Vulnerability index

Browse CVEs

5 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

HIGH 7.5 CVE-2026-18568 XML::Sig versions from 0.29 before 0.72 for Perl allow signature verification bypass because verify returns true when every signature was skipped bef… \ 0.72+ Fix from $1,9502026-08-03 CRITICAL 9.1 CVE-2026-9487 XML::Sig versions before 0.71 for Perl allow signature wrapping via duplicate ID. _get_signed_xml() in lib/XML/Sig.pm, called from verify(), resolve… \ 0.71+ Fix from $2,3002026-08-03 CRITICAL 9.1 CVE-2026-9390 XML::Sig versions before 0.71 for Perl allow XPath injection in ID lookup. verify() and _get_signed_xml() in lib/XML/Sig.pm build XPath expressions … \ 0.71+ Fix from $2,3002026-08-03 CRITICAL 9.3 CVE-2025-40934 XML-Sig versions 0.27 through 0.67 for Perl incorrectly validates XML files if signatures are omitted. An attacker can remove the signature from the… \ after 0.67 Fix from $2,3002025-11-26 HIGH 7.5 CVE-2012-1102 It was discovered that the XML::Atom Perl module before version 0.39 did not disable external entities when parsing XML from potentially untrusted so… \ 0.39+ Fix from $1,9502021-07-09