3565 matches found
Security feature bypass
CPAN 2.28 allows Signature Verification Bypass...
CVE-2020-16156
CPAN 2.28 allows Signature Verification Bypass...
CVE-2020-16154
The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass...
DEBIAN-CVE-2020-16154
The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass...
CVE-2020-16154
The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass...
CVE-2020-16154
The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass...
CVE-2020-16154
The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass...
Security feature bypass
The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass...
CVE-2020-16156
CPAN 2.28 allows Signature Verification Bypass...
CVE-2020-16156
CVE-2020-16156 affects CPAN/CPAN.pm (notably CPAN 2.28 and its signature verification handling). The root cause is a bypass where an attacker can prepend or manipulate CHECKSUMS to bypass signature verification, enabling installation of tampered modules. Public documents confirm that the issue is...
CVE-2020-16156
CPAN 2.28 allows Signature Verification Bypass...
CVE-2020-16154
The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass...
CVE-2020-16154
CVE-2020-16154 affects the Perl module perl-App-cpanminus, reported as version 1.7044. The issue is a bypass of signature verification for CHECKSUMS files, enabling potential integrity concerns. Public advisories (e.g., ALAS-2025-2802) instruct updating perl-App-cpanminus (e.g., via yum update) t...
CVE-2020-16154
The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass...
CVE-2020-16154
The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass...
cpanminus 安全漏洞
cpanminus is a script that obtains, unpacks, builds and installs modules from CPAN and does not perform any other operations. cpanminus suffers from a signature verification vulnerability that stems from packages not uniquely defining signature data. No detailed vulnerability details are currentl...
cpanminus 数据伪造问题漏洞
cpanminus is a script that is used to obtain, decompress, build and install modules from CPAN without performing any other operations. cpanminus is vulnerable to a data forgery issue, which can be exploited by attackers to bypass signature verification...
PT-2021-9866 · Unknown +4 · App::Cpanminus +4
Name of the Vulnerable Software and Affected Versions: App::cpanminus version 1.7044 Description: The issue allows Signature Verification Bypass. Recommendations: For version 1.7044, update to a version that fixes the Signature Verification Bypass issue...
CVE-2021-36173
A heap-based buffer overflow in the firmware signature verification function of FortiOS versions 7.0.1, 7.0.0, 6.4.0 through 6.4.6, 6.2.0 through 6.2.9, and 6.0.0 through 6.0.13 may allow an attacker to execute arbitrary code via specially crafted installation images...
Heap overflow
A heap-based buffer overflow in the firmware signature verification function of FortiOS versions 7.0.1, 7.0.0, 6.4.0 through 6.4.6, 6.2.0 through 6.2.9, and 6.0.0 through 6.0.13 may allow an attacker to execute arbitrary code via specially crafted installation images...