Fedora 46 : perl-CGI-Session (2026-f47e713a34)

The remote Fedora 46 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-f47e713a34 advisory. Automatic update for perl-CGI-Session-4.49-1.fc46. Changelog Tue Aug 18 2026 Jitka Plesnikova - 4.49-1 - 4.49 bump rhbz2510691 - Fix CVE-2026-56016 rhbz24958...

Fedora 45 : perl-CGI-Session (2026-65aea3d269)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-65aea3d269 advisory. Automatic update for perl-CGI-Session-4.49-1.fc45. Changelog Tue Aug 18 2026 Jitka Plesnikova - 4.49-1 - 4.49 bump rhbz2510691 - Fix CVE-2026-56016 rhbz24958...

Amazon Linux 2 : perl-CGI-Session, --advisory ALAS2-2026-3805 (ALAS-2026-3805)

The version of perl-CGI-Session installed on the remote host is prior to 4.35-16. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3805 advisory. CGI::Session::ID::md5 versions before 4.49 for Perl generate predictable session ids from low-entropy sources. The...

Updated perl-CGI-Session package fixes a security vulnerability

The updated package fixes a security vulnerability: CGI::Session::ID::md5 versions before 4.49 for Perl generate predictable session ids from low-entropy sources. CVE-2026-56016...

perl-CGI-Session-4.490.0-1.1 on GA media (moderate)

perl-CGI-Session-4.490.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11168-1 Rating: moderate Cross-References: CVE-2026-56016 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

CVE-2026-56016

A flaw was found in perl-CGI-Session. This vulnerability allows a remote attacker to predict session identifiers due to the use of low-entropy sources in the generateid method. By predicting a session identifier, an attacker can impersonate a user's session, leading to a bypass of authentication...

PT-2026-55431

These are all security issues fixed in the perl-CGI-Session-4.490.0-1.1 package on the GA media of openSUSE Tumbleweed...

Essity: Unauthenticated reflected XSS in Essity "Network Toolbox" CGI (████████ ████████

Summary Legacy Perl "Network Toolbox" CGI at ████████ reflects packetsize into the HTML response without output encoding. When packetsize is non-integer, the script echoes the raw value inside an error element, allowing arbitrary HTML/JS injection. No auth required; no CSP on the response. Steps ...

CVE-2026-8500 Web::Passwd versions through 0.03 for Perl is vulnerable to RCE

Web::Passwd versions through 0.03 for Perl is vulnerable to RCE. Web::Passwd is a small CGI application for managing htpasswd files using the htpasswd command. The user parameter is not validated or escaped, and is used as the last argument on the command line, allowing for command injection...

[SECURITY] Fedora 43 Update: perl-CGI-Simple-1.282-1.fc43

Simple totally OO CGI interface that is CGI.pm compliant...

Fedora 43 : perl-CGI-Simple (2025-3dd97ed203)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-3dd97ed203 advisory. 1.282 - Sanitize all user-supplied values before inserting into HTTP headers; Fixed CVE-2025-40927. Tenable has extracted the preceding description block...

Fedora: Security Advisory (FEDORA-2025-47551b2aa2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2025-3dd97ed203)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 42 : perl-CGI-Simple (2025-47551b2aa2)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-47551b2aa2 advisory. 1.282 - Sanitize all user-supplied values before inserting into HTTP headers; Fixed CVE-2025-40927. Tenable has extracted the preceding description block...

OPENSUSE-SU-2025:15625-1 perl-CGI-Simple-1.282.0-1.1 on GA media

These are all security issues fixed in the perl-CGI-Simple-1.282.0-1.1 package on the GA media of openSUSE Tumbleweed...

EUVD-2015-0881

Malware in sbrugna...

EUVD-2015-0878

Malware in sbrugna...

EUVD-2009-2560

Malware in sbrugna...

OPENSUSE-SU-2024:10545-1 perl-CGI-Simple-1.115-1.4 on GA media

These are all security issues fixed in the perl-CGI-Simple-1.115-1.4 package on the GA media of openSUSE Tumbleweed...

SUSE CVE-2010-4410

CRLF injection vulnerability in the header function in 1 CGI.pm before 3.50 and 2 Simple.pm in CGI::Simple 1.112 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via vectors related to non-whitespace characters preceded by newline...