Filters
Software
Canonical Ubuntu LinuxCommand Injection, OS Command Injection
6.9
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Ruby-lang RubyVarious methods in WEBrick::HTTPRequest in Ruby 1.9.2 and 1.8.7 and earlier do not validate the X-Fo…
5.3
First published (updated )
Ruby-lang RubyRuby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows HTTP Response Splitting. If …
5.3
First published (updated )
Canonical Ubuntu LinuxRuby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 mishandles path checking within Fil…
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Rubygems RubygemsRubyGems 2.0.x before 2.0.16, 2.2.x before 2.2.4, and 2.4.x before 2.4.7 does not validate the hostn…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Ruby-lang RubyThe openssl extension in Ruby 2.x does not properly maintain the state of process memory after a fil…
5.8
First published (updated )
Ruby-lang Ruby(1) DL and (2) Fiddle in Ruby 1.9 before 1.9.3 patchlevel 426, and 2.0 before 2.0.0 patchlevel 195, …
6.4
First published (updated )
Rubygems RubygemsAlgorithmic complexity vulnerability in Gem::Version::ANCHORED_VERSION_PATTERN in lib/rubygems/versi…
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Rubygems RubygemsAlgorithmic complexity vulnerability in Gem::Version::VERSION_PATTERN in lib/rubygems/version.rb in …
4.3
First published (updated )
Phusion Passengerext/common/ServerInstanceDir.h in Phusion Passenger gem before 4.0.6 for Ruby allows local users to …
4.4
First published (updated )
Ruby-lang RubyThe OpenSSL::SSL.verify_certificate_identity function in lib/openssl/ssl.rb in Ruby 1.8 before 1.8.7…
6.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Phusion PassengerPhusion Passenger gem before 3.0.21 and 4.0.x before 4.0.5 for Ruby allows local users to cause a de…
4.6
First published (updated )
Ruby-lang RubyThe rb_get_path_check function in file.c in Ruby 1.9.3 before patchlevel 286 and Ruby 2.0.0 before r…
First published (updated )
Ruby-lang RubyRuby (aka CRuby) 1.9 before 1.9.3-p327 and 2.0 before r37575 computes hash values without properly r…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Ruby-lang RubyThe safe-level feature in Ruby 1.8.7 allows context-dependent attackers to modify strings via the Na…
4.3
First published (updated )
Ruby-lang RubyRuby 1.8.7 before patchlevel 371, 1.9.3 before patchlevel 286, and 2.0 before revision r37068 allows…
First published (updated )
Ruby-lang RubyRuby 1.9.3 before patchlevel 286 and 2.0 before revision r37068 allows context-dependent attackers t…
First published (updated )
Ruby-lang RubyRuby before 1.8.6-p114 does not reset the random seed upon forking, which makes it easier for contex…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Ruby-lang RubyRuby before 1.8.7-p352 does not reset the random seed upon forking, which makes it easier for contex…
First published (updated )
Ruby-lang RubyThe VpMemAlloc function in bigdecimal.c in the BigDecimal class in Ruby 1.9.2-p136 and earlier, as u…
6.8
First published (updated )
Ruby-lang RubyThe safe-level feature in Ruby 1.8.6 through 1.8.6-420, 1.8.7 through 1.8.7-330, and 1.8.8dev allows…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Ruby-lang RubyThe BigDecimal library in Ruby 1.8.6 before p369 and 1.8.7 before p173 allows context-dependent atta…
First published (updated )
Ruby-lang Rubyext/openssl/ossl_ocsp.c in Ruby 1.8 and 1.9 does not properly check the return value from the OCSP_b…
6.8
First published (updated )
Ruby-lang Rubyresolv.rb in Ruby 1.8.5 and earlier, 1.8.6 before 1.8.6-p287, 1.8.7 before 1.8.7-p72, and 1.9 r18423…
5.8
First published (updated )
Ruby-lang RubyThe regular expression engine (regex.c) in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 t…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Ruby-lang RubyThe (1) Net::ftptls, (2) Net::telnets, (3) Net::imap, (4) Net::pop, and (5) Net::smtp libraries in R…
First published (updated )
Ruby-lang RubyThe connect method in lib/net/http.rb in the (1) Net::HTTP and (2) Net::HTTPS libraries in Ruby 1.8.…
4.3
First published (updated )