https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 16:59:03 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-15264 bdu:2026-15264 https://cve.radiocsirt.org/vuln/bdu:2026-15264 https://cve.radiocsirt.org/vuln/bell-cve-2026-15392 <p><strong>Affected:</strong> Alpaquita:23: perl-dbi, Alpaquita:25: perl-dbi, Alpaquita:stream: perl-dbi</p> <p><strong>Affected:</strong> Alpaquita:23: perl-dbi, Alpaquita:25: perl-dbi, Alpaquita:stream: perl-dbi</p> https://cve.radiocsirt.org/vuln/bell-cve-2026-15392 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1094 certfr-2026-avi-1094 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1094 https://cve.radiocsirt.org/vuln/euvd-2026-337950 EUVD-2026-337950 https://cve.radiocsirt.org/vuln/euvd-2026-337950 https://cve.radiocsirt.org/vuln/fkie_cve-2026-15392 <p>DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location.</p> <p>The complete_table_name method builds the absolute table file path without checking whether the file is a symbolic link. A link inside the data directory can point to a table file at any path outside of the configured f_dir and f_dir_search directories.</p> <p>Callers of file-based drivers can read or write files outside of the data directory.</p> <p>DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location.</p> <p>The complete_table_name method builds the absolute table file path without checking whether the file is a symbolic link. A link inside the data directory can point to a table file at any path outside of the configured f_dir and f_dir_search directories.</p> <p>Callers of file-based drivers can read or write files outside of the data directory.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-15392 https://cve.radiocsirt.org/vuln/msrc_cve-2026-15392 msrc_CVE-2026-15392 https://cve.radiocsirt.org/vuln/msrc_cve-2026-15392 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11298-1 <p>perl-DBI-1.651.0-1.1 on GA media</p> <p>perl-DBI-1.651.0-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:11298-1 https://cve.radiocsirt.org/vuln/suse-su-2026:22845-1 <p>Security update for perl-DBI</p> <p>Security update for perl-DBI</p> https://cve.radiocsirt.org/vuln/suse-su-2026:22845-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-15392 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libdbi-perl, Ubuntu:Pro:16.04:LTS: libdbi-perl, Ubuntu:Pro:18.04:LTS: libdbi-perl, Ubuntu:Pro:20.04:LTS: libdbi-perl, Ubuntu:22.04:LTS: libdbi-perl, Ubuntu:24.04:LTS: libdbi-perl, Ubuntu:26.04:LTS: libdbi-perl</p> <p>DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location. The complete_table_name method builds the absolute table file path without checking whether the file is a symbolic link. A link inside the data directory can point to a table file at any path outside of the configured f_dir and f_dir_search directories. Callers of file-based drivers can read or write files outside of the data directory.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libdbi-perl, Ubuntu:Pro:16.04:LTS: libdbi-perl, Ubuntu:Pro:18.04:LTS: libdbi-perl, Ubuntu:Pro:20.04:LTS: libdbi-perl, Ubuntu:22.04:LTS: libdbi-perl, Ubuntu:24.04:LTS: libdbi-perl, Ubuntu:26.04:LTS: libdbi-perl</p> <p>DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location. The complete_table_name method builds the absolute table file path without checking whether the file is a symbolic link. A link inside the data directory can point to a table file at any path outside of the configured f_dir and f_dir_search directories. Callers of file-based drivers can read or write files outside of the data directory.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-15392 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3043 <p>Ein Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, um einen Cross-Site Scripting Angriff durchzuführen und um beliebigen Programmcode auszuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, um einen Cross-Site Scripting Angriff durchzuführen und um beliebigen Programmcode auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3043