mojolicious kayıtları
mojolicious üreticisine ait 10 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %70
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-20 Improper Input Validation2
- CWE-400 Uncontrolled Resource Consumption2
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-321 Use of Hard-coded Cryptographic Key1
- CWE-338 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
10 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
41Planlayın | CVE-2010-4802İstismar yok | Commands.pm in Mojolicious before 0.999928 does not properly perform CGI environment detection, which has unspecified impact and remote attamojolicious · mojolicious · CWE-20 | Kritik10,0 | — | %2,0 | 2 May 2011 |
41Planlayın | CVE-2010-4803İstismar yok | Mojolicious before 0.999927 does not properly implement HMAC-MD5 checksums, which has unspecified impact and remote attack vectors.mojolicious · mojolicious · CWE-20 | Kritik10,0 | — | %2,0 | 2 May 2011 |
40Planlayın | CVE-2009-5074İstismar yok | Unspecified vulnerability in the MojoX::Dispatcher::Static implementation in Mojolicious before 0.991250 has unknown impact and attack vectomojolicious · mojolicious | Kritik10,0 | — | %1,3 | 2 May 2011 |
32İzleyin | CVE-2024-58134İstismar yok | Mojolicious versions from 0.999922 for Perl uses a hard coded string, or the application's class name, as an HMAC session cookie secret by defaultmojolicious · mojolicious · CWE-321 | Yüksek8,1 | — | %0,5 | 3 May 2025 |
30İzleyin | CVE-2020-36829İstismar yok | The Mojolicious module before 8.65 for Perl is vulnerable to secure_compare timing attacks that allow an attacker to guess the length of a s | Yüksek7,5 | — | %0,5 | 7 Nis 2024 |
21İzleyin | CVE-2011-1589İstismar yok | Directory traversal vulnerability in Path.pm in Mojolicious before 1.16 allows remote attackers to read arbitrary files via a %2f..%2f (encomojolicious · mojolicious · CWE-22 | Orta5,0 | — | %3,8 | 29 Nis 2011 |
21İzleyin | CVE-2024-58135İstismar yok | Mojolicious versions from 7.28 through 9.45 for Perl will generate weak HMAC session cookie secrets via "mojo generate app" by defaultmojolicious · mojolicious · CWE-338 | Orta5,3 | — | %0,5 | 3 May 2025 |
21İzleyin | CVE-2018-25100İstismar yok | The Mojolicious module before 7.66 for Perl may leak cookies in certain situations related to multiple similar cookies for the same domain.CWE-400 | Orta5,3 | — | %0,5 | 23 Mar 2024 |
18İzleyin | CVE-2011-1841İstismar yok | Cross-site scripting (XSS) vulnerability in the link_to helper in Mojolicious before 1.12 allows remote attackers to inject arbitrary web scmojolicious · mojolicious · CWE-79 | Orta4,3 | — | %1,7 | 2 May 2011 |
17İzleyin | CVE-2021-47208İstismar yok | The Mojolicious module before 9.11 for Perl has a bug in format detection that can potentially be exploited for denial of service.mojolicious · mojolicious · CWE-400 | Orta4,3 | — | %0,5 | 7 Nis 2024 |
- CVE-2010-480241Planlayın
Commands.pm in Mojolicious before 0.999928 does not properly perform CGI environment detection, which has unspecified impact and remote atta
KritikCVSS 10,0İstismar yokEPSS %2mojolicious · mojolicious2 May 2011
- CVE-2010-480341Planlayın
Mojolicious before 0.999927 does not properly implement HMAC-MD5 checksums, which has unspecified impact and remote attack vectors.
KritikCVSS 10,0İstismar yokEPSS %2mojolicious · mojolicious2 May 2011
- CVE-2009-507440Planlayın
Unspecified vulnerability in the MojoX::Dispatcher::Static implementation in Mojolicious before 0.991250 has unknown impact and attack vecto
KritikCVSS 10,0İstismar yokEPSS %1mojolicious · mojolicious2 May 2011
- CVE-2024-5813432İzleyin
Mojolicious versions from 0.999922 for Perl uses a hard coded string, or the application's class name, as an HMAC session cookie secret by default
YüksekCVSS 8,1İstismar yokEPSS %0mojolicious · mojolicious3 May 2025
- CVE-2020-3682930İzleyin
The Mojolicious module before 8.65 for Perl is vulnerable to secure_compare timing attacks that allow an attacker to guess the length of a s
YüksekCVSS 7,5İstismar yokEPSS %07 Nis 2024
- CVE-2011-158921İzleyin
Directory traversal vulnerability in Path.pm in Mojolicious before 1.16 allows remote attackers to read arbitrary files via a %2f..%2f (enco
OrtaCVSS 5,0İstismar yokEPSS %3mojolicious · mojolicious29 Nis 2011
- CVE-2024-5813521İzleyin
Mojolicious versions from 7.28 through 9.45 for Perl will generate weak HMAC session cookie secrets via "mojo generate app" by default
OrtaCVSS 5,3İstismar yokEPSS %0mojolicious · mojolicious3 May 2025
- CVE-2018-2510021İzleyin
The Mojolicious module before 7.66 for Perl may leak cookies in certain situations related to multiple similar cookies for the same domain.
OrtaCVSS 5,3İstismar yokEPSS %023 Mar 2024
- CVE-2011-184118İzleyin
Cross-site scripting (XSS) vulnerability in the link_to helper in Mojolicious before 1.12 allows remote attackers to inject arbitrary web sc
OrtaCVSS 4,3İstismar yokEPSS %1mojolicious · mojolicious2 May 2011
- CVE-2021-4720817İzleyin
The Mojolicious module before 9.11 for Perl has a bug in format detection that can potentially be exploited for denial of service.
OrtaCVSS 4,3İstismar yokEPSS %0mojolicious · mojolicious7 Nis 2024