EulerOS Virtualization for ARM 64 3.0.6.0 : perl (EulerOS-SA-2020-1894)

According to the versions of the perl packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive Sstudychu...

Hack-Tools - The All-In-One Red Team Extension For Web Pentester

The all-in-oneRed Team browser extension for Web Pentesters HackTools, is a web extension facilitating your web application penetration tests , it includes cheat sheets as well as all the tools used during a test such as XSS payloads, Reverse shells and much more. With the extension you no longer...

The vulnerability in the implementation of the S_study_chunk function in the Perl programming language allows a hacker to trigger a service failure.

The vulnerability of the Sstudychunk function implementation in the Perl programming language is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the Perl programming language interpreter, related to the execution of operations beyond the buffer boundaries in memory, allows attackers to trigger a service failure.

The vulnerability of the Perl programming language interpreter is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the parameter PL_regkind[OP(n)] == NOTHING in the Perl programming language allows a hacker to execute arbitrary code.

The vulnerability of the parameter PLregkindOPn == NOTHING in the Perl programming language is related to integer overflow. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability in the implementation of the XML::Twig Perl module for processing XML documents in a tree-like mode allows a attacker to cause a service failure or gain unauthorized access to protected information.

The vulnerability of the expandexternalents configuration implementation in the Perl module for processing XML documents in a tree-like mode, implemented via XML::Twig, is related to an incorrect limitation on XML references to external objects. Exploiting this vulnerability could allow an attack...

libpcre in PCRE before 8.44 allows an integer overflow via a large number after a (?C substring.

...

openSUSE Security Update : perl-XML-Twig (openSUSE-2020-1204)

This update for perl-XML-Twig fixes the following issues : - Security fix bsc1008644, CVE-2016-9180 - Setting expandexternalents to 0 or -1 currently doesn't work as expected; To completely turn off expanding external entities use noxxe. - Update documentation for XML::Twig to mention problems wi...

SUSE SLES12 Security Update : perl-PlRPC (SUSE-SU-2020:2238-1)

This update for perl-PlRPC fixes the following issues : Security notice: bsc858243, CVE-2013-7284 - Document security vulnerability on Storable and reply attack Add perl-PlRPC-CVE-2013-7284.patch Note that Tenable Network Security has extracted the preceding description block directly from the SU...

openSUSE: Security Advisory for perl-XML-Twig (openSUSE-SU-2020:1204-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2020:1204-1 Security update for perl-XML-Twig

This update for perl-XML-Twig fixes the following issues: - Security fix bsc1008644, CVE-2016-9180 Setting expandexternalents to 0 or -1 currently doesn't work as expected; To completely turn off expanding external entities use noxxe. Update documentation for XML::Twig to mention problems with...

SUSE-SU-2020:2238-1 Security update for perl-PlRPC

This update for perl-PlRPC fixes the following issues: - Security notice: bsc858243, CVE-2013-7284 Document security vulnerability on Storable and reply attack - Add perl-PlRPC-CVE-2013-7284.patch...

Security update for perl-XML-Twig (moderate)

openSUSE Security Update: Security update for perl-XML-Twig Announcement ID: openSUSE-SU-2020:1204-1 Rating: moderate References: 1008644 Cross-References: CVE-2016-9180 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for...

openSUSE Security Update : perl-XML-Twig (openSUSE-2020-1177)

This update for perl-XML-Twig fixes the following issues : - Security fix bsc1008644, CVE-2016-9180 - Setting expandexternalents to 0 or -1 currently doesn't work as expected; To completely turn off expanding external entities use noxxe. - Update documentation for XML::Twig to mention problems wi...

openSUSE: Security Advisory for perl-XML-Twig (openSUSE-SU-2020:1177-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2020-17478

ECDSA/EC/Point.pm in Crypt::Perl before 0.33 does not properly consider timing attacks against the EC point multiplication algorithm...

CVE-2020-17478

ECDSA/EC/Point.pm in Crypt::Perl before 0.33 does not properly consider timing attacks against the EC point multiplication algorithm...

Code injection

ECDSA/EC/Point.pm in Crypt::Perl before 0.33 does not properly consider timing attacks against the EC point multiplication algorithm...

CVE-2020-17478

ECDSA/EC/Point.pm in Crypt::Perl before 0.33 does not properly consider timing attacks against the EC point multiplication algorithm...

CVE-2020-17478

The CVE-2020-17478 entry affects Crypt::Perl, specifically ECDSA/EC/Point.pm before version 0.33, where timing-attack considerations in the EC point multiplication are not properly handled. The issue is documented across multiple sources (e.g., NVD/NVDB) with the root cause described as inadequat...