19167 matches found
SUSE-SU-2025:01884-1 Security update for perl-Crypt-OpenSSL-RSA
This update for perl-Crypt-OpenSSL-RSA fixes the following issues: - CVE-2024-2467: Side-channel attack in PKCS1 v1.5 padding mode Marvin Attack bsc1221446...
MetaCPAN Perl Mojolicious::Plugin::CSRF 安全特征问题漏洞
MetaCPAN Perl Mojolicious::Plugin::CSRF is a CSRF defense plugin from the MetaCPAN Foundation. A security vulnerability exists in MetaCPAN Perl Mojolicious::Plugin::CSRF version 1.03 that stems from the use of a weak random number source to generate CSRF tokens...
Fedora 43 : perl-CryptX (2025-a99a329e1b)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-a99a329e1b advisory. Automatic update for perl-CryptX-0.087-1.fc43. Changelog Wed Jun 11 2025 Xavier Bachelot - 0.087-1 - Update to 0.087...
Perl CryptX 安全漏洞
Perl CryptX is a versatile and powerful, high-performance cryptographic toolkit for Perl open source. A security vulnerability exists in Perl CryptX versions prior to 0.065, which stems from a dependency library that may be vulnerable to a malformed unicode attack...
PT-2025-25234
Name of the Vulnerable Software and Affected Versions CryptX for Perl versions prior to 0.065 Description The issue concerns a potential Unicode vulnerability in CryptX for Perl. It is related to a dependency that may be susceptible to malformed Unicode. Specifically, CryptX embeds the tomcrypt...
Perl CryptX 安全漏洞
Perl CryptX is a versatile and powerful, high-performance cryptographic toolkit for Perl open source. A security vulnerability exists in Perl CryptX versions prior to 0.087, which stems from a dependency stock in integer overflow problem...
CVE-2025-33112
IBM AIX 7.3 and IBM VIOS 4.1.1 Perl implementation could allow a non-privileged local user to exploit a vulnerability to execute arbitrary code due to improper neutralization of pathname input...
Security Bulletin: AIX/VIOS is vulnerable to arbitrary command execution due to Perl (CVE-2025-33112)
Summary Vulnerability in AIX's Perl could allow an attacker to execute arbitrary commands CVE-2025-33112. AIX uses Perl in various operating system components. Vulnerability Details CVEID:CVE-2025-33112 DESCRIPTION: IBM AIX's Perl implementation could allow a non-privileged local user to exploit ...
RHSA-2025:8703 Red Hat Security Advisory: perl-FCGI:0.78 security update
Bulletin has no description...
RHSA-2025:8698 Red Hat Security Advisory: perl-FCGI:0.78 security update
Bulletin has no description...
RHSA-2025:8696 Red Hat Security Advisory: perl-FCGI:0.78 security update
Bulletin has no description...
RHSA-2025:8697 Red Hat Security Advisory: perl-FCGI security update
Bulletin has no description...
RHSA-2025:8677 Red Hat Security Advisory: perl-FCGI security update
Bulletin has no description...
RHSA-2025:8678 Red Hat Security Advisory: perl-FCGI security update
Bulletin has no description...
AIX is vulnerable to arbitrary command execution due to Perl (CVE-2025-33112)
IBM SECURITY ADVISORY First Issued: Tue Jun 10 08:28:43 CDT 2025 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/perladvisory9.asc Security Bulletin: AIX is vulnerable to arbitrary command execution due to Perl CVE-2025-33112...
Important: perl
Issue Overview: Thread creation while a directory handle is open does a fchdir, affecting other threads race condition CVE-2025-40909 Affected Packages: perl Issue Correction: Run dnf update perl --releasever 2023.7.20250609 to update your system. New Packages: aarch64: ...
Medium: perl
Issue Overview: Thread creation while a directory handle is open does a fchdir, affecting other threads race condition CVE-2025-40909 Affected Packages: perl Issue Correction: Run dnf update perl --releasever 2023.7.20250609 or dnf update --advisory ALAS2023-2025-1007 --releasever 2023.7.20250609...
OS Command Exec, Unix Command Shell, Reverse TCP SSL (via perl)
Execute an OS command from PHP. Creates an interactive shell via perl, uses SSL Module Options msf use payload/php/unix/cmd/reverseperlssl msf payloadreverseperlssl show actions ...actions... msf payloadreverseperlssl set ACTION msf payloadreverseperlssl show options ...show and set options... ms...
Important: Red Hat Security Advisory: perl-FCGI:0.78 security update
An update for the perl-FCGI:0.78 module is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detaile...
perl-fcgi: FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library
A flaw was found in the FCGI library. In affected versions, specially crafted nameLen or valueLen values in data sent to the IPC socket may result in a heap-based buffer overflow, which can cause an application crash or other undefined behavior. This occurs in ReadParams in fcgiapp.c...