Filter
AND
-Infinity
0

REXMLREXML is an XML toolkit for Ruby. The REXML gem before 3.3.9 has a ReDoS vulnerability when it parse…

First published (updated )

rubygems/uriLast updated 24 July 2024

First published (updated )

RubyBuffer Overflow

First published (updated )

RubyInfoleak

First published (updated )

redhat/rubyInfoleak

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

RubyInput Validation

First published (updated )

RubyVarious methods in WEBrick::HTTPRequest in Ruby 1.9.2 and 1.8.7 and earlier do not validate the X-Fo…

First published (updated )

redhat/rubyRuby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows HTTP Response Splitting. If …

First published (updated )

redhat/rubyRuby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 mishandles path checking within Fil…

First published (updated )

RubyArray#pack method converts the receiver’s contents into a string with specified format. If the recei…

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

redhat/rubyLast updated 24 July 2024

First published (updated )

debian/ruby1.8Command Injection, CRLF Injection

First published (updated )

RubyGemsRubyGems 2.0.x before 2.0.16, 2.2.x before 2.2.4, and 2.4.x before 2.4.7 does not validate the hostn…

First published (updated )

RubyXEE

First published (updated )

RubyXEE

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

RubyBuffer Overflow

First published (updated )

RubyThe openssl extension in Ruby 2.x does not properly maintain the state of process memory after a fil…

First published (updated )

Wicked RubyPath Traversal

First published (updated )

RubyBuffer Overflow

First published (updated )

Ruby(1) DL and (2) Fiddle in Ruby 1.9 before 1.9.3 patchlevel 426, and 2.0 before 2.0.0 patchlevel 195, …

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

RubyGems Mail GemAlgorithmic complexity vulnerability in Gem::Version::ANCHORED_VERSION_PATTERN in lib/rubygems/versi…

First published (updated )

RubyGems Mail GemAlgorithmic complexity vulnerability in Gem::Version::VERSION_PATTERN in lib/rubygems/version.rb in …

First published (updated )

Phusion Passengerext/common/ServerInstanceDir.h in Phusion Passenger gem before 4.0.6 for Ruby allows local users to …

First published (updated )

RubyThe OpenSSL::SSL.verify_certificate_identity function in lib/openssl/ssl.rb in Ruby 1.8 before 1.8.7…

First published (updated )

DeviseIncorrect Type Cast

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

rubygems/ldoceInput Validation

First published (updated )

RubyInput Validation, XEE

First published (updated )

RubyXSS

First published (updated )

Phusion PassengerPhusion Passenger gem before 3.0.21 and 4.0.x before 4.0.5 for Ruby allows local users to cause a de…

First published (updated )

RubyThe rb_get_path_check function in file.c in Ruby 1.9.3 before patchlevel 286 and Ruby 2.0.0 before r…

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203