Where
-Infinity
0

Perl Form::Processor::Field::HtmlAaForm::Processor::Field::HtmlArea versions from 0.06 through 1.162360 for Perl allow attacker selected method dispatch and resource exhaustion via an HTML::Tidy diagnostic that validate passes to add_error as a Locale::Maketext template

Risk 70
Severity
9.1
First published (updated )

Perl Data::MuForm::LocalizerData::MuForm::Localizer versions through 0.05 for Perl execute Perl from a message catalog header, reached at an arbitrary path because load_lexicon interpolates the language attribute into the catalog filename

Risk 57
Severity
8.2
First published (updated )

HTML::FormHandler HTML::FormHandlerHTML::FormHandler versions through 0.40068 for Perl allow attacker selected method dispatch and resource exhaustion because _apply_actions and add_error use error message text built from request data as a Locale::Maketext bracket notation template

Risk 70
Severity
9.1
First published (updated )

Perl PerlPerl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in S_find_byclass

Risk 28
Severity
5.3
First published (updated )

Apache Shindig CommonApache Shindig Common, Apache Shindig Social-Api: Remote Code Execution via XStream deserialization (OpenSocial REST API)

Risk 70
Severity
7.2
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

PDF::WebKit PDF::WebKit (Perl)PDF::WebKit versions through 1.2 for Perl allow OS command injection via a 2-arg open() of the output path in to_pdf and of stylesheet paths in _style_tag_for

Risk 43
Severity
6.1
First published (updated )

PDF::WebKitPDF::WebKit versions through 1.2 for Perl allow argument injection into wkhtmltopdf via meta tags in the source document

Risk 90
Severity
9.8
First published (updated )

Apache HttpComponents ClientApache HttpComponents Client: TLS hostname verification silently disabled on the async transport (default config, MITM)

Risk 70
Severity
9.1
First published (updated )

Microsoft Windows 10Windows Deployment Services TFTP Server Remote Code Execution Vulnerability

Risk 90
Severity
9.8
First published (updated )

Cisco Adaptive Security Appliance SoftwareCisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability

Risk 65
Severity
8.6
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Microsoft Windows 10Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability

Risk 81
Severity
7
First published (updated )

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203