TIMLEGGE records
6 published records for vendor timlegge.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-190 Integer Overflow or Wraparound2
- CWE-347 Improper Verification of Cryptographic Signature2
- CWE-295 Improper Certificate Validation1
- CWE-331 Insufficient Entropy1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
6 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2026-30909No exploit | Crypt::NaCl::Sodium versions through 2.002 for Perl has potential integer overflowstimlegge · crypt\ · CWE-190 | Critical9.8 | — | 0.5% | Mar 7, 2026 |
39Monitor | CVE-2026-18108No exploit | Net::SAML2 versions before 0.86 for Perl allow authentication bypass because _verify_encrypted_assertion accepts an EncryptedAssertion whose decrypted content ctimlegge · net::saml2 · CWE-347 | Critical9.8 | — | 0.3% | Aug 3, 2026 |
36Monitor | CVE-2026-2588No exploit | Crypt::NaCl::Sodium versions through 2.001 for Perl has an integer overflow flaw on 32-bit systemstimlegge · crypt\ · CWE-190 | Critical9.1 | — | 0.3% | Feb 22, 2026 |
35Monitor | CVE-2025-1828No exploit | Perl's Crypt::Random module after 1.05 and before 1.56 may use rand() function for cryptographic functionstimlegge · crypt\ · CWE-331 | High8.8 | — | 0.4% | Mar 10, 2025 |
32Monitor | CVE-2026-18092No exploit | Net::SAML2 versions before 0.86 for Perl allow SAML authentication bypass via XML signature wrapping because new_from_xml reads assertion identity with documenttimlegge · net::saml2 · CWE-347 | High8.1 | — | 0.3% | Aug 3, 2026 |
30Monitor | CVE-2026-18089No exploit | Net::SAML2 versions before 0.86 for Perl allow SAML authentication bypass by verifying responses against the response-embedded certificate in verify_xml when notimlegge · net::saml2 · CWE-295 | High7.5 | — | 0.2% | Aug 3, 2026 |
- CVE-2026-3090939Monitor
Crypt::NaCl::Sodium versions through 2.002 for Perl has potential integer overflows
CriticalCVSS 9.8No exploitEPSS 0%timlegge · crypt\Mar 7, 2026
- CVE-2026-1810839Monitor
Net::SAML2 versions before 0.86 for Perl allow authentication bypass because _verify_encrypted_assertion accepts an EncryptedAssertion whose decrypted content c
CriticalCVSS 9.8No exploitEPSS 0%timlegge · net::saml2Aug 3, 2026
- CVE-2026-258836Monitor
Crypt::NaCl::Sodium versions through 2.001 for Perl has an integer overflow flaw on 32-bit systems
CriticalCVSS 9.1No exploitEPSS 0%timlegge · crypt\Feb 22, 2026
- CVE-2025-182835Monitor
Perl's Crypt::Random module after 1.05 and before 1.56 may use rand() function for cryptographic functions
HighCVSS 8.8No exploitEPSS 0%timlegge · crypt\Mar 10, 2025
- CVE-2026-1809232Monitor
Net::SAML2 versions before 0.86 for Perl allow SAML authentication bypass via XML signature wrapping because new_from_xml reads assertion identity with document
HighCVSS 8.1No exploitEPSS 0%timlegge · net::saml2Aug 3, 2026
- CVE-2026-1808930Monitor
Net::SAML2 versions before 0.86 for Perl allow SAML authentication bypass by verifying responses against the response-embedded certificate in verify_xml when no
HighCVSS 7.5No exploitEPSS 0%timlegge · net::saml2Aug 3, 2026