cpan
Security Advisories in cpan
about 1 year ago
PerlSpeak through 2.01 allows attackers to execute arbitrary OS commands, as demonstrated by use of system and 2-argument open.
cpan
PerlSpeak
High
almost 10 years ago
Imager would search the default current directory entry in @INC when searching for file format support modules.
cpan
Imager
High
over 6 years ago
The Batch::Batchrun module 1.03 for Perl does not properly handle temporary files.
cpan
Batch-Batchrun
Moderate
over 4 years ago
Duktape v2.99.99 was discovered to contain a SEGV vulnerability via the component duk_push_tval in duktape/duk_api_stack.c.
cpan
JavaScript-Duktape
about 1 year ago
Crypt::Salt for Perl version 0.01 uses insecure rand() function when generating salts for cryptographic purposes.
cpan
Crypt-Salt
3 months ago
Business::OnlinePayment::StoredTransaction versions through 0.01 for Perl uses an insecure secret key. Business::OnlinePayment::StoredTransaction generates a secret key by using a MD5 hash of a single call to the built-in rand function, which is unsui...
cpan
Business-OnlinePayment-StoredTransaction
Critical
over 4 years ago
lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file =~ /\|$/ check, leading to command injection.
cpan
Image-ExifTool
almost 14 years ago
Arbitrary Perl methods could be called via HTTP like RPC.
cpan
Search-OpenSearch-Server
Critical
about 1 year ago
YAML-LibYAML prior to 0.903.0 for Perl uses 2-args open, allowing existing files to be modified
cpan
YAML-LibYAML
High
about 4 years ago
zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.
cpan
cppAdaptive1
Moderate
over 8 years ago
jQuery 1.4.2 allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to use of the text method inside after.
cpan
Yukki
over 17 years ago
When running on Apache with thread support setMacros and setGroups were not launched with the good datas.
cpan
Lemonldap-NG-Portal
High
almost 5 years ago
An issue was discovered in LemonLDAP::NG before 2.0.12. Session cache corruption can lead to authorization bypass or spoofing. By running a loop that makes many authentication attempts, an attacker might alternately be authenticated as one of two diffe...
cpan
Lemonldap-NG-Portal
Moderate
about 6 years ago
In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This proble...
cpan
Ukigumo-Server
Moderate
about 6 years ago
In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may exec...
cpan
Ukigumo-Server
Moderate
about 7 years ago
jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the nat...
cpan
Ukigumo-Server
High
almost 8 years ago
In Miniz 2.0.7, tinfl_decompress in miniz_tinfl.c has an infinite loop because sym2 and counter can both remain equal to zero.
cpan
Sereal-Encoder
Moderate
over 8 years ago
jQuery 1.4.2 allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to use of the text method inside after.
cpan
Ukigumo-Server
High
almost 5 years ago
An issue was discovered in LemonLDAP::NG before 2.0.12. Session cache corruption can lead to authorization bypass or spoofing. By running a loop that makes many authentication attempts, an attacker might alternately be authenticated as one of two diffe...
cpan
Lemonldap-NG-Manager
almost 4 years ago
An issue was discovered in LemonLDAP::NG (aka lemonldap-ng) 2.0.13. When using the RESTServer plug-in to operate a REST password validation service (for another LemonLDAP::NG instance, for example) and using the Kerberos authentication method combined ...
cpan
Lemonldap-NG-Manager
about 14 years ago
Multiple cross-site scripting (XSS) vulnerabilities in the topic administration page.
cpan
RT-Extension-MobileUI
over 11 years ago
Param injection in case of several parameters of the same name are present.
cpan
Mojolicious-Plugin-OAuth2
over 3 years ago
Wrong error messages/sometimes crashes or endless loops with invalid JSON in relaxed mode
cpan
Cpanel-JSON-XS
High
over 11 years ago
DBD::File drivers open files from folders other than specifically passed using the f_dir attribute.
cpan
DBI
about 21 years ago
Allows local users to overwrite arbitrary files via a symlink attack on a temporary PID file.
