Latest vulnerabilities for vendor "ruby-lang"

7.5

First published (updated )

CVE-2024-41946

rubygems/rexmlREXML ReDoS vulnerability

7.5

First published (updated )

CVE-2024-49761

REXML RubyREXML DoS vulnerability

7.5

First published (updated )

CVE-2024-41123

Fedoraproject FedoraLast updated 24 July 2024

7.5

First published (updated )

CVE-2023-28756

rubygems/uriLast updated 24 July 2024

5.3

First published (updated )

CVE-2023-36617

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

rubygems/uriInput Validation

7.5

First published (updated )

CVE-2023-28755

RubyDate.parse in the date gem through 3.2.0 for Ruby allows ReDoS (regular expression Denial of Service…

7.5

First published (updated )

CVE-2021-41817

redhat/cgiCGI::Cookie.parse in Ruby through 2.6.8 mishandles security prefixes in cookie names. This also affe…

7.5

First published (updated )

CVE-2021-41819

rubygems/cgiLast updated 24 July 2024

8.8

First published (updated )

CVE-2021-33621

Ubuntu LinuxCommand Injection, OS Command Injection

6.9

First published (updated )

CVE-2020-8130

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

RubyLast updated 24 July 2024

7.5

First published (updated )

CVE-2018-8777

PHPNull Pointer Dereference

7.5

First published (updated )

CVE-2017-9229

RubyCommand Injection

9.8

First published (updated )

CVE-2017-17790

redhat/rubyLast updated 24 July 2024

5.3

First published (updated )

CVE-2017-17742

RubyBuffer Overflow

9.8

First published (updated )

CVE-2017-14064

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

RubyBuffer Overflow

7.5

First published (updated )

CVE-2017-14033

RubyLast updated 24 July 2024

9.3

First published (updated )

CVE-2017-10784

RubyBuffer Overflow

9.1

First published (updated )

CVE-2017-0898

redhat/rubyCommand Injection, OS Command Injection

7

First published (updated )

CVE-2021-31799

RubyInfoleak

5.8

First published (updated )

CVE-2021-31810

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Phusion Passengerext/common/ServerInstanceDir.h in Phusion Passenger gem before 4.0.6 for Ruby allows local users to …

4.4

First published (updated )

CVE-2013-4136

OnigurumaBuffer Overflow

9.8

First published (updated )

CVE-2017-9225

Plataformatec DeviseIncorrect Type Cast

6.8

First published (updated )

CVE-2013-0233

RubyPath Traversal

6.7

First published (updated )

CVE-2012-5380

kelredd-pruviewOS Command Injection

9.3

First published (updated )

CVE-2013-1947

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

RubyThe parser_yyerror function in the UTF-8 parser in Ruby 2.4.1 allows attackers to cause a denial of …

9.8

First published (updated )

CVE-2017-11465

redhat/RubyBuffer Overflow, Input Validation, Race Condition, Use After Free

7.5

First published (updated )

CVE-2022-28739

RubyThe (1) Net::ftptls, (2) Net::telnets, (3) Net::imap, (4) Net::pop, and (5) Net::smtp libraries in R…

5

First published (updated )

CVE-2007-5770

RubyThe connect method in lib/net/http.rb in the (1) Net::HTTP and (2) Net::HTTPS libraries in Ruby 1.8.…

4.3

First published (updated )

CVE-2007-5162

redhat/rubyhttputils.rb in WEBrick in Ruby 1.8.1 and 1.8.5, as used in Red Hat Enterprise Linux 4 and 5, allows…

7.8

First published (updated )

CVE-2008-4310

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.