Vendors / BINGOS Records 6 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 3
Exploited now BINGOS records in CISA KEV No BINGOS vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 50
Module::Load versions before 0.22 for Perl allow arbitrary modules outside of @INC to be loaded.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00775 · Published 2026-07-07 · Partial fix · 0.22 CWE-145
Priority MEDIUM 46
Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directory.
CVSS 3.1 CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00502 · Published 2026-05-26 · Partial fix · 3.08 CWE-59
Priority MEDIUM 43
In Perl through 5.26.2, the Archive::Tar module allows remote attackers to bypass a directory-traversal protection mechanism, and overwrite arbitrary files, via an archive file containing a symlink and a regular file wit…
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.0731 · Published 2018-06-07 · Partial fix CWE-59
Priority LOW 39
Archive::Tar versions before 3.08 for Perl extract hardlinks to attacker controlled paths outside the extraction directory.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00458 · Published 2026-05-26 · Partial fix · 3.08 CWE-59
Priority LOW 39
Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00517 · Published 2026-05-26 · Partial fix · 3.10 CWE-789
Priority LOW 37
Directory traversal vulnerability in the Archive::Tar Perl module 1.36 and earlier allows user-assisted remote attackers to overwrite arbitrary files via a TAR archive that contains a file whose name is an absolute path…
CVSS 2.0 MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.04287 · Published 2007-11-02 · Fixed CWE-22
Open these records in search → All records by CVSS severity
2 3 1 0 0
THREATIST.IORead the docs