CVE-2026-120640

The Perl CGI module (versions before 5.00 ) is vulnerable to a request forgery flaw. The root cause is that the module fails to distinguish between actual request body payloads and user-supplied parameters because it accepts the names POSTDATA, PUTDATA, PATCHDATA, and XForms:Model from query stri...

CVE-2026-120640 CGI versions before 5.00 for Perl allow the POSTDATA, PUTDATA, PATCHDATA and XForms:Model parameters to be set from the query string or form fields

CGI versions before 5.00 for Perl allow the POSTDATA, PUTDATA, PATCHDATA and XForms:Model parameters to be set from the query string or form fields. CGI stores a non-form request body under POSTDATA, PUTDATA or PATCHDATA, and an XForms body under XForms:Model, but also accepts these names from th...

DEBIAN-CVE-2014-9295

Multiple stack-based buffer overflows in ntpd in NTP before 4.2.8 allow remote attackers to execute arbitrary code via a crafted packet, related to 1 the cryptorecv function when the Autokey Authentication feature is used, 2 the ctlputdata function, and 3 the configure function...

PT-2014-1840

Name of the Vulnerable Software and Affected Versions NTP versions prior to 4.2.8 Description The issue is related to multiple stack-based buffer overflows in the ntpd service, which can be exploited by remote attackers to execute arbitrary code via crafted packets. This is related to the crypto...