Lucene search
+L

19830 matches found

Tenable Nessus
Tenable Nessus
added 2025/05/07 12:00 a.m.11 views

RockyLinux 9 : perl (RLSA-2024:2228)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:2228 advisory. perl: Write past buffer end via illegal user-defined Unicode property CVE-2023-47038 Tenable has extracted the preceding description block directly from the...

7.8CVSS6.6AI score0.00814EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/05/05 12:00 a.m.4 views

Photon OS 5.0: Perl PHSA-2025-5.0-0514

An update of the perl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0514. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

7.8AI score0.00536EPSS
SaveExploits0References2
OSV
OSV
added 2025/05/03 4:15 p.m.5 views

DEBIAN-CVE-2024-58134

Mojolicious versions from 0.999922 for Perl uses a hard coded string, or the application's class name, as an HMAC session cookie secret by default. These predictable default secrets can be exploited by an attacker to forge session cookies. An attacker who knows or guesses the secret could compute...

8.1CVSS6.4AI score0.00524EPSS
SaveExploits1References1
OSV
OSV
added 2025/05/03 4:15 p.m.12 views

AZL-61825 CVE-2024-58134 affecting package perl-Mojolicious 8.57-3

Mojolicious versions from 0.999922 for Perl uses a hard coded string, or the application's class name, as an HMAC session cookie secret by default. These predictable default secrets can be exploited by an attacker to forge session cookies. An attacker who knows or guesses the secret could compute...

6.6AI score0.00524EPSS
SaveExploits1References1
OSV
OSV
added 2025/05/03 4:15 p.m.24 views

UBUNTU-CVE-2024-58134

Mojolicious versions from 0.999922 for Perl uses a hard coded string, or the application's class name, as an HMAC session cookie secret by default. These predictable default secrets can be exploited by an attacker to forge session cookies. An attacker who knows or guesses the secret could compute...

8.1CVSS5.8AI score0.00524EPSS
SaveExploits1References9
Debian CVE
Debian CVE
added 2025/05/03 4:08 p.m.24 views

CVE-2024-58134

Mojolicious versions from 0.999922 for Perl uses a hard coded string, or the application's class name, as an HMAC session cookie secret by default. These predictable default secrets can be exploited by an attacker to forge session cookies. An attacker who knows or guesses the secret could compute...

6.4AI score0.00524EPSS
SaveExploits1
AlpineLinux
AlpineLinux
added 2025/05/03 11:15 a.m.13 views

CVE-2024-58135

Mojolicious versions from 7.28 for Perl will generate weak HMAC session cookie secrets via "mojo generate app" by default When creating a default app skeleton with the "mojo generate app" tool, a weak secret is written to the application's configuration file using the insecure rand function, and...

5.3CVSS6.2AI score0.00544EPSS
SaveExploits1References10
OSV
OSV
added 2025/05/03 11:15 a.m.15 views

AZL-61741 CVE-2024-58135 affecting package perl-Mojolicious 8.57-3

Mojolicious versions from 7.28 for Perl will generate weak HMAC session cookie secrets via "mojo generate app" by default When creating a default app skeleton with the "mojo generate app" tool, a weak secret is written to the application's configuration file using the insecure rand function, and...

5.8AI score0.00544EPSS
SaveExploits1References1
NVD
NVD
added 2025/05/03 11:15 a.m.29 views

CVE-2024-58135

Mojolicious versions from 7.28 through 9.45 for Perl will generate weak HMAC session cookie secrets via "mojo generate app" by default. When creating a default app skeleton with the "mojo generate app" tool, a weak secret is written to the application's configuration file using the insecure rand...

5.3CVSS0.00544EPSS
SaveExploits1References13
Debian CVE
Debian CVE
added 2025/05/03 10:16 a.m.37 views

CVE-2024-58135

Mojolicious versions from 7.28 through 9.45 for Perl will generate weak HMAC session cookie secrets via "mojo generate app" by default. When creating a default app skeleton with the "mojo generate app" tool, a weak secret is written to the application's configuration file using the insecure rand...

6.3AI score0.00544EPSS
SaveExploits1
Vulnrichment
Vulnrichment
added 2025/05/03 10:16 a.m.14 views

CVE-2024-58135 Mojolicious versions from 7.28 through 9.45 for Perl will generate weak HMAC session cookie secrets via "mojo generate app" by default

Mojolicious versions from 7.28 through 9.45 for Perl will generate weak HMAC session cookie secrets via "mojo generate app" by default. When creating a default app skeleton with the "mojo generate app" tool, a weak secret is written to the application's configuration file using the insecure rand...

6.3AI score0.00544EPSS
SaveExploits1References13
Fedora
Fedora
added 2025/04/30 2:01 a.m.12 views

[SECURITY] Fedora 40 Update: perl-PAR-Packer-1.063-3.fc40

This module implements the App::Packer::Backend interface, for generating stand-alone executables, perl scripts and PAR files...

8.4CVSS8.7AI score0.00536EPSS
SaveExploits0
Fedora
Fedora
added 2025/04/30 2:01 a.m.12 views

[SECURITY] Fedora 40 Update: perl-Devel-Cover-1.40-9.fc40

This module provides code coverage metrics for Perl. Code coverage metrics describe how thoroughly tests exercise code. By using Devel::Cover you can discover areas of code not exercised by your tests and determine which tests to create to increase coverage. Code coverage can be considered as an...

8.4CVSS8.8AI score0.00536EPSS
SaveExploits0
Fedora
Fedora
added 2025/04/30 2:01 a.m.13 views

[SECURITY] Fedora 40 Update: perl-5.38.4-508.fc40

Perl is a high-level programming language with roots in C, sed, awk and shell scripting. Perl is good at handling processes and files, and is especially good at handling text. Perl's hallmarks are practicality and efficiency. While it is used to do a lot of different things, Perl's most common...

8.4CVSS8.5AI score0.00536EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/04/30 12:06 a.m.39 views

CVE-2015-2079

Usermin 0.980 through 1.x before 1.660 allows uconfigsave.cgi sigfilefree remote code execution because it uses the two argument not three argument form of Perl open...

9.9CVSS8AI score0.01494EPSS
SaveExploits1References1
NVD
NVD
added 2025/04/28 3:15 p.m.35 views

CVE-2015-2079

Usermin 0.980 through 1.x before 1.660 allows uconfigsave.cgi sigfilefree remote code execution because it uses the two argument not three argument form of Perl open...

9.9CVSS0.01494EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2025/04/28 12:00 a.m.40 views

CVE-2015-2079

Usermin 0.980 through 1.x before 1.660 allows uconfigsave.cgi sigfilefree remote code execution because it uses the two argument not three argument form of Perl open...

9.9CVSS0.01494EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2025/04/28 12:00 a.m.45 views

CVE-2015-2079

Usermin 0.980 through 1.x before 1.660 allows uconfigsave.cgi sigfilefree remote code execution because it uses the two argument not three argument form of Perl open...

9.9CVSS9.9AI score0.01494EPSS
SaveExploits1References2
Photon
Photon
added 2025/04/28 12:00 a.m.16 views

Important Photon OS Security Update - PHSA-2025-5.0-91-0514

Updates of 'perl' packages of Photon OS have been released...

7.2AI score0.00536EPSS
SaveExploits0
Photon
Photon
added 2025/04/28 12:00 a.m.16 views

Important Photon OS Security Update - PHSA-2025-5.0-0514

Updates of 'perl' packages of Photon OS have been released...

8.4CVSS10AI score0.00536EPSS
SaveExploits0
Rows per page
Query Builder