https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 22:27:17 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-00130 bdu:2024-00130 https://cve.radiocsirt.org/vuln/bdu:2024-00130 https://cve.radiocsirt.org/vuln/brew-texlive-cve-2023-7101 <p><strong>Affected:</strong> Homebrew: texlive</p> <p>Spreadsheet::ParseExcel version 0.65 is a Perl module used for parsing Excel files. Spreadsheet::ParseExcel is vulnerable to an arbitrary code execution (ACE) vulnerability due to passing unvalidated input from a file into a string-type “eval”. Specifically, the issue stems from the evaluation of Number format strings (not to be confused with printf-style format strings) within the Excel parsing logic.</p> <p><strong>Affected:</strong> Homebrew: texlive</p> <p>Spreadsheet::ParseExcel version 0.65 is a Perl module used for parsing Excel files. Spreadsheet::ParseExcel is vulnerable to an arbitrary code execution (ACE) vulnerability due to passing unvalidated input from a file into a string-type “eval”. Specifically, the issue stems from the evaluation of Number format strings (not to be confused with printf-style format strings) within the Excel parsing logic.</p> https://cve.radiocsirt.org/vuln/brew-texlive-cve-2023-7101 https://cve.radiocsirt.org/vuln/euvd-2026-255670 EUVD-2026-255670 https://cve.radiocsirt.org/vuln/euvd-2026-255670 https://cve.radiocsirt.org/vuln/fkie_cve-2023-7101 <p>Spreadsheet::ParseExcel version 0.65 is a Perl module used for parsing Excel files. Spreadsheet::ParseExcel is vulnerable to an arbitrary code execution (ACE) vulnerability due to passing unvalidated input from a file into a string-type “eval”. Specifically, the issue stems from the evaluation of Number format strings (not to be confused with printf-style format strings) within the Excel parsing logic.</p> <p>Spreadsheet::ParseExcel version 0.65 is a Perl module used for parsing Excel files. Spreadsheet::ParseExcel is vulnerable to an arbitrary code execution (ACE) vulnerability due to passing unvalidated input from a file into a string-type “eval”. Specifically, the issue stems from the evaluation of Number format strings (not to be confused with printf-style format strings) within the Excel parsing logic.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-7101 https://cve.radiocsirt.org/vuln/ghsa-3c85-mx4x-435c <p>Spreadsheet::ParseExcel version 0.65 is a Perl module used for parsing Excel files. Spreadsheet::ParseExcel is vulnerable to an arbitrary code execution (ACE) vulnerability due to passing unvalidated input from a file into a string-type “eval”. Specifically, the issue stems from the evaluation of Number format strings (not to be confused with printf-style format strings) within the Excel parsing logic.</p> <p>Spreadsheet::ParseExcel version 0.65 is a Perl module used for parsing Excel files. Spreadsheet::ParseExcel is vulnerable to an arbitrary code execution (ACE) vulnerability due to passing unvalidated input from a file into a string-type “eval”. Specifically, the issue stems from the evaluation of Number format strings (not to be confused with printf-style format strings) within the Excel parsing logic.</p> https://cve.radiocsirt.org/vuln/ghsa-3c85-mx4x-435c https://cve.radiocsirt.org/vuln/gsd-2023-7101 gsd-2023-7101 https://cve.radiocsirt.org/vuln/gsd-2023-7101 https://cve.radiocsirt.org/vuln/oesa-2025-2507 <p><strong>Affected:</strong> openEuler:24.03-LTS: perl-Spreadsheet-ParseExcel</p> <p>The Spreadsheet::ParseExcel module can be used to read information from an Excel 95-2003 file. Security Fix(es):</p> <p>Spreadsheet::ParseExcel version 0.65, a Perl module for parsing Excel files, is vulnerable to arbitrary code execution (ACE) due to passing unvalidated input from a file into a string-type eval. The issue specifically arises from the evaluation of Number format strings (distinct from printf-style format strings) within the Excel parsing logic.(CVE-2023-7101)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS: perl-Spreadsheet-ParseExcel</p> <p>The Spreadsheet::ParseExcel module can be used to read information from an Excel 95-2003 file. Security Fix(es):</p> <p>Spreadsheet::ParseExcel version 0.65, a Perl module for parsing Excel files, is vulnerable to arbitrary code execution (ACE) due to passing unvalidated input from a file into a string-type eval. The issue specifically arises from the evaluation of Number format strings (distinct from printf-style format strings) within the Excel parsing logic.(CVE-2023-7101)</p> https://cve.radiocsirt.org/vuln/oesa-2025-2507 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13558-1 <p>perl-Spreadsheet-ParseExcel-0.660.0-1.1 on GA media</p> <p>perl-Spreadsheet-ParseExcel-0.660.0-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:13558-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-7101 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libspreadsheet-parseexcel-perl, Ubuntu:Pro:16.04:LTS: libspreadsheet-parseexcel-perl, Ubuntu:Pro:18.04:LTS: libspreadsheet-parseexcel-perl, Ubuntu:20.04:LTS: libspreadsheet-parseexcel-perl, Ubuntu:22.04:LTS: libspreadsheet-parseexcel-perl</p> <p>Spreadsheet::ParseExcel version 0.65 is a Perl module used for parsing Excel files. Spreadsheet::ParseExcel is vulnerable to an arbitrary code execution (ACE) vulnerability due to passing unvalidated input from a file into a string-type “eval”. Specifically, the issue stems from the evaluation of Number format strings (not to be confused with printf-style format strings) within the Excel parsing logic.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libspreadsheet-parseexcel-perl, Ubuntu:Pro:16.04:LTS: libspreadsheet-parseexcel-perl, Ubuntu:Pro:18.04:LTS: libspreadsheet-parseexcel-perl, Ubuntu:20.04:LTS: libspreadsheet-parseexcel-perl, Ubuntu:22.04:LTS: libspreadsheet-parseexcel-perl</p> <p>Spreadsheet::ParseExcel version 0.65 is a Perl module used for parsing Excel files. Spreadsheet::ParseExcel is vulnerable to an arbitrary code execution (ACE) vulnerability due to passing unvalidated input from a file into a string-type “eval”. Specifically, the issue stems from the evaluation of Number format strings (not to be confused with printf-style format strings) within the Excel parsing logic.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-7101 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-3213 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Perl ausnutzen, um beliebigen Programmcode auszuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Perl ausnutzen, um beliebigen Programmcode auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-3213