Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
App records in CISA KEVNo App vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 50
The App::cpanminus package through 1.7047 for Perl downloads code via insecure HTTP, enabling code execution for network attackers.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00737 · Published 2024-08-27 · Partial fix CWE-494
Priority LOW 35
The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00763 · Published 2021-12-13 · Will not fix CWE-347
Open these records in search →