Filter
Software
Rubygems Rubygems.orgrubygems.org MFA Bypass through password reset function could allow account takeover
9.8
EPSS
0.08%
First published (updated )
Rubygems Rubygems.orgUnauthorized gem replacement for full names ending in numbers on rubygems.org
7.5
First published (updated )
Rubygems RubygemsRubyGems allows creation of users with arbitrary unverified emails
8.8
First published (updated )
Rubygems Rubygems.orgUnauthorized takeover for new versions of some platform-specific gems
7.7
First published (updated )
Rubygems Rubygems.orgUnauthorized gem takeover for some gems on rubygems.org
9.9
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
rubygems/rubygems-updateAn issue was discovered in RubyGems 2.6 and later through 3.0.2. Since Gem::CommandManager#run calls…
7.5
First published (updated )
rubygems/rubygems-updateAn issue was discovered in RubyGems 2.6 and later through 3.0.2. Gem::GemcutterUtilities#with_respon…
7.5
First published (updated )
openSUSE LeapAn issue was discovered in RubyGems 2.6 and later through 3.0.2. The gem owner command outputs the c…
7.5
First published (updated )
rubygems/rubygems-updateAn issue was discovered in RubyGems 2.6 and later through 3.0.2. Since Gem::UserInteraction#verbose …
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Canonical Ubuntu LinuxInput Validation, Path Traversal
7.5
First published (updated )
Rubygems RubygemsRubyGems 2.0.x before 2.0.16, 2.2.x before 2.2.4, and 2.4.x before 2.4.7 does not validate the hostn…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Rubygems RubygemsAlgorithmic complexity vulnerability in Gem::Version::ANCHORED_VERSION_PATTERN in lib/rubygems/versi…
4.3
First published (updated )
Rubygems RubygemsAlgorithmic complexity vulnerability in Gem::Version::VERSION_PATTERN in lib/rubygems/version.rb in …
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.