PE
Vendor
Perl
68
CVEs
1
On KEV
0
New 30D
Products
EX7.8
Exiftool
Perl
1 CVEs1 on KEV0 new
PE9.8
Perl
Perl
46 CVEs0 on KEV0 new
DB9.8
Dbi
Perl
10 CVEs0 on KEV0 new
DI7.1
Database Interface
Perl
2 CVEs0 on KEV0 new
FI–
File::path
Perl
2 CVEs0 on KEV0 new
CA–
Cgi Application Module
Perl
1 CVEs0 on KEV0 new
CL–
Cgi Lite
Perl
1 CVEs0 on KEV0 new
CP7.8
Comprehensive Perl Archive Network
Perl
1 CVEs0 on KEV0 new
CU–
Convert Uulib
Perl
1 CVEs0 on KEV0 new
PA7.3
Pathtools
Perl
1 CVEs0 on KEV0 new
PC–
Pcre
Perl
1 CVEs0 on KEV0 new
SU–
Suidperl
Perl
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-13221 | PE Perl Perl | 9.1 | Jul 13 | Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.10 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is compiled into a trie in Perl_study_chunk |
| CVE-2026-57432 | PE Perl Perl | 8.4 | Jul 13 | Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpack |
| CVE-2026-14740 | DB Dbi Perl | 9.1 | Jul 7 | DBI versions before 1.650 for Perl read one byte out-of-bounds in preparse when deleting an initial SQL comment |
| CVE-2026-14739 | DB Dbi Perl | 9.8 | Jul 7 | DBI versions before 1.650 for Perl have a heap overflow when preparsing SQL statements with an extreme number of placeholders |
| CVE-2026-14380 | DB Dbi Perl | 8.8 | Jul 7 | DBI versions before 1.650 for Perl are vulnerable to code injection via caller-influenced Profile |
| CVE-2026-9698 | DB Dbi Perl | 9.8 | Jun 9 | DBI versions before 1.648 for Perl saved errors in a limited-sized buffer |
| CVE-2026-10879 | DB Dbi Perl | 9.8 | Jun 5 | DBI versions before 1.648 for Perl have a heap overflow when preparsing SQL statements with more than 9 binders |
| CVE-2026-8376 | PE Perl Perl | 9.8 | May 25 | Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds |
| CVE-2026-4176 | PE Perl Perl | 9.8 | Mar 29 | Perl versions from 5.9.4 before 5.40.4-RC1, from 5.41.0 before 5.42.2-RC1, from 5.43.0 before 5.43.9 contain a vulnerable version of Compress::Raw::Zlib |
| CVE-2024-56406 | PE Perl Perl | 8.4 | Apr 13 | A heap buffer overflow vulnerability was discovered in Perl |
| CVE-2023-47039 | PE Perl Perl | 7.8 | Jan 2 | A vulnerability was found in Perl |
| CVE-2023-47038 | PE Perl Perl | 7.8 | Dec 18 | A vulnerability was found in perl 5.30.0 through 5.38.0 |
| CVE-2022-48522 | PE Perl Perl | 9.8 | Aug 22 | In Perl 5.34.0, function S_find_uninit_var in sv.c has a stack-based crash that can lead to remote code execution or local privilege escalation |
| CVE-2023-31486 | PE Perl Perl | 8.1 | Apr 29 | HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration where users must opt in to verify certificates |
| CVE-2023-31484 | PE Perl Perl | 8.1 | Apr 29 | CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS |
| CVE-2020-16156 | CP Comprehensive Perl Archive Network Perl | 7.8 | Dec 13 | CPAN 2.28 allows Signature Verification Bypass |
| CVE-2021-22204 In wildKEV | EX Exiftool Perl | 7.8 | Apr 23 | ExifTool Remote Code Execution Vulnerability |
| CVE-2019-20919 | DB Dbi Perl | 4.7 | Sep 17 | An issue was discovered in the DBI module before 1.643 for Perl |
| CVE-2014-10402 | DB Dbi Perl | 6.1 | Sep 16 | An issue was discovered in the DBI module through 1.643 for Perl |
| CVE-2020-14393 | DI Database Interface Perl | 7.1 | Sep 16 | A buffer overflow was found in perl-DBI < 1.643 in DBI.xs |
| CVE-2020-14392 | DI Database Interface Perl | 5.5 | Sep 16 | An untrusted pointer dereference flaw was found in Perl-DBI < 1.643 |
| CVE-2014-10401 | DB Dbi Perl | 6.1 | Sep 11 | An issue was discovered in the DBI module before 1.632 for Perl |
| CVE-2013-7491 | DB Dbi Perl | 5.3 | Sep 11 | An issue was discovered in the DBI module before 1.628 for Perl |
