Lucene search
+L

14 matches found

RedhatCVE
RedhatCVE
•added 2026/10/06 8:06 a.m.•13 views

CVE-2026-19954

A flaw was found in perl-net-whois-raw. The pwhois command-line tool skips standard Internationalizing Domain Names in Applications IDNA mapping and normalization steps when processing internationalized domain names. By supplying domain names containing specific Unicode characters, an attacker ca...

5.8AI score0.00216EPSS
SaveExploits0References2
OSV
OSV
•added 2026/10/06 12:00 a.m.•9 views

OPENSUSE-SU-2026:12066-1 perl-Net-Whois-Raw-2.99044-1.1 on GA media

These are all security issues fixed in the perl-Net-Whois-Raw-2.99044-1.1 package on the GA media of openSUSE Tumbleweed...

5.9AI score0.00216EPSS
SaveExploits0References1
OSV
OSV
•added 2026/10/05 7:16 a.m.•7 views

DEBIAN-CVE-2026-19954

Net::Whois::Raw versions before 2.99044 for Perl ship a pwhois command-line tool that queries WHOIS for the wrong domain for unicode domain names. pwhois encodes each non-ASCII label directly using Net::IDN::Punycode and prepends xn--. Apart from lowercasing ASCII and Cyrillic letters, it skips t...

5.4CVSS5.8AI score0.00216EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/05 7:16 a.m.•13 views

CVE-2026-19954

Net::Whois::Raw versions before 2.99044 for Perl ship a pwhois command-line tool that queries WHOIS for the wrong domain for unicode domain names. pwhois encodes each non-ASCII label directly using Net::IDN::Punycode and prepends xn--. Apart from lowercasing ASCII and Cyrillic letters, it skips t...

5.4CVSS0.00216EPSS
SaveExploits0References7
OSV
OSV
•added 2026/10/05 7:16 a.m.•9 views

UBUNTU-CVE-2026-19954

Net::Whois::Raw versions before 2.99044 for Perl ship a pwhois command-line tool that queries WHOIS for the wrong domain for unicode domain names. pwhois encodes each non-ASCII label directly using Net::IDN::Punycode and prepends xn--. Apart from lowercasing ASCII and Cyrillic letters, it skips t...

5.4CVSS5.8AI score0.00216EPSS
SaveExploits0References2
CVE
CVE
•added 2026/10/05 6:54 a.m.•15 views

CVE-2026-19954

The Net::Whois::Raw library for Perl (versions before 2.99044 ) contains a flaw in its pwhois command-line tool. The tool fails to correctly query WHOIS for unicode domain names because it skips essential IDNA mapping and normalization steps, directly using Net::IDN::Punycode . This results in in...

5.8AI score0.00216EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2026/10/05 6:54 a.m.•47 views

CVE-2026-19954 Net::Whois::Raw versions before 2.99044 for Perl ship a pwhois command-line tool that queries WHOIS for the wrong domain for unicode domain names

Net::Whois::Raw versions before 2.99044 for Perl ship a pwhois command-line tool that queries WHOIS for the wrong domain for unicode domain names. pwhois encodes each non-ASCII label directly using Net::IDN::Punycode and prepends xn--. Apart from lowercasing ASCII and Cyrillic letters, it skips t...

0.00216EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/10/05 6:54 a.m.•15 views

EUVD-2026-92267

Net::Whois::Raw versions before 2.99044 for Perl ship a pwhois command-line tool that queries WHOIS for the wrong domain for unicode domain names. pwhois encodes each non-ASCII label directly using Net::IDN::Punycode and prepends xn--. Apart from lowercasing ASCII and Cyrillic letters, it skips t...

5.8AI score0.00216EPSS
SaveExploits0References6
Debian CVE
Debian CVE
•added 2026/10/05 6:54 a.m.•11 views

CVE-2026-19954

Net::Whois::Raw versions before 2.99044 for Perl ship a pwhois command-line tool that queries WHOIS for the wrong domain for unicode domain names. pwhois encodes each non-ASCII label directly using Net::IDN::Punycode and prepends xn--. Apart from lowercasing ASCII and Cyrillic letters, it skips t...

5.8AI score0.00216EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/05 12:00 a.m.•9 views

CVE-2026-19954: Improper Handling of Unicode Encoding

Net::Whois::Raw versions before 2.99044 for Perl ship a pwhois command-line tool that queries WHOIS for the wrong domain for unicode domain names. pwhois encodes each non-ASCII label directly using Net::IDN::Punycode and prepends xn--. Apart from lowercasing ASCII and Cyrillic letters, it skips t...

5.4CVSS5.8AI score0.00216EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/10/05 12:00 a.m.•11 views

CVE-2026-19954

Net::Whois::Raw versions before 2.99044 for Perl ship a pwhois command-line tool that queries WHOIS for the wrong domain for unicode domain names. pwhois encodes each non-ASCII label directly using Net::IDN::Punycode and prepends xn--. Apart from lowercasing ASCII and Cyrillic letters, it skips t...

5.8AI score0.00216EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/10/05 12:00 a.m.•11 views

PT-2026-104738

Name of the Vulnerable Software and Affected Versions Net::Whois::Raw versions prior to 2.99044 Description The pwhois command-line tool queries the incorrect domain when processing Unicode domain names. This occurs because the tool encodes non-ASCII labels using Net::IDN::Punycode and prepends...

5.4CVSS5.8AI score0.00216EPSS
SaveExploits0References11
Tenable Nessus
Tenable Nessus
•added 2026/10/05 12:00 a.m.•6 views

Linux Distros Unpatched Vulnerability : CVE-2026-19954

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Net::Whois::Raw versions before 2.99044 for Perl ship a pwhois command-line tool that queries WHOIS for the wrong domain for unicode domain names. pwhois encode...

5.8AI score0.00216EPSS
SaveExploits0References3
OSV
OSV
•added 2022/12/04 3:15 a.m.•10 views

DEBIAN-CVE-2022-46391

AWStats 7.x through 7.8 allows XSS in the hostinfo plugin due to printing a response from Net::XWhois without proper checks...

6.1CVSS6.8AI score0.00711EPSS
SaveExploits0References1
Rows per page
Query Builder