Known vulnerabilities in perl-Git - page 2

Vendor: openEuler
Software: perl-Git
Software CPE: cpe:2.3:o:openeuler:perl-git:*:*:*:*:*:openeuler:*:*
Total vulnerabilities: 33
Public exploits: 5
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting perl-Git perl-Git is affected by 33 known vulnerabilities: 13 high, 11 medium, 9 low Critical High Medium Low

Vulnerabilities (33)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU75486 - Improper input validation
CVE-2023-29007
CWE-20 Low
Available
No
2.27.0-14 25.04.2023 SB2023042553
SB2023042610
SB2023042629
and 48 more
#VU75485 - Insufficient Verification of Data Authenticity
CVE-2023-25815
CWE-345 Low
No
No
2.27.0-14 25.04.2023 SB2023042553
SB2023042610
SB2023042638
and 40 more
#VU72246 - Improper Link Resolution Before File Access ('Link Following')
CVE-2023-22490
CWE-59 Low
No
No
2.27.0-12 15.02.2023 SB2023021529
SB2023021528
SB2023021533
and 31 more
#VU72245 - Improper Link Resolution Before File Access ('Link Following')
CVE-2023-23946
CWE-59 Medium
No
No
2.27.0-12 15.02.2023 SB2023021529
SB2023021528
SB2023021533
and 28 more
#VU71240 - Untrusted Search Path
CVE-2022-41953
CWE-426 High
No
No
2.27.0-11 17.01.2023 SB2023011739
SB2023021521
SB2023020344
#VU71239 - Integer overflow
CVE-2022-23521
CWE-190 High
No
No
2.27.0-11 17.01.2023 SB2023011739
SB2023011741
SB2023011804
and 52 more
#VU71238 - Heap-based Buffer Overflow
CVE-2022-41903
CWE-122 High
No
No
2.27.0-11 17.01.2023 SB2023011739
SB2023011741
SB2023011804
and 51 more
#VU68518 - Heap-based Buffer Overflow
CVE-2022-39260
CWE-122 High
No
No
2.27.0-9 19.10.2022 SB2022101995
SB2022101996
SB2022101997
and 23 more
#VU65287 - Permissions, Privileges, and Access Controls
CVE-2022-29187
CWE-264 Medium
No
No
2.27.0-8 13.07.2022 SB2022071347
SB2022071348
SB2022071350
and 30 more
#VU62258 - Untrusted Search Path
CVE-2022-24765
CWE-426 Low
No
No
2.27.0-7, 2.27.0-8 12.04.2022 SB2022041262
SB2022041264
SB2022041265
and 44 more
#VU56690 - Exposure of sensitive information to an unauthorized actor
CVE-2021-40330
CWE-200 Medium
No
No
2.27.0-5 17.09.2021 SB2021091713
SB2021091714
SB2021101004
and 5 more
#VU51337 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-21300
CWE-94 High
Available
Exploited
2.27.0-3 09.03.2021 SB2021030943
SB2021031217
SB2021031303
and 17 more
#VU27257 - Insufficiently Protected Credentials
CVE-2020-11008
CWE-522 Low
No
No
2.23.0-16 23.04.2020 SB2020042343
SB2020042344
SB2020042345
and 18 more


Showing elements 21 - 40 out of 33