CVE-2026-19954

A flaw was found in perl-net-whois-raw. The pwhois command-line tool skips standard Internationalizing Domain Names in Applications IDNA mapping and normalization steps when processing internationalized domain names. By supplying domain names containing specific Unicode characters, an attacker ca...

DEBIAN-CVE-2026-19954

Net::Whois::Raw versions before 2.99044 for Perl ship a pwhois command-line tool that queries WHOIS for the wrong domain for unicode domain names. pwhois encodes each non-ASCII label directly using Net::IDN::Punycode and prepends xn--. Apart from lowercasing ASCII and Cyrillic letters, it skips t...

CVE-2026-19954

Net::Whois::Raw versions before 2.99044 for Perl ship a pwhois command-line tool that queries WHOIS for the wrong domain for unicode domain names. pwhois encodes each non-ASCII label directly using Net::IDN::Punycode and prepends xn--. Apart from lowercasing ASCII and Cyrillic letters, it skips t...

EUVD-2026-92267

Net::Whois::Raw versions before 2.99044 for Perl ship a pwhois command-line tool that queries WHOIS for the wrong domain for unicode domain names. pwhois encodes each non-ASCII label directly using Net::IDN::Punycode and prepends xn--. Apart from lowercasing ASCII and Cyrillic letters, it skips t...

CVE-2026-19954 Net::Whois::Raw versions before 2.99044 for Perl ship a pwhois command-line tool that queries WHOIS for the wrong domain for unicode domain names

Net::Whois::Raw versions before 2.99044 for Perl ship a pwhois command-line tool that queries WHOIS for the wrong domain for unicode domain names. pwhois encodes each non-ASCII label directly using Net::IDN::Punycode and prepends xn--. Apart from lowercasing ASCII and Cyrillic letters, it skips t...

CVE-2026-19954

The Net::Whois::Raw library for Perl (versions before 2.99044 ) contains a flaw in its pwhois command-line tool. The tool fails to correctly query WHOIS for unicode domain names because it skips essential IDNA mapping and normalization steps, directly using Net::IDN::Punycode . This results in in...

CVE-2026-19954

Net::Whois::Raw versions before 2.99044 for Perl ship a pwhois command-line tool that queries WHOIS for the wrong domain for unicode domain names. pwhois encodes each non-ASCII label directly using Net::IDN::Punycode and prepends xn--. Apart from lowercasing ASCII and Cyrillic letters, it skips t...

EUVD-2020-31226

Powie's WHOIS Domain Check 0.9.31 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to inject arbitrary JavaScript by exploiting unsanitized input fields in plugin settings. Attackers can submit malicious payloads through textarea and input elements in t...

pWhois Layer Four Traceroute (LFT) Unspecified Vulnerability

Whois Layer Four Traceroute LFT is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

pWhois Layer Four Traceroute (LFT) Unspecified Vulnerability

This host is installed with Whois Layer Four Traceroute LFT and is prone to unspecified vulnerability. OpenVAS Vulnerability Test $Id: gbpwhoislftunspecifiedvuln.nasl 7823 2017-11-20 08:54:04Z cfischer $ pWhois Layer Four Traceroute LFT Unspecified Vulnerability Authors: Antu Sanadi Copyright c...

CVE-2011-0765

Unspecified vulnerability in lft in pWhois Layer Four Traceroute LFT 3.x before 3.3 allows local users to gain privileges via a crafted command line...

UBUNTU-CVE-2011-0765

Unspecified vulnerability in lft in pWhois Layer Four Traceroute LFT 3.x before 3.3 allows local users to gain privileges via a crafted command line...

Code injection

Unspecified vulnerability in lft in pWhois Layer Four Traceroute LFT 3.x before 3.3 allows local users to gain privileges via a crafted command line...

CVE-2011-0765

Unspecified vulnerability in lft in pWhois Layer Four Traceroute LFT 3.x before 3.3 allows local users to gain privileges via a crafted command line...

CVE-2011-0765

Unspecified vulnerability in lft in pWhois Layer Four Traceroute LFT 3.x before 3.3 allows local users to gain privileges via a crafted command line...

CVE-2011-0765

CVE-2011-0765 affects Layer Four Traceroute (LFT) on the Linux/Unix ecosystem: Unspecified vulnerability in the lft component of LFT 3.x before 3.3 allows local users to gain privileges via a crafted command line. Connected sources indicate the issue is a local privilege escalation in LFT prior t...

CVE-2011-0765: Undefined Security Weakness

Unspecified vulnerability in lft in pWhois Layer Four Traceroute LFT 3.x before 3.3 allows local users to gain privileges via a crafted command line...

pWhois Layer Four Traceroute 3.x vulnerability

Overview Given a specific set of command line arguments, Layer Four Traceroute lft will produce a segmentation fault leading to a possible privilege escalation vulnerability. Description pWhois Layer Four Traceroute 3.x contains a vulnerability when parsing command line arguments. Earlier version...