CVE-2026-78497

JQ::Lite versions before 2.51 for Perl execute Perl code embedded in a query's regular expression by compiling it with string eval. The pattern given to test, match, or the match and = conditions of select is placed in a qr'...' literal and compiled as source text, so a ? ... code block in it run...

EUVD-2026-103450

JQ::Lite versions before 2.51 for Perl execute Perl code embedded in a query's regular expression by compiling it with string eval. The pattern given to test, match, or the match and = conditions of select is placed in a qr'...' literal and compiled as source text, so a ? ... code block in it run...

CVE-2026-78497

JQ::Lite versions before 2.51 for Perl execute Perl code embedded in a query's regular expression by compiling it with string eval. The pattern given to test, match, or the match and = conditions of select is placed in a "qr'...'" literal and compiled as source text, so a "? ... " code block in i...

CVE-2026-78497: Improper Neutralization of Directives in Dynamically Evaluated Code

JQ::Lite versions before 2.51 for Perl execute Perl code embedded in a query's regular expression by compiling it with string eval. The pattern given to test, match, or the match and = conditions of select is placed in a qr'...' literal and compiled as source text, so a ? ... code block in it run...

PT-2026-116626

JQ::Lite versions before 2.51 for Perl execute Perl code embedded in a query's regular expression by compiling it with string eval. The pattern given to test, match, or the match and = conditions of select is placed in a qr'...' literal and compiled as source text, so a ? ... code block in it run...

AlmaLinux 9.6 [TuxCare] Security Update: perl-DBI Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1786121082)

The AlmaLinux 9.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1786121082 advisory. - DBI versions before 1.650 for Perl are vulnerable to code injection via caller-influenced Profile. When a string is assigned to a...

CLSA-2026-1782898054 perl-IO-Compress: Fix of CVE-2026-48962

CVE-2026-48962: fix eval injection in File::GlobMapper allowing arbitrary Perl code execution via an attacker-controlled output glob...

CVE-2026-29202: Improper Control of Generation of Code

Insufficient input validation of the plugin parameter of the createuser plugin allows arbitrary Perl code execution on behalf of the already authenticated account's system user...

RHEL 6 / 7 : rh-perl524-mod_perl (RHSA-2018:2826)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:2826 advisory. - modperl: arbitrary Perl code execution in the context of the user account via a user-owned .htaccess CVE-2011-2767 Note that Nessus has not...

Fedora 29 : mod_perl (2018-f6a5b71464)

This release fixes CVE-2011-2767 vulnerability an arbitrary Perl code execution in the context of the httpd server by disabling sections in non-server-level configuration. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system...

Fedora 28 : mod_perl (2018-0ddef94854)

This release fixes CVE-2011-2767 vulnerability an arbitrary Perl code execution in the context of the httpd server by disabling sections in non-server-level configuration. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system...

CVE-2011-2767

modperl 2.0 through 2.0.10 allows attackers to execute arbitrary Perl code by placing it in a user-owned .htaccess file, because contrary to the documentation there is no configuration option that permits Perl code for the administrator's control of HTTP request processing without also permitting...

PT-2018-2725

Name of the Vulnerable Software and Affected Versions mod perl versions 2.0 through 2.0.10 Description The issue allows attackers to execute arbitrary Perl code by placing it in a user-owned .htaccess file. This is possible because there is no configuration option that permits Perl code for the...

PT-2020-7351

Name of the Vulnerable Software and Affected Versions: Module-Metadata versions prior to 1.000015 Description: The issue allows remote attackers to execute arbitrary Perl code via the $Version value. This is an eval injection vulnerability in the Module-Metadata module for Perl. Recommendations:...

PT-2013-3912

Name of the Vulnerable Software and Affected Versions ReadyNAS RAIDiator versions prior to 4.1.12 ReadyNAS RAIDiator versions 4.2.x prior to 4.2.24 Description The issue is related to an eval injection vulnerability in the FrontView web interface, specifically in the frontview/lib/np handler.pl...

CVE-2013-0209: Improper Authentication

lib/MT/Upgrade.pm in mt-upgrade.cgi in Movable Type 4.2x and 4.3x through 4.38 does not require authentication for requests to database-migration functions, which allows remote attackers to conduct eval injection and SQL injection attacks via crafted parameters, as demonstrated by an eval injecti...

CVE-2012-2981: Improper Input Validation

Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary Perl code via a crafted file associated with the type aka monitor type name parameter...

PT-2012-4411

Name of the Vulnerable Software and Affected Versions Webmin versions 1.590 and earlier Description The issue allows remote authenticated users to execute arbitrary Perl code via a crafted file associated with the type parameter, also referred to as the monitor type name. Recommendations For Webm...

CVE-2006-4731: Undefined Security Weakness

Multiple directory traversal vulnerabilities in 1 login.pl and 2 admin.pl in a SQL-Ledger before 2.6.19 and b LedgerSMB before 1.0.0p1 allow remote attackers to execute arbitrary Perl code via an unspecified terminal parameter value containing ../ dot dot slash...

CVE-2005-2837: Improper Control of Generation of Code

Multiple eval injection vulnerabilities in PlainBlack Software WebGUI before 6.7.3 allow remote attackers to execute arbitrary Perl code via 1 Help.pm, 2 International.pm, or 3 WebGUI.pm...