CVE-2026-58174

Hermes WebUI before 0.51.521 validates the workspace of an imported session under the active named profile but constructs the Session object without setting its profile in the /api/session/import handler, so the imported session is persisted with a null profile. Because a null profile is treated ...

CVE-2026-58174 Hermes WebUI < 0.51.521 - Cross-Profile Authorization Bypass via Unset Session Profile on Import

Hermes WebUI before 0.51.521 validates the workspace of an imported session under the active named profile but constructs the Session object without setting its profile in the /api/session/import handler, so the imported session is persisted with a null profile. Because a null profile is treated ...

CVE-2026-58174 Hermes WebUI < 0.51.521 - Cross-Profile Authorization Bypass via Unset Session Profile on Import

Hermes WebUI before 0.51.521 validates the workspace of an imported session under the active named profile but constructs the Session object without setting its profile in the /api/session/import handler, so the imported session is persisted with a null profile. Because a null profile is treated ...

CVE-2026-58174

Hermes WebUI

CVE-2026-58174 Hermes WebUI < 0.51.521 - Cross-Profile Authorization Bypass via Unset Session Profile on Import

Hermes WebUI before 0.51.521 validates the workspace of an imported session under the active named profile but constructs the Session object without setting its profile in the /api/session/import handler, so the imported session is persisted with a null profile. Because a null profile is treated ...

EUVD-2026-40355

Hermes WebUI before 0.51.521 validates the workspace of an imported session under the active named profile but constructs the Session object without setting its profile in the /api/session/import handler, so the imported session is persisted with a null profile. Because a null profile is treated ...

PT-2026-53925

Name of the Vulnerable Software and Affected Versions Hermes WebUI versions prior to 0.51.521 Description An authorization bypass occurs during the session import process. The /api/session/import endpoint validates the workspace of an imported session under the active named profile but fails to s...

SUSE SLED15 / SLES15 Security Update : perl-DBI (SUSE-SU-2020:2828-1)

This update for perl-DBI fixes the following issues : CVE-2019-20919: Fixed a NULL profile dereference in dbiprofile bsc1176764. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean...

openSUSE Security Update : perl-DBI (openSUSE-2020-1620)

This update for perl-DBI fixes the following issues : - CVE-2019-20919: Fixed a NULL profile dereference in dbiprofile bsc1176764. This update was imported from the SUSE:SLE-15:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

openSUSE Security Update : perl-DBI (openSUSE-2020-1628)

This update for perl-DBI fixes the following issues : - CVE-2019-20919: Fixed a NULL profile dereference in dbiprofile bsc1176764. This update was imported from the SUSE:SLE-15-SP2:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

openSUSE: Security Advisory for perl-DBI (openSUSE-SU-2020:1628-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2020:1628-1 Security update for perl-DBI

This update for perl-DBI fixes the following issues: - CVE-2019-20919: Fixed a NULL profile dereference in dbiprofile bsc1176764. This update was imported from the SUSE:SLE-15-SP2:Update update project...

Security update for perl-DBI (important)

openSUSE Security Update: Security update for perl-DBI Announcement ID: openSUSE-SU-2020:1628-1 Rating: important References: 1176764 Cross-References: CVE-2019-20919 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for perl-D...

OPENSUSE-SU-2020:1620-1 Security update for perl-DBI

This update for perl-DBI fixes the following issues: - CVE-2019-20919: Fixed a NULL profile dereference in dbiprofile bsc1176764. This update was imported from the SUSE:SLE-15:Update update project...

SUSE-SU-2020:14510-1 Security update for perl-DBI

This update for perl-DBI fixes the following issues: - CVE-2019-20919: Fixed a NULL profile dereference in dbiprofile bsc1176764. - CVE-2013-7490: Fixed memory corruption when using many arguments to methods for CallbacksUsing bsc1176496. - CVE-2013-7491: Fixed a stack corruption when a...

SUSE-SU-2020:2856-1 Security update for perl-DBI

This update for perl-DBI fixes the following issues: - CVE-2019-20919: Fixed a NULL profile dereference in dbiprofile bsc1176764. - CVE-2013-7490: Fixed memory corruption when using many arguments to methods for CallbacksUsing bsc1176496...

SUSE-SU-2020:2828-1 Security update for perl-DBI

This update for perl-DBI fixes the following issues: - CVE-2019-20919: Fixed a NULL profile dereference in dbiprofile bsc1176764...

SUSE-SU-2020:2827-1 Security update for perl-DBI

This update for perl-DBI fixes the following issues: - CVE-2019-20919: Fixed a NULL profile dereference in dbiprofile bsc1176764...

Denial Of Service (DoS)

libdbi-perl is vulnerable to denial of service DoS. The vulnerability exists when a NULL profile is passed into SvOKprofile after hvfetch checks for NULL...