cpan
DBI
Filter by Severity
Filter by Package
perl
45
DBD-SQLite
42
MT
37
Mojolicious
18
Yukki
14
Dpkg
14
MySQL-Admin
13
Zonemaster-GUI
11
Kossy
11
Yancy
10
App-Netdisco
10
UR
10
SockJS
10
DBI
10
Ukigumo-Server
10
YATT-Lite
10
Zabbix-Reporter
10
Resource-Pack-jQuery
9
JS-jQuery
9
Squatting
9
Plack-Debugger
9
Stardust
9
Sidef
9
Yote
9
Net-Dropbear
7
Imager
7
DBD-mysql
7
Archive-Tar
6
libwww-perl
6
File-Path
6
CGI
6
Cpanel-JSON-XS
6
Sereal-Decoder
5
ActivePerl
5
Net-CIDR-Lite
5
IO-Compress
5
CryptX
5
Git-Raw
5
Win32-File-Summary
5
Alien-SVN
4
Jifty
4
Archive-Unzip-Burst
4
HTTP-Tiny
4
Sereal-Encoder
4
Lemonldap-NG-Portal
4
Plack
4
CGI-Simple
4
Compress-Raw-Zlib
4
YAML-LibYAML
4
Git-XS
4
Tk
4
Net-CIDR-Set
4
YAML-Syck
3
Apache-Session
3
Net-SNMP
3
XML-LibXML
3
Crypt-CBC
3
Safe
3
Crypt-Sodium-XS
3
Lemonldap-NG-Handler
3
Config-Model
3
mod_perl
3
DBD-Pg
3
SOAP-Lite
3
Dancer
3
DBD-MariaDB
3
Plack-Middleware-Session
3
UI-Dialog
3
Lemonldap-NG-Common
3
Image-ExifTool
3
Crypt-DSA
3
Net-DNS
3
CPAN
3
Encode
3
Lemonldap-NG-Manager
3
GBrowse
3
Perl6-Pugs
3
HTML-Parser
2
XML-Parser
2
HTTP-Session2
2
Boost-Graph
2
App-revealup
2
Crypt-OpenSSL-PKCS12
2
FCGI
2
cppAdaptive2
2
Crypt-NaCl-Sodium
2
Catalyst-Runtime
2
Alien-FreeImage
2
Mozilla-CA
2
cppAdaptive1
2
Perl-Tidy
2
DBIx-Class-EncodedColumn
2
PathTools
2
YAML
2
HarfBuzz-Shaper
2
MHonArc
2
Spreadsheet-ParseXLSX
2
Crypt-SaltedHash
2
Digest
2
Archive-Zip
2
Apache-Session-Browseable
2
EasyTCP
2
Storable
2
BSON-XS
2
Locale-Maketext
2
App-cpanminus
2
Crypt-Random
2
Tcl
2
Email-Address
2
POSIX-2008
2
Net-OpenID-Consumer
2
IO-Socket-SSL
2
Win32-Printer
2
HTTP-Daemon
2
Net-Statsd-Lite
2
Crypt-Perl
2
CGI-Session
2
Compress-Raw-Bzip2
2
PAR
2
Zonemaster-Backend
2
Plack-Middleware-Statsd
2
DataDog-DogStatsd
2
Module-Metadata
1
CBOR-XS
1
Catalyst-Action-REST
1
Crypt-ScryptKDF
1
Amon2-Auth-Site-LINE
1
Net-Xero
1
XML-Atom
1
JavaScript-Duktape
1
IPC-Run
1
CPAN-Checksums
1
JSON-XS
1
Unicode-LineBreak
1
Starman
1
CGI-Application-Plugin-AutoRunmode
1
Apache-Wyrd
1
WWW-UsePerl-Server
1
Net-IP-LPM
1
Imager-File-GIF
1
Net-IPv4Addr
1
Plack-Middleware-XSRFBlock
1
Gazelle
1
Amon2
1
Amon2-Plugin-Web-CSRFDefender
1
RPC-XML
1
eperl
1
Crypt-RandomEncryption
1
Mojo-DOM-Role-Analyzer
1
Mail-Audit
1
Graphics-ColorNames
1
Dancer2
1
Catalyst-Controller-Combine
1
PAR-Packer
1
Devel-StackTrace
1
ExtUtils-MakeMaker
1
Crypt-SysRandom-XS
1
Sub-HandlesVia
1
SVG-Sparkline
1
Apache2-API
1
App-Github-Email
1
XML-Simple
1
Cmd-Dwarf
1
Protocol-HTTP2
1
Search-OpenSearch-Server
1
WWW-Mechanize-Cached
1
Image-Info
1
MARC-File-XML
1
Otogiri
1
Term-ReadLine-Gnu
1
File-Temp
1
Pinto
1
LWP-Protocol-Net-Curl
1
Crypt-Primes
1
Catalyst-Plugin-Session
1
String-Compare-ConstantTime
1
Crypt-OpenSSL-RSA
1
Alien-PCRE2
1
Data-FormValidator
1
Clipboard
1
XML-Twig
1
Redis-Fast
1
Text-CSV_XS
1
Crypt-OpenSSL-DSA
1
Catalyst-Plugin-Authentication
1
Authen-SASL
1
Apache-AuthCAS
1
perl-ldap
1
Apache-SessionX
1
Amazon-Credentials
1
Crypt-PasswdMD5
1
Mojolicious-Plugin-OAuth2
1
Filesys-SmbClientParser
1
WWW-Mechanize
1
Template-Toolkit
1
PApp
1
Web-Passwd
1
CGI-Application-Dispatch
1
Crypt-Random-Source
1
Catalyst-Plugin-Static
1
Filter by Repository
https://github.com/jquery/jquery
108
https://github.com/Perl/perl5
22
https://github.com/sqlite/sqlite
15
https://github.com/mojolicious/mojo
12
https://github.com/twbs/bootstrap
9
https://github.com/perl5-dbi/DBD-mysql
7
