18984 matches found
CVE-2020-16154
The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass...
PT-2021-9866 · Unknown +4 · App::Cpanminus +4
Name of the Vulnerable Software and Affected Versions: App::cpanminus version 1.7044 Description: The issue allows Signature Verification Bypass. Recommendations: For version 1.7044, update to a version that fixes the Signature Verification Bypass issue...
Updated perl/perl-Encode packages fix security vulnerability
Encode.pm, as distributed in Perl through 5.34.0, allows local users to gain privileges via a Trojan horse Encode::ConfigLocal library in the current working directory that preempts dynamic module loading. Exploitation requires an unusual configuration, and certain 2021 versions of Encode.pm 3.05...
MGASA-2021-0527 Updated perl/perl-Encode packages fix security vulnerability
Encode.pm, as distributed in Perl through 5.34.0, allows local users to gain privileges via a Trojan horse Encode::ConfigLocal library in the current working directory that preempts dynamic module loading. Exploitation requires an unusual configuration, and certain 2021 versions of Encode.pm 3.05...
The Perl fingerd program allows arbitrary command execution from remote users.
...
GitLab ExifTool uploaded image command injection
Added: 11/24/2021 Background GitLab is an open-source software development platform with built-in version control and issue tracking. Problem A remote attacker can execute arbitrary commands by uploading a specially crafted image to GitLab, which executes injected Perl code when ExifTool parses...
GitLab ExifTool uploaded image command injection
Added: 11/24/2021 Background GitLab is an open-source software development platform with built-in version control and issue tracking. Problem A remote attacker can execute arbitrary commands by uploading a specially crafted image to GitLab, which executes injected Perl code when ExifTool parses...
pcre: Integer overflow when parsing callout numeric arguments
libpcre in PCRE before 8.44 allows an integer overflow via a large number after a ?C substring...
pcre: Buffer over-read in JIT when UTF is disabled and \X or \R has fixed quantifier greater than 1
libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \X or \R has more than one fixed quantifier, a related issue to CVE-2019-20454...
pcre: Integer overflow when parsing callout numeric arguments
libpcre in PCRE before 8.44 allows an integer overflow via a large number after a ?C substring...
The vulnerability of theEncode.pm module in the Perl programming language allows attackers to inject arbitrary code and gain elevated privileges.
The vulnerability of theEncode.pm module in the Perl programming language is related to incorrect handling of the search path. Exploiting this vulnerability allows a remote attacker to inject arbitrary code and gain increased privileges...
pcre: Buffer over-read in JIT when UTF is disabled and \X or \R has fixed quantifier greater than 1
libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \X or \R has more than one fixed quantifier, a related issue to CVE-2019-20454...
perl bug fix and enhancement update
An update is available for perl. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterprise...
perl bug fix and enhancement update
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...
ALBA-2021:4327 perl-GSSAPI bug fix and enhancement update
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...
perl-GSSAPI bug fix and enhancement update
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...
perl-GSSAPI bug fix and enhancement update
An update is available for perl-GSSAPI. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...
Sophos UTM WebAdmin SID Command Injection Exploit
This Metasploit module exploits an SID-based command injection in Sophos UTM's WebAdmin interface to execute shell commands as the root user. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule...
[SECURITY] [DLA 2798-1] libdatetime-timezone-perl new upstream version
------------------------------------------------------------------------- Debian LTS Advisory DLA-2798-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort October 29, 2021 https://wiki.debian.org/LTS -...
Debian DLA-2798-1 : libdatetime-timezone-perl - LTS security update
The remote Debian 9 host has a package installed that is affected by a vulnerability as referenced in the dla-2798 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 70300 C Tenable Network Security...