19055 matches found
Fedora 43 : perl-DBI (2026-9d65f38b15)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-9d65f38b15 advisory. 1.652 - Fix CVE-2026-73194 and CVE-2026-73193 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...
Linux Distros Unpatched Vulnerability : CVE-2026-63676
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - libyaml-perl - None Ubuntu Linux - backtracking leading to exponential load time CVE-2026-63676 Note that Nessus relies on the presence of the...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: perl-Encode (UTSA-2026-093243)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093243 advisory. Encode.pm, as distributed in Perl through 5.34.0, allows local users to gain privileges via a Trojan horse Encode::ConfigLocal library in the current working directo...
CVE-2026-73194 affecting package perl-DBI for versions less than 1.652-1
CVE-2026-73194 affecting package perl-DBI for versions less than 1.652-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-73193 affecting package perl-DBI for versions less than 1.652-1
CVE-2026-73193 affecting package perl-DBI for versions less than 1.652-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-78619
Punk::Plugin::TOTP versions before 0.05 for Perl accept another account's recovery code at the two-factor challenge because totpuserecovery compares user identifiers numerically. The helper searches the recovery model for the submitted code's digest alone, across every user's rows, so the ownersh...
CVE-2026-78655
Punk::Plugin::TOTP versions before 0.05 for Perl allow the second-factor attempt limit to be reset by replaying an earlier session cookie because the challenge route counts failures in the session. The POST handler on challengepath keeps the failure count as tries inside the totppending record in...
CVE-2026-78655
Punk::Plugin::TOTP (Perl) versions before 0.05 allow an attacker to bypass the TOTP second-factor attempt limit by replaying a previously saved session cookie. Because Punk::Session stores the failure counter inside a signed client-side cookie, a saved cookie from before the failed attempts resto...
CVE-2026-78619
Punk::Plugin::TOTP versions before 0.05 for Perl contain a critical (CVSS 9.8) flaw in the recovery code verification path. The totp_use_recovery helper searches recovery records by code digest across all users, then performs an ownership check that compares user_id values through Perl's integer ...
CVE-2026-78619 Punk::Plugin::TOTP versions before 0.05 for Perl accept another account's recovery code at the two-factor challenge because totp_use_recovery compares user identifiers numerically
Punk::Plugin::TOTP versions before 0.05 for Perl accept another account's recovery code at the two-factor challenge because totpuserecovery compares user identifiers numerically. The helper searches the recovery model for the submitted code's digest alone, across every user's rows, so the ownersh...
USN-8675-1: Perl vulnerabilities
It was discovered that Perl incorrectly handled short source addresses in the Socket module. An attacker could possibly use this issue to trigger an out-of-bounds heap read, resulting in information disclosure. CVE-2026-12087 It was discovered that Perl incorrectly handled regular expressions...
USN-8675-1 perl vulnerabilities
It was discovered that Perl incorrectly handled short source addresses in the Socket module. An attacker could possibly use this issue to trigger an out-of-bounds heap read, resulting in information disclosure. CVE-2026-12087 It was discovered that Perl incorrectly handled regular expressions...
[SECURITY] Fedora 43 Update: perl-URI-5.36-1.fc43
This module implements the URI class. Objects of this class represent "Uniform Resource Identifier references" as specified in RFC 2396 and updated by RFC 2732...
Fedora 43 : perl-URI (2026-09941e744b)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-09941e744b advisory. 5.36 - Apply Unicode NFC normalization in URI::idna nameprep so IDNA host encoding matches other clients instead of emitting a non-standard, non-round-trippi...
PT-2026-81863
Name of the Vulnerable Software and Affected Versions Punk::Plugin::TOTP versions prior to 0.05 Description The software incorrectly validates recovery codes during the two-factor authentication challenge. The totp use recovery function searches the recovery model for a submitted code's digest...
ROOT-OS-DEBIAN-13-CVE-2026-57433 CVE-2026-57433 in perl - Patched by Root
Root has patched CVE-2026-57433 in the perl package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2025-15649 CVE-2025-15649 in perl - Patched by Root
Root has patched CVE-2025-15649 in the perl package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-48961 CVE-2026-48961 in perl - Patched by Root
Root has patched CVE-2026-48961 in the perl package for Root:Debian:13. Multiple fixed versions available...