Lucene search
+L

113 matches found

Tenable Nessus
Tenable Nessus
added 2015/01/19 12:00 a.m.27 views

Oracle Solaris Third-Party Patch Update : perl-58 (cve_2012_6329_code_injection1)

The remote Solaris system is missing necessary patches to address security updates : - The compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7 does not properly handle backslashes and fully qualified method names during compilation of bracket notation, whi...

7.5CVSS8.4AI score0.63488EPSS
SaveExploits13References3
Tenable Nessus
Tenable Nessus
added 2015/01/19 12:00 a.m.46 views

Oracle Solaris Third-Party Patch Update : perl-512 (cve_2012_5195_heap_buffer)

The remote Solaris system is missing necessary patches to address security updates : - Heap-based buffer overflow in the Perlrepeatcpy function in util.c in Perl 5.12.x before 5.12.5, 5.14.x before 5.14.3, and 5.15.x before 15.15.5 allows context-dependent attackers to cause a denial of service...

7.5CVSS8.4AI score0.63488EPSS
SaveExploits14References7
Tenable Nessus
Tenable Nessus
added 2014/10/13 12:00 a.m.43 views

GLSA-201410-02 : Perl, Perl Locale-Maketext module: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201410-02 Perl, Perl Locale-Maketext module: Multiple vulnerabilities Two vulnerabilities have been reported in the Locale-Maketext module for Perl, which can be exploited by malicious users to compromise an application using the...

7.5CVSS8.7AI score0.63488EPSS
SaveExploits13References2
Gentoo Linux
Gentoo Linux
added 2014/10/12 12:00 a.m.36 views

Perl, Perl Locale-Maketext module: Multiple vulnerabilities

Background Locale-Maketext - Perl framework for localization Description Two vulnerabilities have been reported in the Locale-Maketext module for Perl, which can be exploited by malicious users to compromise an application using the module. The vulnerabilities are caused due to the “compile”...

7.5CVSS10AI score0.63488EPSS
SaveExploits13
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.53 views

Foswiki MAKETEXT Remote Command Execution

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...

5CVSS0.3AI score0.35701EPSS
SaveExploits7
OpenVAS
OpenVAS
added 2014/02/11 12:00 a.m.21 views

Ubuntu: Security Advisory (USN-2099-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS9.6AI score0.63488EPSS
SaveExploits13References2
OpenVAS
OpenVAS
added 2014/02/11 12:00 a.m.38 views

Ubuntu Update for perl USN-2099-1

Check for the Version of perl OpenVAS Vulnerability Test $Id: gbubuntuUSN20991.nasl 7957 2017-12-01 06:40:08Z santu $ Ubuntu Update for perl USN-2099-1 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you...

7.5CVSS9.7AI score0.63488EPSS
SaveExploits13References2
securityvulns
securityvulns
added 2014/02/10 12:00 a.m.105 views

[USN-2099-1] Perl vulnerability

========================================================================== Ubuntu Security Notice USN-2099-1 February 05, 2014 perl vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

7.5CVSS0.2AI score0.63488EPSS
SaveExploits13
securityvulns
securityvulns
added 2014/02/10 12:00 a.m.61 views

perl Locale::Maketext code execution

It's possible to call external functions on template compilation...

7.5CVSS2.5AI score0.63488EPSS
SaveExploits13References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2014/02/06 12:00 a.m.57 views

Ubuntu 10.04 LTS / 12.04 LTS / 12.10 : perl vulnerability (USN-2099-1)

It was discovered that Perl's Locale::Maketext module incorrectly handled backslashes and fully qualified method names. An attacker could possibly use this flaw to execute arbitrary code when an application used untrusted templates. Note that Tenable Network Security has extracted the preceding...

7.5CVSS8.7AI score0.63488EPSS
SaveExploits13References2
Ubuntu
Ubuntu
added 2014/02/05 6:38 p.m.57 views

USN-2099-1: Perl vulnerability

It was discovered that Perl's Locale::Maketext module incorrectly handled backslashes and fully qualified method names. An attacker could possibly use this flaw to execute arbitrary code when an application used untrusted templates...

7.5CVSS8.8AI score0.63488EPSS
SaveExploits13
Tenable Nessus
Tenable Nessus
added 2014/01/20 12:00 a.m.37 views

GLSA-201401-11 : Perl, Locale Maketext Perl module: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201401-11 Perl, Locale Maketext Perl module: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Perl and Locale::Maketext Perl module. Please review the CVE identifiers referenced below for details. Impact :...

7.5CVSS8.3AI score0.04877EPSS
SaveExploits3References5
Gentoo Linux
Gentoo Linux
added 2014/01/19 12:00 a.m.45 views

Perl, Locale Maketext Perl module: Multiple vulnerabilities

Background Perl is Larry Wall’s Practical Extraction and Report Language. Locale::Maketext is a Perl module - framework for localization. Description Multiple vulnerabilities have been discovered in Perl and Locale::Maketext Perl module. Please review the CVE identifiers referenced below for...

7.5CVSS9.2AI score0.04877EPSS
SaveExploits3
Tenable Nessus
Tenable Nessus
added 2013/09/04 12:00 a.m.41 views

Amazon Linux AMI : perl (ALAS-2013-177)

A heap overflow flaw was found in Perl. If a Perl application allowed user input to control the count argument of the string repeat operator, an attacker could cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application...

7.5CVSS8AI score0.63488EPSS
SaveExploits14References5
Tenable Nessus
Tenable Nessus
added 2013/07/12 12:00 a.m.44 views

Oracle Linux 5 / 6 : perl (ELSA-2013-0685)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0685 advisory. - Resolves: 915692 - CVE-2012-5526 newline injection due to improper CRLF escaping in Set-Cookie and P3P headers - Resolves: 915692 - CVE-2012-6329...

7.5CVSS8.6AI score0.63488EPSS
SaveExploits14References5
Check Point Advisories
Check Point Advisories
added 2013/06/09 12:00 a.m.6 views

TWiki MAKETEXT Remote Command Execution (CVE-2012-6329)

The vulnerability is due to lack of input sanitization in the affected function. A remote attacker can exploit this issue by sending a specially crafted input to the application. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands...

7.5CVSS9.2AI score0.63488EPSS
SaveExploits13
Amazon
Amazon
added 2013/04/04 12:00 a.m.61 views

Medium: perl

Issue Overview: A heap overflow flaw was found in Perl. If a Perl application allowed user input to control the count argument of the string repeat operator, an attacker could cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the...

7.5CVSS9.6AI score0.63488EPSS
SaveExploits14References1
OpenVAS
OpenVAS
added 2013/03/28 12:00 a.m.43 views

RedHat Update for perl RHSA-2013:0685-01

Check for the Version of perl OpenVAS Vulnerability Test RedHat Update for perl RHSA-2013:0685-01 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

7.5CVSS9AI score0.63488EPSS
SaveExploits14References2
OpenVAS
OpenVAS
added 2013/03/28 12:00 a.m.39 views

CentOS Update for perl CESA-2013:0685 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scripttagname:"affected", value:"per...

7.5CVSS8.3AI score0.63488EPSS
SaveExploits14References2
OpenVAS
OpenVAS
added 2013/03/28 12:00 a.m.34 views

CentOS Update for perl CESA-2013:0685 centos5

Check for the Version of perl OpenVAS Vulnerability Test CentOS Update for perl CESA-2013:0685 centos5 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

7.5CVSS0.63488EPSS
SaveExploits14References2
Rows per page
Query Builder