Module-signature@0.73 Security Vulnerabilities and Issues — Module-signature@0.73 CVE List

Lucene search

Module-signature ProjectModule-signature0.73

2 matches found

CVE•added 2015/05/19 6:59 p.m.•63 views

CVE-2015-3408

Module::Signature before 0.74 allows remote attackers to execute arbitrary shell commands via a crafted SIGNATURE file which is not properly handled when generating checksums from a signed manifest.

10CVSS7.6AI score0.03926EPSS

CVE•added 2015/05/19 6:59 p.m.•53 views

CVE-2015-3407

Module::Signature before 0.74 allows remote attackers to bypass signature verification for files via a signature file that does not list the files.

5CVSS7.3AI score0.00415EPSS