Page 3 of 23 results (0.004 seconds)

CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 5

CVE-2014-4330 – Mandriva Linux Security Advisory 2014-199

https://notcve.org/view.php?id=CVE-2014-4330

25 Sep 2014 — The Dumper method in Data::Dumper before 2.154, as used in Perl 5.20.1 and earlier, allows context-dependent attackers to cause a denial of service (stack consumption and crash) via an Array-Reference with many nested Array-References, which triggers a large number of recursive calls to the DD_dump function. El método Dumper en Data::Dumper anterior a 2.154, utilizado en Perl 5.20.1 y anteriores, permite a atacantes dependientes de contexto causar una denegación de servicio (consumo de la pila y caída) a tr... • https://packetstorm.news/files/id/128422 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 10.0EPSS: 3%CPEs: 61EXPL: 0

CVE-2013-1667 – perl: DoS in rehashing code

https://notcve.org/view.php?id=CVE-2013-1667

09 Mar 2013 — The rehash mechanism in Perl 5.8.2 through 5.16.x allows context-dependent attackers to cause a denial of service (memory consumption and crash) via a crafted hash key. El mecanismo de rehash en Perl v5.8.2 a través v5.16.x permite a atacantes dependientes de contexto provocar una denegación de servicio (consumo de memoria y caída) mediante una tecla de almohadilla diseñada. Perl is a high-level programming language commonly used for system administration utilities and web programming. A heap overflow flaw ... • http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=702296 • CWE-399: Resource Management Errors •

CVSS: 10.0EPSS: 82%CPEs: 51EXPL: 5

CVE-2012-6329 – Foswiki MAKETEXT - Remote Command Execution

https://notcve.org/view.php?id=CVE-2012-6329

15 Dec 2012 — The _compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7 does not properly handle backslashes and fully qualified method names during compilation of bracket notation, which allows context-dependent attackers to execute arbitrary commands via crafted input to an application that accepts translation strings from users, as demonstrated by the TWiki application before 5.1.3, and the Foswiki application 1.0.x through 1.0.10 and 1.1.x through 1.1.6. La función _compile en ... • https://packetstorm.news/files/id/119055 • CWE-94: Improper Control of Generation of Code ('Code Injection') •