Vulnerability index

Browse CVEs

52 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Perl HIGH 8.4
CVE-2026-57432

Perl versions through 5.43.10 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpack. S_measure_struc…

Fix: after 5.43.10
Fix from $1,950 2026-07-13
Perl CRITICAL 9.1
CVE-2026-13221

Perl versions through 5.43.9 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is co…

Fix: after 5.43.9
Fix from $2,300 2026-07-13
Dbi CRITICAL 9.8
CVE-2026-14739

DBI versions before 1.650 for Perl have a heap overflow when preparsing SQL statements with an extreme number of placeholders. The fix for CVE-2026-…

Fix: 1.650+
Fix from $2,300 2026-07-07
Dbi CRITICAL 9.1
CVE-2026-14740

DBI versions before 1.650 for Perl read one byte out-of-bounds in preparse when deleting an initial SQL comment. The preparse method normalises SQL …

Fix: 1.650+
Fix from $2,300 2026-07-07
Dbi HIGH 8.8
CVE-2026-14380

DBI versions before 1.650 for Perl are vulnerable to code injection via caller-influenced Profile. When a string is assigned to a DBI handle's Profi…

Fix: 1.650+
Fix from $1,950 2026-07-07
Dbi CRITICAL 9.8
CVE-2026-9698

DBI versions before 1.648 for Perl saved errors in a limited-sized buffer. Error messages that were returned when RaiseError, PrintError or HandleEr…

Fix: 1.648+
Fix from $2,300 2026-06-09
Dbi CRITICAL 9.8
CVE-2026-10879

DBI versions before 1.648 for Perl have a heap overflow when preparsing SQL statements with more than 9 binders. The preparse method expands SQL pla…

Fix: 1.648+
Fix from $2,300 2026-06-05
Perl CRITICAL 9.8
CVE-2026-8376

Perl versions through 5.43.10 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds. Perl_stu…

Fix: after 5.43.10
Fix from $2,300 2026-05-26
Perl CRITICAL 9.8
CVE-2026-4176

Perl versions from 5.9.4 before 5.40.4-RC1, from 5.41.0 before 5.42.2-RC1, from 5.43.0 before 5.43.9 contain a vulnerable version of Compress::Raw::Z…

Fix: 5.40.4 / 5.42.2+
Fix from $2,300 2026-03-29
Perl HIGH 8.4
CVE-2024-56406

A heap buffer overflow vulnerability was discovered in Perl. Release branches 5.34, 5.36, 5.38 and 5.40 are affected, including development version…

Fix: 5.38.4 / 5.40.2+
Fix from $1,950 2025-04-13
Perl HIGH 7.8
CVE-2023-47039

A vulnerability was found in Perl. This security issue occurs while Perl for Windows relies on the system path environment variable to find the shell…

Fix: 5.32.1+
Fix from $1,950 2024-01-02
Perl HIGH 7.8
CVE-2023-47038

A vulnerability was found in perl 5.30.0 through 5.38.0. This issue occurs when a crafted regular expression is compiled by perl, which can allow an …

Fix: after 5.38.0
Fix from $1,950 2023-12-18
Perl CRITICAL 9.8
CVE-2022-48522

In Perl 5.34.0, function S_find_uninit_var in sv.c has a stack-based crash that can lead to remote code execution or local privilege escalation.

No fix yet
Fix from $2,300 2023-08-22
Perl HIGH 8.1
CVE-2023-31484

CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS.

Fix: 2.35 / 5.38.0+
Fix from $1,950 2023-04-29
Perl HIGH 8.1
CVE-2023-31486

HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration where users must…

Fix: 0.083 / 5.38.0+
Fix from $1,950 2023-04-29
Comprehensive Perl Archive Network HIGH 7.8
CVE-2020-16156

CPAN 2.28 allows Signature Verification Bypass.

No fix yet
Fix from $1,950 2021-12-13
Dbi MEDIUM 6.1
CVE-2014-10402

An issue was discovered in the DBI module through 1.643 for Perl. DBD::File drivers can open files from folders other than those specifically passed …

Fix: after 1.643
Fix from $1,600 2020-09-16
Database Interface HIGH 7.1
CVE-2020-14393

A buffer overflow was found in perl-DBI < 1.643 in DBI.xs. A local attacker who is able to supply a string longer than 300 characters could cause an …

Fix: 1.643+
Fix from $1,950 2020-09-16
Database Interface MEDIUM 5.5
CVE-2020-14392

An untrusted pointer dereference flaw was found in Perl-DBI < 1.643. A local attacker who is able to manipulate calls to dbd_db_login6_sv() could cau…

Fix: 1.643+
Fix from $1,600 2020-09-16
Dbi MEDIUM 6.1
CVE-2014-10401

An issue was discovered in the DBI module before 1.632 for Perl. DBD::File drivers can open files from folders other than those specifically passed v…

Fix: 1.632+
Fix from $1,600 2020-09-11
Dbi MEDIUM 5.3
CVE-2013-7490

An issue was discovered in the DBI module before 1.632 for Perl. Using many arguments to methods for Callbacks may lead to memory corruption.

Fix: 1.632+
Fix from $1,600 2020-09-11
Dbi MEDIUM 5.3
CVE-2013-7491

An issue was discovered in the DBI module before 1.628 for Perl. Stack corruption occurs when a user-defined function requires a non-trivial amount o…

Fix: 1.628+
Fix from $1,600 2020-09-11
Perl HIGH 7.5
CVE-2020-12723EPSS 6%

regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk calls.

Fix: 5.30.3+
Fix from $1,950 2020-06-05
Perl HIGH 8.6
CVE-2020-10878

Perl before 5.30.3 has an integer overflow related to mishandling of a "PL_regkind[OP(n)] == NOTHING" situation. A crafted regular expression could l…

Fix: 5.30.3+
Fix from $1,950 2020-06-05
Perl HIGH 8.2
CVE-2020-10543EPSS 11%

Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow.

Fix: 5.30.3+
Fix from $1,950 2020-06-05
Perl CRITICAL 9.8
CVE-2018-18311EPSS 12%

Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations.

Fix: 5.26.3 / 5.28.1+
Fix from $2,300 2018-12-07
Perl CRITICAL 9.8
CVE-2018-18314EPSS 6%

Perl before 5.26.3 has a buffer overflow via a crafted regular expression that triggers invalid write operations.

Fix: 5.26.3+
Fix from $2,300 2018-12-07
Perl CRITICAL 9.1
CVE-2018-18313EPSS 10%

Perl before 5.26.3 has a buffer over-read via a crafted regular expression that triggers disclosure of sensitive information from process memory.

Fix: 5.26.3+
Fix from $2,300 2018-12-07
Perl CRITICAL 9.8
CVE-2018-18312EPSS 12%

Perl before 5.26.3 and 5.28.0 before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations.

Fix: 5.26.3 / 5.28.1+
Fix from $2,300 2018-12-05
Perl CRITICAL 9.8
CVE-2017-12814EPSS 7%

Stack-based buffer overflow in the CPerlHost::Add method in win32/perlhost.h in Perl before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 on Windows allows…

Fix: after 5.24.2
Fix from $2,300 2017-09-28