218 matches found
CVE-2020-16156
CPAN 2.28 allows Signature Verification Bypass...
CVE-2020-16156
CPAN 2.28 allows Signature Verification Bypass...
CVE-2020-16156
CVE-2020-16156 affects CPAN/CPAN.pm (notably CPAN 2.28 and its signature verification handling). The root cause is a bypass where an attacker can prepend or manipulate CHECKSUMS to bypass signature verification, enabling installation of tampered modules. Public documents confirm that the issue is...
CVE-2020-16156
CPAN 2.28 allows Signature Verification Bypass...
CVE-2020-16155
The CPAN::Checksums package 2.12 for Perl does not uniquely define signed data...
CVE-2020-16155
The CPAN::Checksums package 2.12 for Perl does not uniquely define signed data...
CVE-2020-16155
CVE-2020-16155 affects CPAN::Checksums package 2.12 for Perl. The root cause is that the package does not uniquely define signed data, as described in multiple sources. The available documents confirm the existence of the issue but do not provide specifics on affected products beyond this Perl mo...
PT-2021-9867 · Unknown +2 · Cpan::Checksums +2
Name of the Vulnerable Software and Affected Versions: CPAN::Checksums version 2.12 Description: The issue concerns the CPAN::Checksums package for Perl, which does not uniquely define signed data. This could potentially lead to security issues, although specific details about exploitation or...
CVE-2020-16156: Improper Verification of Cryptographic Signature
CPAN 2.28 allows Signature Verification Bypass...
CVE-2020-16155: Undefined Security Weakness
The CPAN::Checksums package 2.12 for Perl does not uniquely define signed data...
CVE-2021-38586
In cPanel before 98.0.1, /scripts/cpanconfig performs unsafe operations on files SEC-589...
Advisory ROSA-SA-2021-1993
Software: uuid 1.6.2 OS: Cobalt 7.9 CVE-ID: CVE-2013-4184 CVE-Crit: MEDIUM CVE-DESC: module Data :: Perl UUID from CPAN version 1.219 vulnerable to symbolic link attacks CVE-STATUS: default CVE-REV: default...
new module: perl:5.30
An update is available for perl-Pod-Perldoc, perl-DBI, perl-Pod-Escapes, perl-Devel-PPPort, perl-Pod-Usage, perl-Sub-Exporter, perl-perlfaq, perl-Object-HashBase, perl-CPAN-Meta-YAML, perl-Digest, perl-podlators, perl-bignum, perl-Text-ParseWords, perl-Text-Template, perl-DBD-MySQL, perl-Text-Glo...
PT-2020-6858
Name of the Vulnerable Software and Affected Versions CPAN version 2.28 Description The issue is related to the incorrect verification of cryptographic signatures in the CPAN language, specifically in the Module::Signature:: verify function. This could allow a remote attacker to access confidenti...
EulerOS Virtualization 3.0.2.2 : perl (EulerOS-SA-2020-1476)
According to the versions of the perl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Integer underflow in regcomp.c in Perl before 5.20, as used in Apple OS X before 10.10.5 and other products, allows context-depende...
EulerOS 2.0 SP3 : perl (EulerOS-SA-2019-2648)
According to the versions of the perl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - 1 cpan/Archive-Tar/bin/ptar, 2 cpan/Archive-Tar/bin/ptardiff, 3 cpan/Archive-Tar/bin/ptargrep, 4 cpan/CPAN/scripts/cpan, 5 cpan/Digest-SHA/shasum,...
CVE-2013-4184
Perl module Data::UUID from CPAN version 1.219 vulnerable to symlink attacks...
CVE-2013-4184
Perl module Data::UUID from CPAN version 1.219 vulnerable to symlink attacks...
