CVE-2026-14380

DBI versions before 1.650 for Perl are vulnerable to code injection via caller-influenced Profile. When a string is assigned to a DBI handle's Profile attribute, DBI splits it into path, package and arguments, and interpolates the package part in a string eval with no validation of the package...

UBUNTU-CVE-2026-14380

DBI versions before 1.650 for Perl are vulnerable to code injection via caller-influenced Profile. When a string is assigned to a DBI handle's Profile attribute, DBI splits it into path, package and arguments, and interpolates the package part in a string eval with no validation of the package...

CVE-2026-57573

creationtimestamp| type| source ---|---|--- 2026-07-07 23:06:24+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mq3psdc4xv2j 2026-07-12 23:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqidttb4wg2f...

CVE-2026-14380 DBI versions before 1.650 for Perl are vulnerable to code injection via caller-influenced Profile

DBI versions before 1.650 for Perl are vulnerable to code injection via caller-influenced Profile. When a string is assigned to a DBI handle's Profile attribute, DBI splits it into path, package and arguments, and interpolates the package part in a string eval with no validation of the package...

EUVD-2026-42123

DBI versions before 1.650 for Perl are vulnerable to code injection via caller-influenced Profile. When a string is assigned to a DBI handle's Profile attribute, DBI splits it into path, package and arguments, and interpolates the package part in a string eval with no validation of the package...

CVE-2026-14380 DBI versions before 1.650 for Perl are vulnerable to code injection via caller-influenced Profile

DBI versions before 1.650 for Perl are vulnerable to code injection via caller-influenced Profile. When a string is assigned to a DBI handle's Profile attribute, DBI splits it into path, package and arguments, and interpolates the package part in a string eval with no validation of the package...

CVE-2026-14380

DBI versions before 1.650 for Perl are vulnerable to code injection via caller-influenced Profile. When a string is assigned to a DBI handle's Profile attribute, DBI splits it into path, package and arguments, and interpolates the package part in a string eval with no validation of the package...

CVE-2026-14380

DBI versions before 1.650 for Perl are vulnerable to code injection via caller-influenced Profile. When a string is assigned to a DBI handle's Profile attribute, DBI splits it into path, package and arguments, and interpolates the package part in a string eval with no validation of the package...

CVE-2026-14380

CVE-2026-14380 affects DBI for Perl when using versions before 1.650. A string assigned to the Profile attribute of a DBI handle is split into path, package and arguments, and the package name is interpolated in an unvalidated string eval, allowing arbitrary Perl code execution if untrusted data ...

CVE-2026-14380 DBI versions before 1.650 for Perl are vulnerable to code injection via caller-influenced Profile

DBI versions before 1.650 for Perl are vulnerable to code injection via caller-influenced Profile. When a string is assigned to a DBI handle's Profile attribute, DBI splits it into path, package and arguments, and interpolates the package part in a string eval with no validation of the package...

CVE-2026-14380

DBI versions before 1.650 for Perl are vulnerable to code injection via caller-influenced Profile. When a string is assigned to a DBI handle's Profile attribute, DBI splits it into path, package and arguments, and interpolates the package part in a string eval with no validation of the package...

CVE-2026-59707

creationtimestamp| type| source ---|---|--- 2026-07-07 21:52:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq3lnhc45a2b 2026-07-07 23:45:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3rytpkdd26 2026-07-11 00:07:41+00:00| seen|...

CVE-2026-48955

creationtimestamp| type| source ---|---|--- 2026-07-07 21:30:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3kgwhhbm2k 2026-07-08 14:15:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mq5claiknt2n...

CVE-2026-55417

Chevereto is a self-hosted media-sharing platform. Starting in version 3.7.5 and prior to version 4.5.4, when a user enables the private profile option, visiting their profile HTML route /username correctly returns 404. However, the /json AJAX listing endpoint does not apply the same check. An...

GHSA-F75J-4CW6-RMX4

creationtimestamp| type| source ---|---|--- 2026-07-07 20:58:05+00:00| seen| https://bsky.app/profile/poxek.bsky.social/post/3mq3imnlegs2x 2026-07-07 20:58:06+00:00| seen| https://bsky.app/profile/poxek.bsky.social/post/3mq3imnljd22x 2026-07-07 20:58:07+00:00| seen|...

CVE-2026-53155

creationtimestamp| type| source ---|---|--- 2026-07-07 20:48:05+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mq3i2xvrhz2n...

CVE-2026-48954

creationtimestamp| type| source ---|---|--- 2026-07-07 20:41:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3hozajsz2w 2026-07-08 14:15:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mq5claiknt2n...

CVE-2020-28734

creationtimestamp| type| source ---|---|--- 2026-07-07 20:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mq3hhejvq42k...

CVE-2021-25150

creationtimestamp| type| source ---|---|--- 2026-07-07 20:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mq3frplwgy22...

CVE-2026-55417

Chevereto is a self-hosted media-sharing platform. Starting in version 3.7.5 and prior to version 4.5.4, when a user enables the private profile option, visiting their profile HTML route /username correctly returns 404. However, the /json AJAX listing endpoint does not apply the same check. An...