52 matches found
EUVD-2026-58118
Form::Processor::Field::HtmlArea versions from 0.06 through 1.162360 for Perl allow attacker selected method dispatch and resource exhaustion via an HTML::Tidy diagnostic that validate passes to adderror as a Locale::Maketext template. validate runs HTML::Tidy over the submitted markup and passes...
CVE-2026-13051
CVE-2026-13051 affects Form::Processor::Field::HtmlArea (Perl) versions 0.06–1.162360. It allows attacker-chosen method dispatch and potential resource exhaustion when an HTML::Tidy diagnostic is passed to add_error as a Locale::Maketext template. Validate runs HTML::Tidy on submitted markup; mes...
CVE-2022-4993
HTML::FormHandler for Perl versions up to 0.40068 is affected. The flaw stems from using request-derived text as a Locale::Maketext template in _apply_actions and add_error, allowing attacker-controlled method dispatch and potential resource exhaustion. A crafted input can cause a chain of templa...
EUVD-2022-56018
HTML::FormHandler versions through 0.40068 for Perl allow attacker selected method dispatch and resource exhaustion because applyactions and adderror use error message text built from request data as a Locale::Maketext bracket notation template. adderror hands its first argument to the language...
MiracleLinux 4 : perl-5.10.1-130.AXS4 (AXSA:2013-320:01)
The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2013-320:01 advisory. Perl is a high-level programming language with roots in C, sed, awk and shell scripting. Perl is good at handling processes and files, and is...
MiracleLinux 3 : perl-5.8.8-40.0.1.AXS3 (AXSA:2013-340:01)
The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2013-340:01 advisory. Perl is a high-level programming language with roots in C, sed, awk and shell scripting. Perl is good at handling processes and files, and is...
new packages: perl-Locale-Maketext
An update is available for perl-Locale-Maketext. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Roc...
new module: perl:5.30
An update is available for perl-Pod-Perldoc, perl-DBI, perl-Pod-Escapes, perl-Devel-PPPort, perl-Pod-Usage, perl-Sub-Exporter, perl-perlfaq, perl-Object-HashBase, perl-CPAN-Meta-YAML, perl-Digest, perl-podlators, perl-bignum, perl-Text-ParseWords, perl-Text-Template, perl-DBD-MySQL, perl-Text-Glo...
Memory Corruption
Perl is a high-level programming language commonly used for system administration utilities and web programming. A heap overflow flaw was found in Perl. If a Perl application allowed user input to control the count argument of the string repeat operator, an attacker could cause the application to...
HTTP Header Injection
Perl is a high-level programming language commonly used for system administration utilities and web programming. A heap overflow flaw was found in Perl. If a Perl application allowed user input to control the count argument of the string repeat operator, an attacker could cause the application to...
Privilege Escalation
Perl is a high-level programming language commonly used for system administration utilities and web programming. A heap overflow flaw was found in Perl. If a Perl application allowed user input to control the count argument of the string repeat operator, an attacker could cause the application to...
Gentoo Security Advisory GLSA 201410-02
Gentoo Linux Local Security Checks GLSA 201410-02 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...
Gentoo Security Advisory GLSA 201401-11
Gentoo Linux Local Security Checks GLSA 201401-11 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...
Oracle Solaris Third-Party Patch Update : perl-58 (cve_2012_6329_code_injection1)
The remote Solaris system is missing necessary patches to address security updates : - The compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7 does not properly handle backslashes and fully qualified method names during compilation of bracket notation, whi...
Oracle Solaris Third-Party Patch Update : perl-512 (cve_2012_5195_heap_buffer)
The remote Solaris system is missing necessary patches to address security updates : - Heap-based buffer overflow in the Perlrepeatcpy function in util.c in Perl 5.12.x before 5.12.5, 5.14.x before 5.14.3, and 5.15.x before 15.15.5 allows context-dependent attackers to cause a denial of service...
GLSA-201410-02 : Perl, Perl Locale-Maketext module: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201410-02 Perl, Perl Locale-Maketext module: Multiple vulnerabilities Two vulnerabilities have been reported in the Locale-Maketext module for Perl, which can be exploited by malicious users to compromise an application using the...
Perl, Perl Locale-Maketext module: Multiple vulnerabilities
Background Locale-Maketext - Perl framework for localization Description Two vulnerabilities have been reported in the Locale-Maketext module for Perl, which can be exploited by malicious users to compromise an application using the module. The vulnerabilities are caused due to the “compile”...
Ubuntu: Security Advisory (USN-2099-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu Update for perl USN-2099-1
Check for the Version of perl OpenVAS Vulnerability Test $Id: gbubuntuUSN20991.nasl 7957 2017-12-01 06:40:08Z santu $ Ubuntu Update for perl USN-2099-1 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you...
[USN-2099-1] Perl vulnerability
========================================================================== Ubuntu Security Notice USN-2099-1 February 05, 2014 perl vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...