| CVE-2013-7490 | DB Dbi Perl | 5.3 | Sep 11 | An issue was discovered in the DBI module before 1.632 for Perl |
| CVE-2020-12723 | PE Perl Perl | 7.5 | Jun 5 | regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk calls |
| CVE-2020-10878 | PE Perl Perl | 8.6 | Jun 5 | Perl before 5.30.3 has an integer overflow related to mishandling of a "PL_regkind[OP(n)] == NOTHING" situation |
| CVE-2020-10543 | PE Perl Perl | 8.2 | Jun 5 | Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow |
| CVE-2018-18314 | PE Perl Perl | 9.8 | Dec 7 | Perl before 5.26.3 has a buffer overflow via a crafted regular expression that triggers invalid write operations |
| CVE-2018-18313 | PE Perl Perl | 9.1 | Dec 7 | Perl before 5.26.3 has a buffer over-read via a crafted regular expression that triggers disclosure of sensitive information from process memory |
| CVE-2018-18311 | PE Perl Perl | 9.8 | Dec 7 | Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations |
| CVE-2018-18312 | PE Perl Perl | 9.8 | Dec 5 | Perl before 5.26.3 and 5.28.0 before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations |
| CVE-2018-12015 | PE Perl Perl | 7.5 | Jun 7 | In Perl through 5.26.2, the Archive::Tar module allows remote attackers to bypass a directory-traversal protection mechanism, and overwrite arbitrary files, via an archive file… |
| CVE-2018-6913 | PE Perl Perl | 9.8 | Apr 17 | Heap-based buffer overflow in the pack function in Perl before 5.26.2 allows context-dependent attackers to execute arbitrary code via a large item count |
| CVE-2018-6798 | PE Perl Perl | 7.5 | Apr 17 | An issue was discovered in Perl 5.22 through 5.26 |
| CVE-2018-6797 | PE Perl Perl | 9.8 | Apr 17 | An issue was discovered in Perl 5.18 through 5.26 |
| CVE-2017-12814 | PE Perl Perl | 9.8 | Sep 28 | Stack-based buffer overflow in the CPerlHost::Add method in win32/perlhost.h in Perl before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 on Windows allows attackers to execute… |
| CVE-2017-12883 | PE Perl Perl | 9.1 | Sep 19 | Buffer overflow in the S_grok_bslash_N function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 allows remote attackers to disclose sensitive information or… |
| CVE-2017-12837 | PE Perl Perl | 7.5 | Sep 19 | Heap-based buffer overflow in the S_regatom function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 allows remote attackers to cause a denial of service… |
| CVE-2015-8608 | PE Perl Perl | 9.8 | Feb 7 | The VDir::MapPathA and VDir::MapPathW functions in Perl 5.22 allow remote attackers to cause a denial of service (out-of-bounds read) and possibly execute arbitrary code via a… |
| CVE-2016-6185 | PE Perl Perl | 7.8 | Aug 2 | The XSLoader::load method in XSLoader in Perl does not properly locate .so files when called in a string eval, which might allow local users to execute arbitrary code via a Trojan… |
| CVE-2016-1238 | PE Perl Perl | 7.8 | Aug 2 | (1) cpan/Archive-Tar/bin/ptar, (2) cpan/Archive-Tar/bin/ptardiff, (3) cpan/Archive-Tar/bin/ptargrep, (4) cpan/CPAN/scripts/cpan, (5) cpan/Digest-SHA/shasum, (6)… |
| CVE-2015-8853 | PE Perl Perl | 7.5 | May 25 | The (1) S_reghop3, (2) S_reghop4, and (3) S_reghopmaybe3 functions in regexec.c in Perl before 5.24.0 allow context-dependent attackers to cause a denial of service (infinite… |
| CVE-2016-2381 | PE Perl Perl | 7.5 | Apr 8 | Perl might allow context-dependent attackers to bypass the taint protection mechanism in a child process via duplicate environment variables in envp |
| CVE-2015-8607 | PA Pathtools Perl | 7.3 | Jan 13 | The canonpath function in the File::Spec module in PathTools before 3.62, as used in Perl, does not properly preserve the taint attribute of data, which might allow… |
