Lucene search
K

58 matches found

RedhatCVE
RedhatCVE
added 2026/04/14 1:22 a.m.1 views

CVE-2026-39958

oma is a package manager for AOSC OS. Prior to 1.25.2, oma-topics is responsible for fetching metadata for testing repositories topics named "Topic Manifests" mirror/debs/manifest/topics.json from remote repository servers, registering them as APT source entries. However, the name field in said...

9.1CVSS5.8AI score0.00061EPSS
Exploits0References1
NVD
NVD
added 2026/04/09 5:16 p.m.1 views

CVE-2026-39958

oma is a package manager for AOSC OS. Prior to 1.25.2, oma-topics is responsible for fetching metadata for testing repositories topics named "Topic Manifests" mirror/debs/manifest/topics.json from remote repository servers, registering them as APT source entries. However, the name field in said...

9.1CVSS0.00061EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2026/04/09 4:28 p.m.1 views

CVE-2026-39958

oma is a package manager for AOSC OS. Prior to 1.25.2, oma-topics is responsible for fetching metadata for testing repositories topics named "Topic Manifests" mirror/debs/manifest/topics.json from remote repository servers, registering them as APT source entries. However, the name field in said...

5.2CVSS5.9AI score0.00061EPSS
Exploits0References5Affected Software1
EUVD
EUVD
added 2026/04/09 4:28 p.m.2 views

EUVD-2026-20962

oma is a package manager for AOSC OS. Prior to 1.25.2, oma-topics is responsible for fetching metadata for testing repositories topics named "Topic Manifests" mirror/debs/manifest/topics.json from remote repository servers, registering them as APT source entries. However, the name field in said...

5.2CVSS5.9AI score0.00061EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2026/04/09 4:28 p.m.1 views

CVE-2026-39958 oma-topic: name Field in Topic Manifests (topic.json) May Allow CRLF Injection

oma is a package manager for AOSC OS. Prior to 1.25.2, oma-topics is responsible for fetching metadata for testing repositories topics named "Topic Manifests" mirror/debs/manifest/topics.json from remote repository servers, registering them as APT source entries. However, the name field in said...

5.2CVSS5.8AI score0.00061EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/04/09 4:28 p.m.15 views

CVE-2026-39958 oma-topic: name Field in Topic Manifests (topic.json) May Allow CRLF Injection

oma is a package manager for AOSC OS. Prior to 1.25.2, oma-topics is responsible for fetching metadata for testing repositories topics named "Topic Manifests" mirror/debs/manifest/topics.json from remote repository servers, registering them as APT source entries. However, the name field in said...

5.2CVSS0.00061EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2026/04/09 12:0 a.m.3 views

PT-2026-31657

oma is a package manager for AOSC OS. Prior to 1.25.2, oma-topics is responsible for fetching metadata for testing repositories topics named "Topic Manifests" mirror/debs/manifest/topics.json from remote repository servers, registering them as APT source entries. However, the name field in said...

5.2CVSS5.9AI score0.00061EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2026/01/09 8:47 a.m.3 views

CVE-2025-23493

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in moallemi Google Transliteration google-transliteration allows Reflected XSS.This issue affects Google Transliteration: from n/a through = 1.7.2...

7.1CVSS5.9AI score0.00112EPSS
Exploits0References1
OSV
OSV
added 2025/11/12 9:29 p.m.3 views

MGASA-2025-0274 Updated perl packages fix security vulnerabilities

CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS. CVE-2023-31484 Perl is vulnerable to a heap buffer overflow when transliterating non-ASCII bytes. CVE-2024-56406 Perl threads have a working directory race condition where file operations may target...

8.4CVSS7.3AI score0.01523EPSS
Exploits1References13
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-5749

Malicious code in bioql PyPI...

7.1CVSS6.6AI score0.00112EPSS
Exploits0References2
OSV
OSV
added 2025/10/03 7:56 p.m.3 views

RLSA-2025:7500 Important: perl security update

Perl is a high-level programming language that is commonly used for system administration utilities and web programming. Security Fixes: perl: Perl 5.34, 5.36, 5.38 and 5.40 are vulnerable to a heap buffer overflow when transliterating non-ASCII bytes CVE-2024-56406 For more details about the...

7.3CVSS8AI score0.00072EPSS
Exploits0References2
Rockylinux
Rockylinux
added 2025/10/03 7:56 p.m.4 views

perl security update

An update is available for perl. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Perl is a high-level programming language that is commonly used for system...

8.4CVSS7.4AI score0.00072EPSS
Exploits0
RedHat Linux
RedHat Linux
added 2025/05/13 4:1 p.m.2 views

perl: Perl 5.34, 5.36, 5.38 and 5.40 are vulnerable to a heap buffer overflow when transliterating non-ASCII bytes

A flaw was found in Perl. This vulnerability allows a heap buffer overflow, which can lead to denial of service and potential arbitrary code execution on platforms that lack sufficient defenses via specially crafted input to the tr/// transliteration operator containing non-ASCII bytes on the...

8.4CVSS7.7AI score0.00072EPSS
Exploits0References7
OSV
OSV
added 2025/04/23 11:50 a.m.0 views

USN-7434-2 perl vulnerability

USN-7434-1 fixed a vulnerability in Perl. This update provides the corresponding update for Ubuntu 25.04. Original advisory details: It was discovered that Perl incorrectly handled transliterating non-ASCII bytes. A remote attacker could use this issue to cause Perl to crash, resulting in a denia...

8.4CVSS7.4AI score0.00072EPSS
Exploits0References2
OSV
OSV
added 2025/04/14 11:48 a.m.0 views

USN-7434-1 perl vulnerability

It was discovered that Perl incorrectly handled transliterating non-ASCII bytes. A remote attacker could use this issue to cause Perl to crash, resulting in a denial of service, or possibly execute arbitrary code...

8.4CVSS7.4AI score0.00072EPSS
Exploits0References2
NVD
NVD
added 2025/03/03 2:15 p.m.3 views

CVE-2025-23493

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in moallemi Google Transliteration google-transliteration allows Reflected XSS.This issue affects Google Transliteration: from n/a through = 1.7.2...

7.1CVSS0.00112EPSS
Exploits0References1
CVE
CVE
added 2025/03/03 1:30 p.m.45 views

CVE-2025-23493

CVE-2025-23493 affects the WordPress Google Transliteration plugin (versions up to 1.7.2). The issue is a Reflected XSS caused by improper input neutralization during web page generation. Root cause: improper input handling; affected component: plugin’s rendering pathway. Impact per source: poten...

7.1CVSS5.9AI score0.00112EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/03/03 1:30 p.m.5 views

CVE-2025-23493 WordPress Google Transliteration plugin <= 1.7.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound Google Transliteration allows Reflected XSS. This issue affects Google Transliteration: from n/a through 1.7.2...

7.1CVSS7.1AI score0.00112EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/03/03 12:0 a.m.1 views

WordPress plugin Google Transliteration 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS5.9AI score0.00112EPSS
Exploits0References2
Patchstack
Patchstack
added 2025/01/16 6:41 p.m.0 views

WordPress Google Transliteration plugin <= 1.7.2 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin Google Transliteration versions = 1.7.2...

7.1CVSS6.1AI score0.00112EPSS
Exploits0Affected Software1
Rows per page
Query Builder