https://github.com/madler/zlib
6
https://github.com/glennrp/libpng
6
https://github.com/rurban/Cpanel-JSON-XS
6
https://sourceforge.net/projects/sourceforge.net
6
https://github.com/briandfoy/cpan-security-advisory
6
https://github.com/stigtsp/Net-CIDR-Lite
5
https://github.com/jib/archive-tar-new
5
https://github.com/perl5-dbi/dbi
5
https://github.com/facebook/zstd
4
https://github.com/pmqs/IO-Compress
4
https://github.com/tonycoz/imager
3
https://github.com/DCIT/perl-CryptX
3
https://github.com/dod38fr/config-model
3
https://github.com/redis/hiredis
3
https://github.com/kmx/alien-freeimage
3
https://github.com/cpan-authors/YAML-Syck
3
https://github.com/jquery/jquery-ui
3
https://github.com/libgit2/security
3
https://github.com/libtom/libtomcrypt
3
https://github.com/andk/cpanpm
2
https://github.com/chansen/p5-http-tiny
2
https://github.com/exiftool/exiftool
2
https://github.com/jedisct1/libsodium
2
https://github.com/richgel999/miniz
2
https://github.com/robrwo/Plack-Middleware-Statsd
2
https://github.com/chartjs/Chart.js
2
https://github.com/robrwo/perl-Crypt-SaltedHash
2
https://github.com/ingydotnet/yaml-libyaml-pm
2
https://github.com/AndyA/CGI--Simple
2
https://github.com/PerlDancer/Dancer
2
https://github.com/libtom/libtommath
2
https://github.com/cpan-authors/XML-Parser
2
https://github.com/blog/1938-git-client-vulnerability-announced
2
https://github.com/ingydotnet/yaml-pm
2
https://github.com/FGasper/p5-Crypt-Perl
2
https://github.com/hashcat/hashcat
2
https://github.com/zonemaster/zonemaster-backend
2
https://github.com/libwww-perl/libwww-perl
2
https://github.com/cpan-authors/crypt-nacl-sodium
2
https://github.com/svaarala/duktape
2
https://github.com/libwww-perl/HTTP-Daemon
2
https://github.com/miyagawa/cpanminus
2
https://github.com/mitmproxy/pdoc
2
https://github.com/LemonLDAPNG/Apache-Session-Browseable
2
https://github.com/tokuhirom/HTTP-Session2
2
https://github.com/kraih/mojo
1
https://github.com/redhotpenguin/perl-Archive-Zip
1
https://github.com/svarshavchik/Net-CIDR
1
https://github.com/certifi/python-certifi
1
https://github.com/Perl-Toolchain-Gang/ExtUtils-MakeMaker
1
https://github.com/faraco/App-Github-Email
1
https://github.com/moment/moment
1
https://github.com/moxiecode/plupload
1
https://github.com/zhuowei/worthdoingbadly.com
1
https://github.com/Dual-Life/Devel-PPPort
1
https://github.com/rjbs/Email-Address
1
https://github.com/perl-catalyst/Catalyst-Plugin-Session
1
https://github.com/rjbs/Email-MIME
1
https://github.com/markstos/CGI.pm
1
https://github.com/LemonLDAPNG/Apache-Session-LDAP
1
https://github.com/FastCGI-Archives/fcgi2
1
https://github.com/robrwo/Text-Minify-XS
1
https://github.com/redhotpenguin/perl-soaplite
1
https://github.com/gbarr/perl-authen-sasl
1
https://github.com/xsawyerx/app-genpass
1
https://github.com/hakimel/reveal.js
1
https://github.com/toddr/Crypt-OpenSSL-RSA
1
https://github.com/atoomic/Crypt-Primes
1
https://github.com/tchatzi/Authen-TOTP
1
https://github.com/karenetheridge/Crypt-Random-Source
1
https://github.com/dajobe/raptor
1
https://github.com/josdejong/jsoneditor
1
https://github.com/gisle/html-parser
1
https://github.com/bluefeet/Starch
1
https://github.com/cosimo/perl5-net-statsd
1
https://github.com/kazeburo/Plack-Middleware-Session-Simple
1
https://github.com/rschupp/Module-ScanDeps
1
https://github.com/cromedome/cgi-application-plugin-captcha
1
