18956 matches found
Design/Logic Flaw
Encode.pm, as distributed in Perl through 5.34.0, allows local users to gain privileges via a Trojan horse Encode::ConfigLocal library in the current working directory that preempts dynamic module loading. Exploitation requires an unusual configuration, and certain 2021 versions of Encode.pm 3.05...
Design/Logic Flaw
In cPanel before 96.0.13, scripts/fix-cpanel-perl mishandles the creation of temporary files SEC-586...
CVE-2021-38587
The CVE-2021-38587 entry concerns cPanel prior to 96.0.13. The affected component is the script fix-cpanel-perl, which mishandles the creation of temporary files (SEC-586). The underlying issue is a faulty handling of temporary-file creation, enabling an impact described in the sources. The publi...
CVE-2021-36770
CVE-2021-36770 affects IBM Cognos Analytics. The IBM bulletin notes a local privilege-escalation via an untrusted search path in the Perl Encode module (Encode::ConfigLocal) loaded from the current working directory, preempting dynamic module loading. Exploitation requires an unusual configuratio...
CVE-2021-36770
Encode.pm, as distributed in Perl through 5.34.0, allows local users to gain privileges via a Trojan horse Encode::ConfigLocal library in the current working directory that preempts dynamic module loading. Exploitation requires an unusual configuration, and certain 2021 versions of Encode.pm 3.05...
CVE-2021-36770
Encode.pm, as distributed in Perl through 5.34.0, allows local users to gain privileges via a Trojan horse Encode::ConfigLocal library in the current working directory that preempts dynamic module loading. Exploitation requires an unusual configuration, and certain 2021 versions of Encode.pm 3.05...
Cpanel 竞争条件问题漏洞
Cpanel is a set of Web-based automated colocation platform from Cpanel, Inc. in the United States. The platform is primarily used to automate the management of websites and servers. A competitive conditions issue vulnerability exists in cPanel prior to 96.0.13, which stems from the script...
cPanel 安全漏洞
Cpanel is a set of Web-based automated colocation platform from Cpanel, Inc. in the United States. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in cPanel that stems from a lack of validation of the integrity of downloads in...
Cpanel 安全特征问题漏洞
Cpanel is a set of Web-based automated colocation platform from Cpanel, Inc. in the United States. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in cPanel that stems from the script fix-cpanel-perl not properly restricting file...
virt:rhel and virt-devel:rhel security and bug fix update
An update is available for libguestfs, libnbd, nbdkit, libguestfs-winsupport, supermin, libiscsi, hivex, libvirt, netcf, perl-Sys-Virt, seabios, qemu-kvm, sgabios, libvirt-dbus, libvirt-python. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a...
perl bug fix and enhancement update
Perl is a high-level programming language that is commonly used for system administration utilities and web programming. Bug Fixes and Enhancements: perl-net-ping wrong return value on failing DNS name lookup BZ1973176...
perl bug fix and enhancement update
An update is available for perl. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Perl is a high-level programming language that is commonly used for system...
USN-5033-1: Perl vulnerability
It was discovered that the Perl Encode library incorrectly handled paths. A local attacker could possibly use this issue to trick the library into executing arbitrary code from the current working directory...
CVE-2021-36770
A flaw was found in perl-Encode, where the Perl5 Encode module loaded modules within the current directory. This flaw allows an attacker with write access to the current directory of a Perl5 process to inject arbitrary Perl code when this module is loaded, which can be used for a local privilege...
PT-2021-4681 · Encode.Pm +2 · Encode.Pm +2
Name of the Vulnerable Software and Affected Versions: Encode.pm versions 3.05 through 3.11 Perl versions through 5.34.0 Description: The issue is related to incorrect path handling in the Encode.pm module of the Perl programming language. This allows an attacker to inject arbitrary code and gain...
CVE-2021-36770
Encode.pm, as distributed in Perl through 5.34.0, allows local users to gain privileges via a Trojan horse Encode::ConfigLocal library in the current working directory that preempts dynamic module loading. Exploitation requires an unusual configuration, and certain 2021 versions of Encode.pm 3.05...
Ubuntu 21.04 : Perl vulnerability (USN-5033-1)
The remote Ubuntu 21.04 host has packages installed that are affected by a vulnerability as referenced in the USN-5033-1 advisory. It was discovered that the Perl Encode library incorrectly handled paths. A local attacker could possibly use this issue to trick the library into executing arbitrary...
Perl 代码问题漏洞
Perl is a general-purpose, interpreted, dynamic, cross-platform programming language from the PERL community. A code issue vulnerability exists in Perl 5 that allows an attacker to execute commands with write access to the current directory of a Perl 5 process...
UBUNTU-CVE-2021-36770
Encode.pm, as distributed in Perl through 5.34.0, allows local users to gain privileges via a Trojan horse Encode::ConfigLocal library in the current working directory that preempts dynamic module loading. Exploitation requires an unusual configuration, and certain 2021 versions of Encode.pm 3.05...
Ubuntu 18.04 LTS / 20.04 LTS : Perl DBI module vulnerabilities (USN-5030-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5030-1 advisory. It was discovered that the Perl DBI module incorrectly opened files outside of the folder specified in the data source name. A remote attacke...