Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Priority MEDIUM 40

Crypt::OpenSSL::PKCS12 versions before 1.98 for Perl allow a NULL pointer dereference in print_attribute via a zero length BMPSTRING attribute.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00609 Published 2026-08-09 Fixed in 1.98 CWE-476
Priority MEDIUM 45

Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow a heap out-of-bounds read via a long certificate extension OID in hv_exts.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00341 Published 2026-07-13 Fixed in 2.1.3 CWE-125
Priority LOW 39

Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow denial of service via NULL pointer dereference.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00309 Published 2026-07-13 Fixed in 2.1.3 CWE-476
Priority MEDIUM 46

Crypt::OpenSSL::PKCS12 versions before 1.96 for Perl permits a heap OOB read in print_attribute UTF8STRING path.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00632 Published 2026-06-20 Fixed in 1.96 CWE-125
Priority MEDIUM 50

Crypt::OpenSSL::PKCS12 versions through 1.94 for Perl have out-of-bounds (OOB) write flaws.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00648 Published 2026-05-17 No fix listed CWE-787