https://github.com/libwww-perl/WWW-Mechanize-Cached
1
https://github.com/perl-catalyst/Catalyst-Plugin-Authentication
1
https://github.com/mojomojo/mojomojo
1
https://github.com/yuki-kimoto/DBIx-Custom
1
https://github.com/creaktive/LWP-Protocol-Net-Curl
1
https://github.com/seagirl/dwarf
1
https://github.com/dankogai/p5-encode
1
https://github.com/miyagawa/Starman
1
https://github.com/gitpan/PerlSpeak
1
https://github.com/kberov/Ado
1
https://github.com/jkeenan/File-Path
1
https://github.com/abw/Template2
1
https://bitbucket.org/shlomif/perl-config-inifiles
1
https://github.com/robrwo/perl-Net-CIDR-Set
1
https://github.com/markstos/CGI--Application
1
https://github.com/tokuhirom/Amon
1
https://github.com/lstein/Lib-Crypt-CBC
1
https://github.com/PerlDancer/Dancer2
1
https://github.com/grantm/xml-simple
1
https://github.com/karpet/search-opensearch-server
1
https://github.com/gwadej/svg-sparkline
1
https://github.com/gnustavo/SVN-Look
1
https://bitbucket.org/xi/libyaml
1
https://github.com/bwva/Concierge-Sessions
1
https://github.com/google/brotli
1
https://github.com/haile01/perl_spreadsheet_excel_rce_poc
1
https://github.com/karpet/Dezi
1
https://github.com/marcusramberg/Mojolicious-Plugin-OAuth2
1
https://github.com/atrodo/Net-Dropbear
1
https://github.com/snapappointments/bootstrap-select
1
https://github.com/robrwo/Net-Statsd-Lite
1
https://github.com/perltidy/perltidy
1
https://github.com/clintongormley/perl-html-stripscripts
1
https://github.com/robrwo/Net-Statsd-Tiny
1
https://github.com/mkj/dropbear
1
https://github.com/Perl-Toolchain-Gang/File-Temp
1
https://github.com/kazuho/Starlet
1
https://github.com/perl-catalyst/FCGI
1
https://github.com/harfbuzz/harfbuzz
1
https://github.com/perl-catalyst/Catalyst-Authentication-Credential-HTTP
1
https://github.com/Leont/crypt-argon2
1
https://github.com/jberger/Galileo
1
https://github.com/pjuhasz/JSON-SIMD
1
https://github.com/gray/compress-lz4
1
https://github.com/ycdxsb/WindowsPrivilegeEscalation
1
https://github.com/sgnix/kelp
1
https://github.com/kazeburo/Kossy
1
https://github.com/dsully/perl-crypt-openssl-pkcs12
1
https://github.com/bluefeet/GitLab-API-v4
1
https://github.com/amaltsev/XAO-Web
1
https://github.com/cpan-authors/Text-CSV_XS
1
https://github.com/cpan-authors/XML-LibXML
1
https://github.com/libwww-perl/lwp-protocol-https
1
https://github.com/atoomic/Crypt-Random
1
https://github.com/mtrmac/IPTables-Parse
1
https://github.com/richardc/perl-file-find-rule
1
https://github.com/preaction/Log-Any
1
https://github.com/ytnobody/Otogiri
1
https://github.com/wrog/Net-OpenID-Consumer
1
https://github.com/Perl-Toolchain-Gang/HTTP-Tiny
1
https://github.com/plack/Plack
1
https://github.com/angular/angular.js
1
https://github.com/DCIT/perl-Crypt-JWT
1
https://github.com/perl-Crypt-OpenPGP/Crypt-Random
1
https://github.com/jmcnamara/spreadsheet-parseexcel
1
https://github.com/thaljef/Pinto
1
https://github.com/gbarr/perl-Convert-ASN1
1
https://github.com/Sereal/Sereal
1
https://github.com/robrwo/CatalystX-Statsd
1
https://github.com/dagolden/Capture-Tiny
1
https://github.com/houseabsolute/Data-Validate-IP
1
https://github.com/libwww-perl/HTML-Parser
1
https://github.com/robrwo/perl-Mojolicious-Plugin-Statsd
1
https://github.com/plack/Plack-Middleware-Session
1
https://github.com/perl-net-saml2/perl-XML-Sig
1
https://sourceforge.net/projects/net-snmp
1
https://github.com/hatukanezumi/Unicode-LineBreak
1