Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

9 records

Priority MEDIUM 46

DBI versions before 1.651 for Perl do not enforce statement handle consistency with the row.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00653 Published 2026-07-14 Partial fix · 1.651 CWE-125
Priority LOW 35

DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location.

CVSS 3.1HIGH 7.7 Local No auth No interaction EPSS 0.00196 Published 2026-07-14 Partial fix · 1.651 CWE-22
Priority MEDIUM 47

DBI versions before 1.650 for Perl read one byte out-of-bounds in preparse when deleting an initial SQL comment.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00387 Published 2026-07-07 Partial fix · 1.650 CWE-125
TI-2026-12417 CVE-2026-14739 · GHSA-w9gf-c5hh-cc8w

Out-of-bounds write in HMBRAND DBI

Priority MEDIUM 49

DBI versions before 1.650 for Perl have a heap overflow when preparsing SQL statements with an extreme number of placeholders.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00413 Published 2026-07-07 Partial fix · 1.650 CWE-787
TI-2026-08500 CVE-2026-9698 · GHSA-83j7-3c78-fq8j

Out-of-bounds write in HMBRAND DBI

Priority MEDIUM 48

DBI versions before 1.648 for Perl saved errors in a limited-sized buffer.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00464 Published 2026-06-09 Partial fix · 1.648 CWE-787
TI-2026-09339 CVE-2026-10879 · GHSA-c7xw-cj86-m724

Out-of-bounds write in HMBRAND DBI

Priority MEDIUM 49

DBI versions before 1.648 for Perl have a heap overflow when preparsing SQL statements with more than 9 binders.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00485 Published 2026-06-05 Partial fix · 1.648 CWE-787
TI-2026-06234 CVE-2026-7111 · GHSA-29pg-8q2m-r6xm

Use after free in HMBRAND Text::CSV_XS

Priority LOW 38

Text::CSV_XS versions before 1.62 for Perl have a use-after-free when registered callbacks extend the Perl argument stack, which may enable type confusion or memory corruption.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00158 Published 2026-04-29 Fixed in 1.62 CWE-416