25 matches found
MGASA-2026-0511 Updated perl-Net-Whois-Raw package fixes a security vulnerability
Net::Whois::Raw versions before 2.99044 for Perl ship a pwhois command-line tool that queries WHOIS for the wrong domain for unicode domain names. CVE-2026-19954...
CVE-2026-19954
A flaw was found in perl-net-whois-raw. The pwhois command-line tool skips standard Internationalizing Domain Names in Applications IDNA mapping and normalization steps when processing internationalized domain names. By supplying domain names containing specific Unicode characters, an attacker ca...
DEBIAN-CVE-2026-19954
Net::Whois::Raw versions before 2.99044 for Perl ship a pwhois command-line tool that queries WHOIS for the wrong domain for unicode domain names. pwhois encodes each non-ASCII label directly using Net::IDN::Punycode and prepends xn--. Apart from lowercasing ASCII and Cyrillic letters, it skips t...
CVE-2026-19954
Net::Whois::Raw versions before 2.99044 for Perl ship a pwhois command-line tool that queries WHOIS for the wrong domain for unicode domain names. pwhois encodes each non-ASCII label directly using Net::IDN::Punycode and prepends xn--. Apart from lowercasing ASCII and Cyrillic letters, it skips t...
CVE-2026-19954
Net::Whois::Raw versions before 2.99044 for Perl ship a pwhois command-line tool that queries WHOIS for the wrong domain for unicode domain names. pwhois encodes each non-ASCII label directly using Net::IDN::Punycode and prepends xn--. Apart from lowercasing ASCII and Cyrillic letters, it skips t...
CVE-2026-19954
Net::Whois::Raw versions before 2.99044 for Perl ship a pwhois command-line tool that queries WHOIS for the wrong domain for unicode domain names. pwhois encodes each non-ASCII label directly using Net::IDN::Punycode and prepends xn--. Apart from lowercasing ASCII and Cyrillic letters, it skips t...
CVE-2026-19954
The Net::Whois::Raw library for Perl (versions before 2.99044 ) contains a flaw in its pwhois command-line tool. The tool fails to correctly query WHOIS for unicode domain names because it skips essential IDNA mapping and normalization steps, directly using Net::IDN::Punycode . This results in in...
EUVD-2026-92267
Net::Whois::Raw versions before 2.99044 for Perl ship a pwhois command-line tool that queries WHOIS for the wrong domain for unicode domain names. pwhois encodes each non-ASCII label directly using Net::IDN::Punycode and prepends xn--. Apart from lowercasing ASCII and Cyrillic letters, it skips t...
CVE-2026-19954 Net::Whois::Raw versions before 2.99044 for Perl ship a pwhois command-line tool that queries WHOIS for the wrong domain for unicode domain names
Net::Whois::Raw versions before 2.99044 for Perl ship a pwhois command-line tool that queries WHOIS for the wrong domain for unicode domain names. pwhois encodes each non-ASCII label directly using Net::IDN::Punycode and prepends xn--. Apart from lowercasing ASCII and Cyrillic letters, it skips t...
CVE-2026-19954: Improper Handling of Unicode Encoding
Net::Whois::Raw versions before 2.99044 for Perl ship a pwhois command-line tool that queries WHOIS for the wrong domain for unicode domain names. pwhois encodes each non-ASCII label directly using Net::IDN::Punycode and prepends xn--. Apart from lowercasing ASCII and Cyrillic letters, it skips t...
CVE-2026-19954
Net::Whois::Raw versions before 2.99044 for Perl ship a pwhois command-line tool that queries WHOIS for the wrong domain for unicode domain names. pwhois encodes each non-ASCII label directly using Net::IDN::Punycode and prepends xn--. Apart from lowercasing ASCII and Cyrillic letters, it skips t...
PT-2026-104738
Name of the Vulnerable Software and Affected Versions Net::Whois::Raw versions prior to 2.99044 Description The pwhois command-line tool queries the incorrect domain when processing Unicode domain names. This occurs because the tool encodes non-ASCII labels using Net::IDN::Punycode and prepends...
Linux Distros Unpatched Vulnerability : CVE-2026-19954
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Net::Whois::Raw versions before 2.99044 for Perl ship a pwhois command-line tool that queries WHOIS for the wrong domain for unicode domain names. pwhois encode...
EUVD-2020-31226
Powie's WHOIS Domain Check 0.9.31 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to inject arbitrary JavaScript by exploiting unsanitized input fields in plugin settings. Attackers can submit malicious payloads through textarea and input elements in t...
pWhois Layer Four Traceroute (LFT) Unspecified Vulnerability
Whois Layer Four Traceroute LFT is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
pWhois Layer Four Traceroute (LFT) Unspecified Vulnerability
This host is installed with Whois Layer Four Traceroute LFT and is prone to unspecified vulnerability. OpenVAS Vulnerability Test $Id: gbpwhoislftunspecifiedvuln.nasl 7823 2017-11-20 08:54:04Z cfischer $ pWhois Layer Four Traceroute LFT Unspecified Vulnerability Authors: Antu Sanadi Copyright c...
CVE-2011-0765
Unspecified vulnerability in lft in pWhois Layer Four Traceroute LFT 3.x before 3.3 allows local users to gain privileges via a crafted command line...
UBUNTU-CVE-2011-0765
Unspecified vulnerability in lft in pWhois Layer Four Traceroute LFT 3.x before 3.3 allows local users to gain privileges via a crafted command line...
