Vendors / TOKUHIROM Records 6 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 3
CVSS high 0
Exploited now TOKUHIROM records in CISA KEV No TOKUHIROM vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 50
Image::EPEG versions through 0.15 for Perl embeds an unsupported version of the Epeg library.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00701 · Published 2026-07-16 · No fix listed CWE-1104
Priority MEDIUM 49
UnQLite versions through 0.06 for Perl uses a potentially insecure version of the UnQLite library.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00464 · Published 2026-03-05 · No fix listed CWE-1395
Priority MEDIUM 49
Amon2 versions before 6.17 for Perl use an insecure random_string implementation for security functions.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0053 · Published 2026-03-28 · Fixed in 6.17 CWE-338
Priority LOW 35
HTTP::Session2 versions before 1.12 for Perl for Perl may generate weak session ids using the rand() function.
CVSS 3.1 MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00461 · Published 2026-02-27 · Fixed in 1.12 CWE-338
Priority LOW 35
HTTP::Session2 versions through 1.09 for Perl does not validate the format of user provided session ids, enabling code injection or other impact depending on session backend.
CVSS 3.1 MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00446 · Published 2026-02-27 · No fix listed CWE-20
Priority LOW 30
Amon2::Plugin::Web::CSRFDefender versions from 7.00 through 7.03 for Perl generate an insecure session id.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00421 · Published 2026-04-08 · No fix listed CWE-338
Open these records in search → All records by CVSS severity
3 0 3 0 0
THREATIST.IORead the docs