TI-2026-12661 CVE-2026-15043
DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted <= and >= SQL…
Priority MEDIUM 50
DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted <= and >= SQL operators on text.
HMBRAND
Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
HMBRAND records in CISA KEVNo HMBRAND vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
9 records
TI-2026-12417 CVE-2026-14739 · GHSA-w9gf-c5hh-cc8w
Out-of-bounds write in HMBRAND DBI
Priority MEDIUM 49
DBI versions before 1.650 for Perl have a heap overflow when preparsing SQL statements with an extreme number of placeholders.
TI-2026-09339 CVE-2026-10879 · GHSA-c7xw-cj86-m724
Out-of-bounds write in HMBRAND DBI
Priority MEDIUM 49
DBI versions before 1.648 for Perl have a heap overflow when preparsing SQL statements with more than 9 binders.
TI-2026-08500 CVE-2026-9698 · GHSA-83j7-3c78-fq8j
Out-of-bounds write in HMBRAND DBI
Priority MEDIUM 48
DBI versions before 1.648 for Perl saved errors in a limited-sized buffer.
TI-2026-12418 CVE-2026-14740
Out-of-bounds read in HMBRAND DBI
Priority MEDIUM 47
DBI versions before 1.650 for Perl read one byte out-of-bounds in preparse when deleting an initial SQL comment.
TI-2026-42812 CVE-2026-60082
Out-of-bounds read in HMBRAND DBI
Priority MEDIUM 46
DBI versions before 1.651 for Perl do not enforce statement handle consistency with the row.
Priority MEDIUM 40
DBI::ProfileData versions before 1.651 for Perl do not limit the path index.
TI-2026-06234 CVE-2026-7111 · GHSA-29pg-8q2m-r6xm
Use after free in HMBRAND Text::CSV_XS
Priority LOW 38
Text::CSV_XS versions before 1.62 for Perl have a use-after-free when registered callbacks extend the Perl argument stack, which may enable type confusion or memory corruption.
TI-2026-12952 CVE-2026-15392
Path traversal in HMBRAND DBD::File
Priority LOW 35
DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location.