Lucene search
+L

34 matches found

Mageia
Mageia
•added 2017/12/01 11:13 p.m.•56 views

Updated perl-Catalyst-Plugin-Static-Simple package fixes security vulnerability

The Catalyst-Plugin-Static-Simple module before 0.34 for Perl allows remote attackers to read arbitrary files if there is a '.' character anywhere in the pathname, which differs from the intended policy of allowing access only when the filename itself has a '.' character CVE-2017-16248...

7.5CVSS6.2AI score0.02434EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2017/11/23 12:00 a.m.•40 views

Fedora Update for perl-Catalyst-Plugin-Static-Simple FEDORA-2017-184d078d87

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.6AI score0.02434EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2017/11/23 12:00 a.m.•100 views

Fedora Update for perl-Catalyst-Plugin-Static-Simple FEDORA-2017-5cb8354008

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.6AI score0.02434EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2017/11/16 12:00 a.m.•29 views

Fedora 26 : perl-Catalyst-Plugin-Static-Simple (2017-5cb8354008)

Security fix for CVE-2017-16248. Catalyst::Plugin::Static::Simple has been changed to not serve static files with dots in the names i.e. .svn, .git, ... Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has...

7.5CVSS7.1AI score0.02434EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2017/11/16 12:00 a.m.•31 views

Fedora 25 : perl-Catalyst-Plugin-Static-Simple (2017-184d078d87)

Security fix for CVE-2017-16248. Catalyst::Plugin::Static::Simple has been changed to not serve static files with dots in the names i.e. .svn, .git, ... Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has...

7.5CVSS7.1AI score0.02434EPSS
SaveExploits0References2
OSV
OSV
•added 2017/11/01 1:29 a.m.•10 views

CVE-2017-16248

The Catalyst-Plugin-Static-Simple module before 0.34 for Perl allows remote attackers to read arbitrary files if there is a '.' character anywhere in the pathname, which differs from the intended policy of allowing access only when the filename itself has a '.' character...

7.5CVSS7.5AI score
SaveExploits0References3
NVD
NVD
•added 2017/11/01 1:29 a.m.•15 views

CVE-2017-16248

The Catalyst-Plugin-Static-Simple module before 0.34 for Perl allows remote attackers to read arbitrary files if there is a '.' character anywhere in the pathname, which differs from the intended policy of allowing access only when the filename itself has a '.' character...

7.5CVSS7.5AI score0.02434EPSS
SaveExploits0References3
OSV
OSV
•added 2017/11/01 1:29 a.m.•12 views

DEBIAN-CVE-2017-16248

The Catalyst-Plugin-Static-Simple module before 0.34 for Perl allows remote attackers to read arbitrary files if there is a '.' character anywhere in the pathname, which differs from the intended policy of allowing access only when the filename itself has a '.' character...

7.5CVSS6.9AI score0.02434EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2017/11/01 1:29 a.m.•25 views

CVE-2017-16248

The Catalyst-Plugin-Static-Simple module before 0.34 for Perl allows remote attackers to read arbitrary files if there is a '.' character anywhere in the pathname, which differs from the intended policy of allowing access only when the filename itself has a '.' character...

7.5CVSS7.2AI score0.02434EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2017/11/01 1:00 a.m.•27 views

CVE-2017-16248

The Catalyst-Plugin-Static-Simple module before 0.34 for Perl allows remote attackers to read arbitrary files if there is a '.' character anywhere in the pathname, which differs from the intended policy of allowing access only when the filename itself has a '.' character...

7.4AI score0.02434EPSS
SaveExploits0References3
CVE
CVE
•added 2017/11/01 1:00 a.m.•66 views

CVE-2017-16248

The CVE-2017-16248 entry concerns the Perl Catalyst-Plugin-Static-Simple module prior to version 0.34. The vulnerability allows remote attackers to read arbitrary files when there is a '.' character anywhere in the pathname, contradicting the policy that access should be allowed only if the filen...

7.5CVSS7.3AI score0.02434EPSS
SaveExploits0References3Affected Software1
Mend
Mend
•added 2017/11/01 1:00 a.m.•2 views

CVE-2017-16248

The Catalyst-Plugin-Static-Simple module before 0.34 for Perl allows remote attackers to read arbitrary files if there is a '.' character anywhere in the pathname, which differs from the intended policy of allowing access only when the filename itself has a '.' character...

8.7CVSS0.02434EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/11/01 12:00 a.m.•2 views

CVE-2017-16248: Exposure of Sensitive Information to an Unauthorized Actor

The Catalyst-Plugin-Static-Simple module before 0.34 for Perl allows remote attackers to read arbitrary files if there is a '.' character anywhere in the pathname, which differs from the intended policy of allowing access only when the filename itself has a '.' character...

7.5CVSS7.3AI score0.02434EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2017/11/01 12:00 a.m.•3 views

PT-2017-14364

Name of the Vulnerable Software and Affected Versions Catalyst-Plugin-Static-Simple versions prior to 0.34 Description The issue allows remote attackers to read arbitrary files if there is a '.' character anywhere in the pathname. This differs from the intended policy of allowing access only when...

7.5CVSS0.02434EPSS
SaveExploits0References14
Rows per page
Query Builder