Comprueba tu versión
perl -vCVE que afectan a 2.4
| CVE | Título | CVSS | Explotada | EPSS | Publicación |
|---|---|---|---|---|---|
| CVE-2017-12814 | Stack-based buffer overflow in the CPerlHost::Add method in win32/perlhost.h in Perl before 5.24.3-RC1 and 5.2... | 9.8 | — | 2017-09-28 | |
| CVE-2018-6913 | Heap-based buffer overflow in the pack function in Perl before 5.26.2 allows context-dependent attackers to ex... | 9.8 | — | 2018-04-18 | |
| CVE-2018-18312 | Perl before 5.26.3 and 5.28.0 before 5.28.1 has a buffer overflow via a crafted regular expression that trigge... | 9.8 | — | 2018-12-06 | |
| CVE-2018-18311 | Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular expression that trigge... | 9.8 | — | 2018-12-08 | |
| CVE-2018-18314 | Perl before 5.26.3 has a buffer overflow via a crafted regular expression that triggers invalid write operatio... | 9.8 | — | 2018-12-08 | |
| CVE-2017-12883 | Buffer overflow in the S_grok_bslash_N function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26.x before 5.2... | 9.1 | — | 2017-09-20 | |
| CVE-2018-18313 | Perl before 5.26.3 has a buffer over-read via a crafted regular expression that triggers disclosure of sensiti... | 9.1 | — | 2018-12-08 | |
| CVE-2026-13221 | Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.10 produce silently in... | 9.1 | — | 2026-07-14 | |
| CVE-2020-10878 | Perl before 5.30.3 has an integer overflow related to mishandling of a "PL_regkind[OP(n)] == NOTHING" situatio... | 8.6 | — | 2020-06-05 | |
| CVE-2026-57432 | Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have an integer ove... | 8.4 | — | 2026-07-14 | |
| CVE-2020-10543 | Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression q... | 8.2 | — | 2020-06-05 | |
| CVE-2023-31484 | CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS. | 8.1 | — | 2023-04-28 | |
| CVE-2023-31486 | HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure def... | 8.1 | — | 2023-04-28 | |
| CVE-2023-47039 | Perl: perl for windows binary hijacking vulnerability | 7.8 | — | 2024-01-02 | |
| CVE-2012-6329 | The _compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7 does not pro... | 7.5 | — | 2013-01-05 | |
| CVE-2016-2381 | Perl might allow context-dependent attackers to bypass the taint protection mechanism in a child process via d... | 7.5 | — | 2016-04-09 | |
| CVE-2015-8853 | The (1) S_reghop3, (2) S_reghop4, and (3) S_reghopmaybe3 functions in regexec.c in Perl before 5.24.0 allow co... | 7.5 | — | 2016-05-26 | |
| CVE-2017-12837 | Heap-based buffer overflow in the S_regatom function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26.x befor... | 7.5 | — | 2017-09-20 | |
| CVE-2018-12015 | In Perl through 5.26.2, the Archive::Tar module allows remote attackers to bypass a directory-traversal protec... | 7.5 | — | 2018-06-07 | |
| CVE-2020-12723 | regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive... | 7.5 | — | 2020-06-05 | |
| CVE-2026-8376 | Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have a heap buffer... | 7.3 | — | 2026-05-26 | |
| CVE-1999-1386 | Perl 5.004_04 and earlier follows symbolic links when running with the -e option, which allows local users to... | 5.5 | — | 2002-03-09 | |
| CVE-2011-2939 | Off-by-one error in the decode_xs function in Unicode/Unicode.xs in the Encode module before 2.44, as used in... | 5.1 | — | 2012-01-14 | |
| CVE-2012-1151 | Multiple format string vulnerabilities in dbdimp.c in DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module before 2.1... | 5.0 | — | 2012-09-10 | |
| CVE-2011-2728 | The bsd_glob function in the File::Glob module for Perl before 5.14.2 allows context-dependent attackers to ca... | 4.3 | — | 2012-12-21 | |
| CVE-2014-4330 | The Dumper method in Data::Dumper before 2.154, as used in Perl 5.20.1 and earlier, allows context-dependent a... | 2.1 | — | 2014-10-01 |
Controla estas versiones en tus propios servidores
InfraGuard recopila las versiones de software instaladas en cada servidor y señala las que tienen vulnerabilidades conocidas. Autoalojado: nada sale de tu red.
Datos: CVE List (CVE® Program), NVD, CISA KEV, FIRST EPSS (consulta EPSS en https://www.first.org/epss), endoflife.date. Lista de software: awesome-selfhosted (CC BY-SA 3.0).