Skip to content

Perl vulnerabilities

Products

Newest

data dumper project dumper, perl +1 moreThe Dumper method in Data::Dumper before 2.154, as used in Perl 5.20.1 and earlier, allows...CVE-2014-4330Fix available2.1 LowSeptember 30, 2014
perl cgi application moduleThe CGI::Application module before 4.50_50 and 4.50_51 for Perl, when run modes are not specified...CVE-2013-7329Fix available5.0 MediumFebruary 25, 2014
perlThe Perl_reg_numbered_buff_fetch function in Perl 5.10.0, 5.12.0, 5.14.0, and other versions,...CVE-2010-4777Public exploitFix available4.3 MediumFebruary 10, 2014
perlThe rehash mechanism in Perl 5.8.2 through 5.16.x allows context-dependent attackers to cause a...CVE-2013-1667Fix available7.5 HighMarch 9, 2013
perlThe _compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7...CVE-2012-6329Public exploitFix availableEPSS 63.7%7.5 HighJanuary 4, 2013
perlThe bsd_glob function in the File::Glob module for Perl before 5.14.2 allows context-dependent...CVE-2011-2728Fix available4.3 MediumDecember 21, 2012
perlHeap-based buffer overflow in the Perl_repeatcpy function in util.c in Perl 5.12.x before 5.12.5,...CVE-2012-5195Fix available7.5 HighDecember 11, 2012
perlMultiple format string vulnerabilities in dbdimp.c in DBD::Pg (aka DBD-Pg or libdbd-pg-perl)...CVE-2012-1151Fix available5.0 MediumMarch 11, 2012
dan kogai encode module, perl +1 moreOff-by-one error in the decode_xs function in Unicode/Unicode.xs in the Encode module before 2.44...CVE-2011-2939Fix available5.1 MediumJanuary 13, 2012
perlPerl 5.10.x allows context-dependent attackers to cause a denial of service (NULL pointer...CVE-2011-0761Public exploitFix available5.0 MediumMay 13, 2011
perlThe (1) lc, (2) lcfirst, (3) uc, and (4) ucfirst functions in Perl 5.10.x, 5.11.x, and 5.12.x...CVE-2011-1487Public exploitFix availableEPSS 10.6%5.0 MediumApril 11, 2011
perlInteger overflow in the regular expression engine in Perl 5.8.x allows context-dependent...CVE-2010-11585.0 MediumApril 20, 2010
perlPerl 5.10.1 allows context-dependent attackers to cause a denial of service (application crash)...CVE-2009-3626Fix available5.0 MediumOctober 29, 2009
perl file\Race condition in the rmtree function in File::Path 1.08 (lib/File/Path.pm) in Perl 5.8.8 allows...CVE-2008-5303Fix available6.9 MediumDecember 1, 2008
perl file\Race condition in the rmtree function in File::Path 1.08 and 2.07 (lib/File/Path.pm) in Perl 5.8...CVE-2008-5302Fix available6.9 MediumDecember 1, 2008
perlThe rmtree function in lib/File/Path.pm in Perl 5.10 does not properly check permissions before...CVE-2008-2827Public exploitFix available4.6 MediumJune 23, 2008
perlDouble free vulnerability in Perl 5.8.8 allows context-dependent attackers to cause a denial of...CVE-2008-1927Fix available5.0 MediumApril 23, 2008
perl pcrePerl-Compatible Regular Expression (PCRE) library before 6.7 allows context-dependent attackers...CVE-2006-7225Fix available4.3 MediumDecember 3, 2007
perlInteger overflow in the format string functionality (Perl_sv_vcatpvfn) in Perl 5.9.2 and 5.8.6...CVE-2005-3962Fix available4.6 MediumDecember 1, 2005
perl convert uulibBuffer overflow in Convert-UUlib (Convert::UUlib) before 1.051 allows remote attackers to execute...CVE-2005-1349Public exploitFix availableEPSS 12.8%7.5 HighApril 28, 2005
perl suidperl, debian linux +1 moreMultiple vulnerabilities in suidperl 5.6.1 and earlier allow a local user to obtain sensitive...CVE-2003-0618Fix available2.1 LowFebruary 1, 2004
perl cgi liteThe escape_dangerous_chars function in CGI::Lite 2.0 and earlier does not correctly remove...CVE-2003-13655.0 MediumDecember 31, 2003
perlPerl 5.004_04 and earlier follows symbolic links when running with the -e option, which allows...CVE-1999-13865.5 MediumDecember 31, 1999