https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-20T01:08:14.742939+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/brew-perl-dbd-mysql-cve-2017-10789 BREW-perl-dbd-mysql-CVE-2017-10789 2026-10-20T01:08:14.748455+00:00

Affected: Homebrew: perl-dbd-mysql

The DBD::mysql module through 4.043 for Perl uses the mysql_ssl=1 setting to mean that SSL is optional (even though this setting's documentation has a "your communication with the server will be encrypted" statement), which allows man-in-the-middle attackers to spoof servers via a cleartext-downgrade attack, a related issue to CVE-2015-3152.

 https://cve.radiocsirt.org/vuln/cnvd-2017-21506 cnvd-2017-21506 2026-10-20T01:08:14.748504+00:00 cnvd-2017-21506 https://cve.radiocsirt.org/vuln/euvd-2026-76359 EUVD-2026-76359 2026-10-20T01:08:14.748522+00:00 EUVD-2026-76359 https://cve.radiocsirt.org/vuln/fkie_cve-2017-10789 fkie_cve-2017-10789 2026-10-20T01:08:14.748534+00:00

The DBD::mysql module through 4.043 for Perl uses the mysql_ssl=1 setting to mean that SSL is optional (even though this setting's documentation has a "your communication with the server will be encrypted" statement), which allows man-in-the-middle attackers to spoof servers via a cleartext-downgrade attack, a related issue to CVE-2015-3152.

 https://cve.radiocsirt.org/vuln/ghsa-4384-9v4p-2vmf GHSA-4384-9v4p-2vmf 2026-10-20T01:08:14.748556+00:00

The DBD::mysql module through 4.043 for Perl uses the mysql_ssl=1 setting to mean that SSL is optional (even though this setting's documentation has a "your communication with the server will be encrypted" statement), which allows man-in-the-middle attackers to spoof servers via a cleartext-downgrade attack, a related issue to CVE-2015-3152.

 https://cve.radiocsirt.org/vuln/gsd-2017-10789 gsd-2017-10789 2026-10-20T01:08:14.748571+00:00 gsd-2017-10789 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11160-1 openSUSE-SU-2024:11160-1 — perl-DBD-mysql-4.050-2.14 on GA media 2026-10-20T01:08:14.748582+00:00

perl-DBD-mysql-4.050-2.14 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2018:1449-1 SUSE-SU-2018:1449-1 — Security update for perl-DBD-mysql 2026-10-20T01:08:14.748597+00:00

Security update for perl-DBD-mysql

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-10789 UBUNTU-CVE-2017-10789 2026-10-20T01:08:14.748611+00:00

Affected: Ubuntu:Pro:14.04:LTS: libdbd-mysql-perl, Ubuntu:Pro:16.04:LTS: libdbd-mysql-perl

The DBD::mysql module through 4.043 for Perl uses the mysql_ssl=1 setting to mean that SSL is optional (even though this setting's documentation has a "your communication with the server will be encrypted" statement), which allows man-in-the-middle attackers to spoof servers via a cleartext-downgrade attack, a related issue to CVE-2015-3152.