| CVE-2013-7422 | PE Perl Perl | – | Aug 16 | Integer underflow in regcomp.c in Perl before 5.20, as used in Apple OS X before 10.10.5 and other products, allows context-dependent attackers to execute arbitrary code or cause… |
| CVE-2013-7329 | CA Cgi Application Module Perl | – | Oct 6 | The CGI::Application module before 4.50_50 and 4.50_51 for Perl, when run modes are not specified, allows remote attackers to obtain sensitive information (web queries and… |
| CVE-2014-4330 | PE Perl Perl | – | Sep 30 | The Dumper method in Data::Dumper before 2.154, as used in Perl 5.20.1 and earlier, allows context-dependent attackers to cause a denial of service (stack consumption and crash)… |
| CVE-2010-4777 | PE Perl Perl | – | Feb 10 | The Perl_reg_numbered_buff_fetch function in Perl 5.10.0, 5.12.0, 5.14.0, and other versions, when running with debugging enabled, allows context-dependent attackers to cause a… |
| CVE-2013-1667 | PE Perl Perl | – | Mar 14 | The rehash mechanism in Perl 5.8.2 through 5.16.x allows context-dependent attackers to cause a denial of service (memory consumption and crash) via a crafted hash key |
| CVE-2012-6329 | PE Perl Perl | – | Jan 4 | The _compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7 does not properly handle backslashes and fully qualified method names during… |
| CVE-2011-2728 | PE Perl Perl | – | Dec 21 | The bsd_glob function in the File::Glob module for Perl before 5.14.2 allows context-dependent attackers to cause a denial of service (crash) via a glob expression with the… |
| CVE-2012-5195 | PE Perl Perl | – | Dec 18 | Heap-based buffer overflow in the Perl_repeatcpy function in util.c in Perl 5.12.x before 5.12.5, 5.14.x before 5.14.3, and 5.15.x before 15.15.5 allows context-dependent… |
| CVE-2012-1151 | PE Perl Perl | – | Sep 9 | Multiple format string vulnerabilities in dbdimp.c in DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module before 2.19.0 for Perl allow remote PostgreSQL database servers to cause a… |
| CVE-2011-2939 | PE Perl Perl | – | Jan 13 | Off-by-one error in the decode_xs function in Unicode/Unicode.xs in the Encode module before 2.44, as used in Perl before 5.15.6, might allow context-dependent attackers to cause… |
| CVE-2011-0761 | PE Perl Perl | – | May 13 | Perl 5.10.x allows context-dependent attackers to cause a denial of service (NULL pointer dereference and application crash) by leveraging an ability to inject arguments into a… |
| CVE-2011-1487 | PE Perl Perl | – | Apr 11 | The (1) lc, (2) lcfirst, (3) uc, and (4) ucfirst functions in Perl 5.10.x, 5.11.x, and 5.12.x through 5.12.3, and 5.13.x through 5.13.11, do not apply the taint attribute to the… |
| CVE-2010-1158 | PE Perl Perl | – | Apr 20 | Integer overflow in the regular expression engine in Perl 5.8.x allows context-dependent attackers to cause a denial of service (stack consumption and application crash) by… |
| CVE-2009-3626 | PE Perl Perl | – | Oct 29 | Perl 5.10.1 allows context-dependent attackers to cause a denial of service (application crash) via a UTF-8 character with a large, invalid codepoint, which is not properly… |
| CVE-2008-5303 | FI File::path Perl | – | Dec 1 | Race condition in the rmtree function in File::Path 1.08 (lib/File/Path.pm) in Perl 5.8.8 allows local users to to delete arbitrary files via a symlink attack, a different… |
| CVE-2008-5302 | FI File::path Perl | – | Dec 1 | Race condition in the rmtree function in File::Path 1.08 and 2.07 (lib/File/Path.pm) in Perl 5.8.8 and 5.10.0 allows local users to create arbitrary setuid binaries via a symlink… |