875148 matches found
CGA-HC8W-66JX-WHG4
Bulletin has no description...
CVE-2026-116130 HTTP::Parser::XS versions before 0.18 for Perl truncate PATH_INFO at an encoded NUL byte in parse_http_request
HTTP::Parser::XS versions before 0.18 for Perl truncate PATHINFO at an encoded NUL byte in parsehttprequest. The XS parser URL-decodes the request path and measures the result with strlen, so PATHINFO ends at the first byte decoded from %00. The pure-Perl backend is not affected. A remote attacke...
EUVD-2026-113904
HTTP::Parser::XS versions before 0.18 for Perl truncate PATHINFO at an encoded NUL byte in parsehttprequest. The XS parser URL-decodes the request path and measures the result with strlen, so PATHINFO ends at the first byte decoded from %00. The pure-Perl backend is not affected. A remote attacke...
CVE-2026-116130
The HTTP::Parser::XS module for Perl, in versions before 0.18 , is vulnerable to a Null Byte Interaction Error (CWE-626) . The XS parser URL-decodes the request path and uses strlen() to measure the result, causing PATH_INFO to be truncated at the first byte decoded from %00 . This issue specific...
CVE-2026-116130 HTTP::Parser::XS versions before 0.18 for Perl truncate PATH_INFO at an encoded NUL byte in parse_http_request
HTTP::Parser::XS versions before 0.18 for Perl truncate PATHINFO at an encoded NUL byte in parsehttprequest. The XS parser URL-decodes the request path and measures the result with strlen, so PATHINFO ends at the first byte decoded from %00. The pure-Perl backend is not affected. A remote attacke...
CVE-2026-116130
HTTP::Parser::XS versions before 0.18 for Perl truncate PATHINFO at an encoded NUL byte in parsehttprequest. The XS parser URL-decodes the request path and measures the result with strlen, so PATHINFO ends at the first byte decoded from %00. The pure-Perl backend is not affected. A remote attacke...
CGA-7FWG-XV77-5WPC
Bulletin has no description...
CVE-2026-118988 CallBackery versions before 0.60.1 for Perl let unauthenticated clients read the POD of any file via path traversal in the /doc route
CallBackery versions before 0.60.1 for Perl let unauthenticated clients read the POD of any file via path traversal in the /doc route. Every CallBackery application mounts its documentation plugin at /doc, ahead of any session check. The route passes the requested name to Pod::Simple::Search-find...
EUVD-2026-113903
CallBackery versions before 0.60.1 for Perl let unauthenticated clients read the POD of any file via path traversal in the /doc route. Every CallBackery application mounts its documentation plugin at /doc, ahead of any session check. The route passes the requested name to Pod::Simple::Search-find...
CVE-2026-118988 CallBackery versions before 0.60.1 for Perl let unauthenticated clients read the POD of any file via path traversal in the /doc route
CallBackery versions before 0.60.1 for Perl let unauthenticated clients read the POD of any file via path traversal in the /doc route. Every CallBackery application mounts its documentation plugin at /doc, ahead of any session check. The route passes the requested name to Pod::Simple::Search-find...
CVE-2026-118988
CallBackery versions before 0.60.1 for Perl let unauthenticated clients read the POD of any file via path traversal in the /doc route. Every CallBackery application mounts its documentation plugin at /doc, ahead of any session check. The route passes the requested name to Pod::Simple::Search-find...
CVE-2026-118988
CallBackery versions prior to 0.60.1 for Perl are vulnerable to a path traversal vulnerability in the /doc route. The application passes unvalidated input to Pod::Simple::Search->find, which improperly joins parts into a file path. This allows unauthenticated clients to read the POD content of...
CGA-2VPF-3H75-H75V
Bulletin has no description...
CGA-5GJ6-2WC8-G497
Bulletin has no description...
CGA-825G-2MW6-XWJR
Bulletin has no description...
CGA-25M6-C5CG-HHVV
Bulletin has no description...
CGA-MHX7-FX5W-C393
Bulletin has no description...
CGA-5V6M-F49W-5G5F
Bulletin has no description...