env buffer overflow...
DEBIAN-CVE-2024-55564
The POSIX::2008 package before 0.24 for Perl has a potential execve50c env buffer overflow...
CVE-2024-55564
The POSIX::2008 package before 0.24 for Perl has a potential execve50c env buffer overflow...
UBUNTU-CVE-2024-55564
The POSIX::2008 package before 0.24 for Perl has a potential execve50c env buffer overflow...
