18899 matches found
Code injection
The CPAN::Checksums package 2.12 for Perl does not uniquely define signed data...
UBUNTU-CVE-2020-16155
The CPAN::Checksums package 2.12 for Perl does not uniquely define signed data...
CVE-2020-16154
The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass...
DEBIAN-CVE-2020-16154
The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass...
CVE-2020-16154
The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass...
CVE-2020-16154
The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass...
CVE-2020-16154
The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass...
Security feature bypass
The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass...
UBUNTU-CVE-2020-16154
The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass...
CVE-2020-16155
The CPAN::Checksums package 2.12 for Perl does not uniquely define signed data...
CVE-2020-16155
CVE-2020-16155 affects CPAN::Checksums package 2.12 for Perl. The root cause is that the package does not uniquely define signed data, as described in multiple sources. The available documents confirm the existence of the issue but do not provide specifics on affected products beyond this Perl mo...
CVE-2020-16155
The CPAN::Checksums package 2.12 for Perl does not uniquely define signed data...
CVE-2020-16154
The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass...
CVE-2020-16154
CVE-2020-16154 affects the Perl module perl-App-cpanminus, reported as version 1.7044. The issue is a bypass of signature verification for CHECKSUMS files, enabling potential integrity concerns. Public advisories (e.g., ALAS-2025-2802) instruct updating perl-App-cpanminus (e.g., via yum update) t...
CVE-2020-16154
The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass...
CVE-2020-16154
The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass...
PT-2021-9866 · Unknown +4 · App::Cpanminus +4
Name of the Vulnerable Software and Affected Versions: App::cpanminus version 1.7044 Description: The issue allows Signature Verification Bypass. Recommendations: For version 1.7044, update to a version that fixes the Signature Verification Bypass issue...
Updated perl/perl-Encode packages fix security vulnerability
Encode.pm, as distributed in Perl through 5.34.0, allows local users to gain privileges via a Trojan horse Encode::ConfigLocal library in the current working directory that preempts dynamic module loading. Exploitation requires an unusual configuration, and certain 2021 versions of Encode.pm 3.05...
MGASA-2021-0527 Updated perl/perl-Encode packages fix security vulnerability
Encode.pm, as distributed in Perl through 5.34.0, allows local users to gain privileges via a Trojan horse Encode::ConfigLocal library in the current working directory that preempts dynamic module loading. Exploitation requires an unusual configuration, and certain 2021 versions of Encode.pm 3.05...