Lucene search
+L

15 matches found

Tenable Nessus
Tenable Nessus
added 5 days ago5 views

SUSE SLED15 / SLES15 Security Update : perl-DBI (SUSE-SU-2026:3415-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3415-1 advisory. This update for perl-DBI fixes the following issues - CVE-2026-14380: unvalidated string eval interpolation of...

9.8CVSS6.2AI score0.00479EPSS
SaveExploits0References19
OSV
OSV
added 6 days ago4 views

SUSE-SU-2026:3415-1 Security update for perl-DBI

This update for perl-DBI fixes the following issues - CVE-2026-14380: unvalidated string eval interpolation of the Profile package name can lead to arbitrary Perl code execution bsc1271018. - CVE-2026-14740: one-byte out-of-bounds read when deleting an initial SQL comment line can lead to a proce...

9.8CVSS6.1AI score0.00479EPSS
SaveExploits0References13
Tenable Nessus
Tenable Nessus
added 2026/07/20 12:0 a.m.5 views

Amazon Linux 2023 : perl-DBI, perl-DBI-tests (ALAS2023-2026-1982)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1982 advisory. DBI versions before 1.650 for Perl are vulnerable to code injection via caller-influenced Profile. When a string is assigned to a DBI handle's Profile attribute, DBI splits it into path, packa...

9.8CVSS8.2AI score0.00485EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2026/07/14 12:0 a.m.11 views

openSUSE 16 Security Update : perl-DBI (openSUSE-SU-2026:21293-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21293-1 advisory. This update for perl-DBI fixes the following issues - CVE-2026-14380: unvalidated string eval interpolation of the Profile package name can lead...

9.1CVSS6.3AI score0.00479EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
added 2026/07/09 3:9 a.m.25 views

SUSE CVE-2026-14740

DBI versions before 1.650 for Perl read one byte out-of-bounds in preparse when deleting an initial SQL comment. The preparse method normalises SQL and removes comments. When the SQL starts with a comment line, the deletion of that line during normalisation led to an out-of-bounds read by one byt...

6.5CVSS6.1AI score0.00387EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2026/07/08 12:0 a.m.14 views

Linux Distros Unpatched Vulnerability : CVE-2026-14740

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DBI versions before 1.650 for Perl read one byte out-of-bounds in preparse when deleting an initial SQL comment. The preparse method normalises SQL and removes...

9.1CVSS6.2AI score0.00387EPSS
SaveExploits0References4
NVD
NVD
added 2026/07/07 11:16 p.m.13 views

CVE-2026-14740

DBI versions before 1.650 for Perl read one byte out-of-bounds in preparse when deleting an initial SQL comment. The preparse method normalises SQL and removes comments. When the SQL starts with a comment line, the deletion of that line during normalisation led to an out-of-bounds read by one byt...

9.1CVSS0.00387EPSS
SaveExploits0References4
OSV
OSV
added 2026/07/07 11:16 p.m.7 views

DEBIAN-CVE-2026-14740

DBI versions before 1.650 for Perl read one byte out-of-bounds in preparse when deleting an initial SQL comment. The preparse method normalises SQL and removes comments. When the SQL starts with a comment line, the deletion of that line during normalisation led to an out-of-bounds read by one byt...

9.1CVSS6AI score0.00387EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2026/07/07 11:16 p.m.14 views

CVE-2026-14740

DBI versions before 1.650 for Perl read one byte out-of-bounds in preparse when deleting an initial SQL comment. The preparse method normalises SQL and removes comments. When the SQL starts with a comment line, the deletion of that line during normalisation led to an out-of-bounds read by one byt...

9.1CVSS6.1AI score0.00387EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/07/07 10:5 p.m.10 views

CVE-2026-14740

DBI versions before 1.650 for Perl read one byte out-of-bounds in preparse when deleting an initial SQL comment. The preparse method normalises SQL and removes comments. When the SQL starts with a comment line, the deletion of that line during normalisation led to an out-of-bounds read by one byt...

6AI score0.00387EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/07/07 10:5 p.m.38 views

CVE-2026-14740 DBI versions before 1.650 for Perl read one byte out-of-bounds in preparse when deleting an initial SQL comment

DBI versions before 1.650 for Perl read one byte out-of-bounds in preparse when deleting an initial SQL comment. The preparse method normalises SQL and removes comments. When the SQL starts with a comment line, the deletion of that line during normalisation led to an out-of-bounds read by one byt...

0.00387EPSS
SaveExploits0References3
CVE
CVE
added 2026/07/07 10:5 p.m.36 views

CVE-2026-14740

DBI for Perl before 1.650 is affected by CVE-2026-14740. The vulnerability is rooted in the preparse() function, where deleting an initial SQL comment during SQL normalization causes an out-of-bounds read by one byte. Impact is a fault on memory-hardened builds and nondeterministic newline retent...

9.1CVSS6AI score0.00387EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2026/07/07 12:0 a.m.27 views

PT-2026-56274

Name of the Vulnerable Software and Affected Versions DBI versions prior to 1.650 Description An out-of-bounds read of one byte occurs in the preparse function when deleting an initial SQL comment. This happens during the normalization of SQL and the removal of comments. On memory-hardened builds...

9.1CVSS6AI score0.00387EPSS
SaveExploits0References49
OSV
OSV
added 2015/08/24 2:59 p.m.7 views

UBUNTU-CVE-2015-6659

SQL injection vulnerability in the SQL comment filtering system in the Database API in Drupal 7.x before 7.39 allows remote attackers to execute arbitrary SQL commands via an SQL comment...

7.5CVSS6.2AI score0.03002EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2015/08/24 2:59 p.m.41 views

CVE-2015-6659

SQL injection vulnerability in the SQL comment filtering system in the Database API in Drupal 7.x before 7.39 allows remote attackers to execute arbitrary SQL commands via an SQL comment...

7.5CVSS6AI score0.03002EPSS
SaveExploits0References2
Rows per page
Query Builder