Search Vulnerabilities

Image::WebP versions before 0.3.0 for Perl bundle a vulnerable version of libwebp

TOML::XS versions before 0.06 for Perl bundle an unsupported and vulnerable version of tomlc99

Logto: SAML IdP injects user-controlled profile attributes raw into signed assertions, allowing privilege escalation at relying Service Providers

Dreamweaver Desktop | Dependency on Vulnerable Third-Party Component (CWE-1395)

Improper URL Handler Processing in D.Launcher 2 enables NTLM Credential Disclosure and SSRF attacks

HCL BigFix Service Management (SM) is susceptible to a Configuration – 'Insecure Use of Base Image Version'

Hitachi Vantara Pentaho Data Integration & Analytics - Dependency on Vulnerable Third-Party Component

Adobe Commerce | Dependency on Vulnerable Third-Party Component (CWE-1395)

Adobe Commerce | Dependency on Vulnerable Third-Party Component (CWE-1395)

Alien::FreeImage versions through 1.001 for Perl contains several vulnerable libraries

HCL DFXAnalytics is affected by an Insecure Security Header configuration vulnerability

Net::Dropbear versions before 0.14 for Perl contains a vulnerable version of libtomcrypt

Sereal::Encoder versions from 4.000 through 4.009_002 for Perl embeds a vulnerable version of the Zstandard library

Sereal::Decoder versions from 4.000 through 4.009_002 for Perl embeds a vulnerable version of the Zstandard library

Perl versions from 5.9.4 before 5.40.4-RC1, from 5.41.0 before 5.42.2-RC1, from 5.43.0 before 5.43.9 contain a vulnerable version of Compress::Raw:...

GitHub: Zero Shot SCFoundation Remote Code Execution Vulnerability

UnQLite versions through 0.06 for Perl uses a potentially insecure version of the UnQLite library

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib

HarfBuzz::Shaper versions before 0.032 for Perl contains a bundled library with a null pointer dereference vulnerability

Spectrum outdated java library in class-path