PE
Product
Perl
46
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 13High 16Medium 1Low 0
Watch
Add Perl to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-10878 | 8.6 | Jun 5 | Perl before 5.30.3 has an integer overflow related to mishandling of a "PL_regkind[OP(n)] == NOTHING" situation Affected: before 5.30.3 |
| CVE-2026-57432 | 8.4 | Jul 13 | Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpack Affected: through 5.43.10 |
| CVE-2024-56406 | 8.4 | Apr 13 | A heap buffer overflow vulnerability was discovered in Perl Affected: 5.33.1 before 5.38.4; 5.39.0 before 5.40.2; 5.41.0 through 5.41.10 |
| CVE-2020-10543 | 8.2 | Jun 5 | Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow Affected: before 5.30.3 |
| CVE-2023-31486 | 8.1 | Apr 29 | HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration where users must opt in to verify certificates Affected: before 5.38.0 |
| CVE-2023-31484 | 8.1 | Apr 29 | CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS Affected: before 5.38.0 |
| CVE-2023-47039 | 7.8 | Jan 2 | A vulnerability was found in Perl Affected: before 5.32.1 |
| CVE-2023-47038 | 7.8 | Dec 18 | A vulnerability was found in perl 5.30.0 through 5.38.0 Affected: 5.30.0 through 5.38.0 |
| CVE-2016-6185 | 7.8 | Aug 2 | The XSLoader::load method in XSLoader in Perl does not properly locate .so files when called in a string eval, which might allow local users to execute arbitrary code via a Trojan… Affected: 5.23.0 before 5.24.1; 5.25.0 before 5.25.3 |
| CVE-2016-1238 | 7.8 | Aug 2 | (1) cpan/Archive-Tar/bin/ptar, (2) cpan/Archive-Tar/bin/ptardiff, (3) cpan/Archive-Tar/bin/ptargrep, (4) cpan/CPAN/scripts/cpan, (5) cpan/Digest-SHA/shasum, (6)… Affected: 1.0.15; 1.0.16; 5.000; 5.000o; 5.001; 5.001n; +34 more |
| CVE-2020-12723 | 7.5 | Jun 5 | regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk calls Affected: before 5.30.3 |
| CVE-2018-12015 | 7.5 | Jun 7 | In Perl through 5.26.2, the Archive::Tar module allows remote attackers to bypass a directory-traversal protection mechanism, and overwrite arbitrary files, via an archive file… Affected: through 5.26.2 |
| CVE-2018-6798 | 7.5 | Apr 17 | An issue was discovered in Perl 5.22 through 5.26 Affected: 5.22 through 5.26 |
| CVE-2017-12837 | 7.5 | Sep 19 | Heap-based buffer overflow in the S_regatom function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 allows remote attackers to cause a denial of service… Affected: through 5.24.2; 5.26.0 |
| CVE-2015-8853 | 7.5 | May 25 | The (1) S_reghop3, (2) S_reghop4, and (3) S_reghopmaybe3 functions in regexec.c in Perl before 5.24.0 allow context-dependent attackers to cause a denial of service (infinite… Affected: through 5.23.9 |
| CVE-2016-2381 | 7.5 | Apr 8 | Perl might allow context-dependent attackers to bypass the taint protection mechanism in a child process via duplicate environment variables in envp Affected: before 5.23.9 |
Showing 16