Lucene search
+L

33 matches found

OpenVAS
OpenVAS
•added 2017/11/23 12:00 a.m.•40 views

Fedora Update for perl-Catalyst-Plugin-Static-Simple FEDORA-2017-184d078d87

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.6AI score0.02434EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2017/11/23 12:00 a.m.•100 views

Fedora Update for perl-Catalyst-Plugin-Static-Simple FEDORA-2017-5cb8354008

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.6AI score0.02434EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2017/11/16 12:00 a.m.•28 views

Fedora 26 : perl-Catalyst-Plugin-Static-Simple (2017-5cb8354008)

Security fix for CVE-2017-16248. Catalyst::Plugin::Static::Simple has been changed to not serve static files with dots in the names i.e. .svn, .git, ... Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has...

7.5CVSS7.1AI score0.02434EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2017/11/16 12:00 a.m.•31 views

Fedora 25 : perl-Catalyst-Plugin-Static-Simple (2017-184d078d87)

Security fix for CVE-2017-16248. Catalyst::Plugin::Static::Simple has been changed to not serve static files with dots in the names i.e. .svn, .git, ... Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has...

7.5CVSS7.1AI score0.02434EPSS
SaveExploits0References2
Fedora
Fedora
•added 2017/11/15 10:30 p.m.•47 views

[SECURITY] Fedora 25 Update: perl-Catalyst-Plugin-Static-Simple-0.34-1.fc25

The Static::Simple plugin is designed to make serving static content in your application during development quick and easy, without requiring a single line of code from you...

7.5CVSS2.6AI score0.02434EPSS
SaveExploits0
NVD
NVD
•added 2017/11/01 1:29 a.m.•15 views

CVE-2017-16248

The Catalyst-Plugin-Static-Simple module before 0.34 for Perl allows remote attackers to read arbitrary files if there is a '.' character anywhere in the pathname, which differs from the intended policy of allowing access only when the filename itself has a '.' character...

7.5CVSS7.5AI score0.02434EPSS
SaveExploits0References3
OSV
OSV
•added 2017/11/01 1:29 a.m.•10 views

CVE-2017-16248

The Catalyst-Plugin-Static-Simple module before 0.34 for Perl allows remote attackers to read arbitrary files if there is a '.' character anywhere in the pathname, which differs from the intended policy of allowing access only when the filename itself has a '.' character...

7.5CVSS7.5AI score
SaveExploits0References3
OSV
OSV
•added 2017/11/01 1:29 a.m.•15 views

UBUNTU-CVE-2017-16248

The Catalyst-Plugin-Static-Simple module before 0.34 for Perl allows remote attackers to read arbitrary files if there is a '.' character anywhere in the pathname, which differs from the intended policy of allowing access only when the filename itself has a '.' character...

7.5CVSS6AI score0.02434EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2017/11/01 1:29 a.m.•25 views

CVE-2017-16248

The Catalyst-Plugin-Static-Simple module before 0.34 for Perl allows remote attackers to read arbitrary files if there is a '.' character anywhere in the pathname, which differs from the intended policy of allowing access only when the filename itself has a '.' character...

7.5CVSS7.2AI score0.02434EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2017/11/01 1:00 a.m.•27 views

CVE-2017-16248

The Catalyst-Plugin-Static-Simple module before 0.34 for Perl allows remote attackers to read arbitrary files if there is a '.' character anywhere in the pathname, which differs from the intended policy of allowing access only when the filename itself has a '.' character...

7.4AI score0.02434EPSS
SaveExploits0References3
CVE
CVE
•added 2017/11/01 1:00 a.m.•66 views

CVE-2017-16248

The CVE-2017-16248 entry concerns the Perl Catalyst-Plugin-Static-Simple module prior to version 0.34. The vulnerability allows remote attackers to read arbitrary files when there is a '.' character anywhere in the pathname, contradicting the policy that access should be allowed only if the filen...

7.5CVSS7.3AI score0.02434EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/11/01 12:00 a.m.•1 views

CVE-2017-16248: Exposure of Sensitive Information to an Unauthorized Actor

The Catalyst-Plugin-Static-Simple module before 0.34 for Perl allows remote attackers to read arbitrary files if there is a '.' character anywhere in the pathname, which differs from the intended policy of allowing access only when the filename itself has a '.' character...

7.5CVSS7.3AI score0.02434EPSS
SaveExploits0References2
CNVD
CNVD
•added 2017/11/01 12:00 a.m.•19 views

Catalyst-Plugin-Static-Simple Arbitrary File Read Vulnerability

Perl is an American programmer Larry Wall Larry Wall developed a cross-platform programming language. Catalyst-Plugin-Static-Simple module is one of the static content rapid development module. A security vulnerability exists in versions of the Perl Catalyst-Plugin-Static-Simple module prior to...

7.5CVSS6.9AI score0.02434EPSS
SaveExploits0References1
Rows per page
Query Builder