CVE-2025-30673

MEDIUM Year: 2025
CVSS v3 Score
6.5
Medium
Weakness Type
CWE-427
View all →

Vulnerability Description

Sub::HandlesVia for Perl before 0.050002 allows untrusted code from the current working directory ('.') to be loaded similar to CVE-2016-1238. If an attacker can place a malicious file in current working directory, it may be loaded instead of the intended file, potentially leading to arbitrary code execution. Sub::HandlesVia uses Mite to produce the affected code section due to CVE-2025-30672

Related Vulnerabilities

CVE-2019-5694

MEDIUM
CVSS:6.5(Medium)

NVIDIA Windows GPU Display Driver, R390 driver version, contains a vulnerability in NVIDIA Control Panel in which it incorrectly loads Windows system DLLs without validating the path or signature (als...

CWE-4272019

CVE-2019-5695

MEDIUM
CVSS:6.5(Medium)

NVIDIA GeForce Experience (prior to 3.20.1) and Windows GPU Display Driver (all versions) contains a vulnerability in the local service provider component in which an attacker with local system and pr...

CWE-4272019

CVE-2020-24578

MEDIUM
CVSS:6.5(Medium)

An issue was discovered on D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55. It has a misconfigured FTP service that allows a malicious network user to access system folders and dow...

CWE-4272020

CVE-2020-3153

MEDIUM
CVSS:6.5(Medium)

A vulnerability in the installer component of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated local attacker to copy user-supplied files to system level directories wi...

CWE-4272020

CVE-2020-7358

MEDIUM
CVSS:6.5(Medium)

In AppSpider installer versions prior to 7.2.126, the AppSpider installer calls an executable which can be placed in the appropriate directory by an attacker with access to the local machine. This wou...

CWE-4272020

CVE-2020-9667

MEDIUM
CVSS:6.5(Medium)

Adobe Genuine Service version 6.6 (and earlier) is affected by an Uncontrolled Search Path element vulnerability. An authenticated attacker with admin privileges could plant custom binaries and execut...

CWE-4272020