Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 150

Export CSV
CVE-2018-6797

perl: heap write overflow in regcomp.c

An issue was discovered in Perl 5.18 through 5.26. A crafted regular expression can cause a heap-based buffer overflow, with control over the bytes written.

CVSS 3.0 · 9.8 Critical EPSS 6.5% KEV · Not listed
Vendors
Canonical Debian Perl and 1 more
Products
Ubuntu Linux Debian Linux Perl and 3 more
CVE-2018-18313

perl: Heap-based buffer read overflow in S_grok_bslash_N()

Perl before 5.26.3 has a buffer over-read via a crafted regular expression that triggers disclosure of sensitive information from process memory.

CVSS 3.0 · 9.1 Critical EPSS 9.5% KEV · Not listed
Vendors
Apple Canonical Debian and 3 more
Products
Mac Os X Ubuntu Linux Debian Linux and 7 more
CVE-2018-18311

perl: Integer overflow leading to buffer overflow in Perl_my_setenv()

Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations.

CVSS 3.0 · 9.8 Critical EPSS 11.7% KEV · Not listed
Vendors
Apple Canonical Debian and 5 more
Products
Mac Os X Ubuntu Linux Debian Linux and 20 more
CVE-2018-12015

perl: Directory traversal in Archive::Tar

In Perl through 5.26.2, the Archive::Tar module allows remote attackers to bypass a directory-traversal protection mechanism, and overwrite arbitrary files, via an archive file containing a symlink and a regular file with the same name.

CVSS 3.0 · 7.5 High EPSS 7.3% KEV · Not listed
Vendors
Apple Archive\ Canonical and 4 more
Products
Mac Os X \ Ubuntu Linux and 7 more
CVE-2014-10402

perl-dbi: Incomplete fix for CVE-2014-10401

An issue was discovered in the DBI module through 1.643 for Perl. DBD::File drivers can open files from folders other than those specifically passed via the f_dir attribute in the data source name (DSN). NOTE: this issue exists because of an incomplete fix for CVE-2014-10401.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Perl
Products
Dbi
CVE-2014-10401

perl-dbi: DBD:: File drivers open files from folders other than specifically passed

An issue was discovered in the DBI module before 1.632 for Perl. DBD::File drivers can open files from folders other than those specifically passed via the f_dir attribute.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Perl
Products
Dbi
CVE-2013-7491

perl-dbi: Stack corruption on callbacks

An issue was discovered in the DBI module before 1.628 for Perl. Stack corruption occurs when a user-defined function requires a non-trivial amount of memory and the Perl stack gets reallocated.

CVSS 3.1 · 5.3 Medium EPSS 2.7% KEV · Not listed
Vendors
Perl
Products
Dbi
CVE-2013-7490

perl-dbi: Risk of memory corruption with many arguments in DBI method dispatch

An issue was discovered in the DBI module before 1.632 for Perl. Using many arguments to methods for Callbacks may lead to memory corruption.

CVSS 3.1 · 5.3 Medium EPSS 2.7% KEV · Not listed
Vendors
Canonical Perl
Products
Ubuntu Linux Dbi