Latest vulnerabilities for vendor "rubygems"

9.8

EPSS

0.08%

First published (updated )

CVE-2024-21654

Rubygems Rubygems.orgUnauthorized gem replacement for full names ending in numbers on rubygems.org

7.5

First published (updated )

CVE-2023-40165

Rubygems RubygemsRubyGems allows creation of users with arbitrary unverified emails

8.8

First published (updated )

CVE-2022-36073

Rubygems Rubygems.orgUnauthorized takeover for new versions of some platform-specific gems

7.7

First published (updated )

CVE-2022-29218

Rubygems Rubygems.orgUnauthorized gem takeover for some gems on rubygems.org

9.9

First published (updated )

CVE-2022-29176

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

rubygems/rubygems-updateAn issue was discovered in RubyGems 2.6 and later through 3.0.2. Since Gem::CommandManager#run calls…

7.5

First published (updated )

CVE-2019-8325

rubygems/rubygems-updateAn issue was discovered in RubyGems 2.6 and later through 3.0.2. Gem::GemcutterUtilities#with_respon…

7.5

First published (updated )

CVE-2019-8323

openSUSE LeapAn issue was discovered in RubyGems 2.6 and later through 3.0.2. The gem owner command outputs the c…

7.5

First published (updated )

CVE-2019-8322

rubygems/rubygems-updateAn issue was discovered in RubyGems 2.6 and later through 3.0.2. Since Gem::UserInteraction#verbose …

7.5

First published (updated )

CVE-2019-8321

rubygems/rubygems-updatePath Traversal

8.8

First published (updated )

CVE-2019-8320

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

redhat/rubyCode Injection, Input Validation

8.8

First published (updated )

CVE-2019-8324

Rubygems RubygemsXSS

6.1

First published (updated )

CVE-2018-1000078

Rubygems RubygemsInput Validation

5.3

First published (updated )

CVE-2018-1000077

Rubygems RubygemsLast updated 24 July 2024

9.8

First published (updated )

CVE-2018-1000076

Rubygems RubygemsLast updated 24 July 2024

7.5

First published (updated )

CVE-2018-1000075

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Rubygems RubygemsLast updated 24 July 2024

7.8

First published (updated )

CVE-2018-1000074

redhat/rubyPath Traversal

7.5

First published (updated )

CVE-2018-1000073

redhat/rubyPath Traversal

5.5

First published (updated )

CVE-2018-1000079

Rubygems RubygemsLast updated 24 July 2024

9.8

First published (updated )

CVE-2017-0903

Redhat Enterprise Linux Server EusCode Injection

9.8

First published (updated )

CVE-2017-0899

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Canonical Ubuntu LinuxInput Validation, Path Traversal

7.5

First published (updated )

CVE-2017-0901

Redhat Enterprise Linux Server EusInput Validation

7.5

First published (updated )

CVE-2017-0900

Canonical Ubuntu LinuxLast updated 24 July 2024

8.1

First published (updated )

CVE-2017-0902

Rubygems RubygemsInput Validation

4.3

First published (updated )

CVE-2015-4020

Rubygems RubygemsRubyGems 2.0.x before 2.0.16, 2.2.x before 2.2.4, and 2.4.x before 2.4.7 does not validate the hostn…

5

First published (updated )

CVE-2015-3900

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Rubygems RubygemsAlgorithmic complexity vulnerability in Gem::Version::ANCHORED_VERSION_PATTERN in lib/rubygems/versi…

4.3

First published (updated )

CVE-2013-4363

Rubygems RubygemsAlgorithmic complexity vulnerability in Gem::Version::VERSION_PATTERN in lib/rubygems/version.rb in …

4.3

First published (updated )

CVE-2013-4287

Rubygems Command WrapCode Injection

7.5

First published (updated )

CVE-2013-1875

Rubygems FastreaderCode Injection

7.5

First published (updated )

CVE-2013-2615

rubygems/mini_magickCode Injection

7.5

First published (updated )

CVE-2013-2616

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Rubygems Json GemInput Validation, SQL Injection

7.5

First published (updated )

CVE-2013-0269

Rubygems Mail GemInput Validation

7.5

First published (updated )

CVE-2012-2140

Rubygems RubygemsRubyGems before 1.8.23 can redirect HTTPS connections to HTTP, which makes it easier for remote atta…

5.8

First published (updated )

CVE-2012-2125

Rubygems RubygemsRubyGems before 1.8.23 does not verify an SSL certificate, which allows remote attackers to modify a…

4.3

First published (updated )

CVE-2012-2126

Rubygems Mail GemPath Traversal

5

First published (updated )

CVE-2012-2139

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.