Mageia: Security Advisory (MGASA-2014-0557)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-46033

In ForestBlog, as of 2021-12-28, File upload can bypass verification...

SUSE-SU-2022:0114-1 Security update for nodejs14

This update for nodejs14 fixes the following issues: - CVE-2021-44531: Fixed improper handling of URI Subject Alternative Names bsc1194511. - CVE-2021-44532: Fixed certificate Verification Bypass via String Injection bsc1194512. - CVE-2021-44533: Fixed incorrect handling of certificate subject an...

SUSE-SU-2022:0113-1 Security update for nodejs12

This update for nodejs12 fixes the following issues: - CVE-2021-44531: Fixed improper handling of URI Subject Alternative Names bsc1194511. - CVE-2021-44532: Fixed certificate Verification Bypass via String Injection bsc1194512. - CVE-2021-44533: Fixed incorrect handling of certificate subject an...

OPENSUSE-SU-2022:0112-1 Security update for nodejs14

This update for nodejs14 fixes the following issues: - CVE-2021-44531: Fixed improper handling of URI Subject Alternative Names bsc1194511. - CVE-2021-44532: Fixed certificate Verification Bypass via String Injection bsc1194512. - CVE-2021-44533: Fixed incorrect handling of certificate subject an...

Updated perl-CPAN packages fix security vulnerability

CPAN 2.28 allows Signature Verification Bypass. CVE-2020-16156...

MGASA-2022-0018 Updated perl-CPAN packages fix security vulnerability

CPAN 2.28 allows Signature Verification Bypass. CVE-2020-16156...

The vulnerability of Google Chrome’s Navigation function, related to a lack of mechanism for verifying the source, allows attackers to manipulate the content of the address bar.

The vulnerability of Google Chrome’s Navigation function is related to a lack of mechanisms for verifying the source of the content. Exploiting this vulnerability could allow a malicious actor to manipulate the URL input by using a specially created HTML page...

Security feature bypass

CPAN 2.28 allows Signature Verification Bypass...

CVE-2020-16156

CPAN 2.28 allows Signature Verification Bypass...

CVE-2020-16154

The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass...

DEBIAN-CVE-2020-16154

The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass...

CVE-2020-16154

The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass...

Security feature bypass

The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass...

CVE-2020-16154

The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass...

CVE-2020-16154

CVE-2020-16154 affects the Perl module perl-App-cpanminus, reported as version 1.7044. The issue is a bypass of signature verification for CHECKSUMS files, enabling potential integrity concerns. Public advisories (e.g., ALAS-2025-2802) instruct updating perl-App-cpanminus (e.g., via yum update) t...

CVE-2020-16154

The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass...

CVE-2020-16154

The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass...

PT-2021-9866 · Unknown +4 · App::Cpanminus +4

Name of the Vulnerable Software and Affected Versions: App::cpanminus version 1.7044 Description: The issue allows Signature Verification Bypass. Recommendations: For version 1.7044, update to a version that fixes the Signature Verification Bypass issue...

cpanminus 数据伪造问题漏洞

cpanminus is a script that is used to obtain, decompress, build and install modules from CPAN without performing any other operations. cpanminus is vulnerable to a data forgery issue, which can be exploited by attackers to bypass signature verification...