Filter

Rubygems RubygemsInput Validation

First published (updated )

Rubygems RubygemsLast updated 24 July 2024

First published (updated )

redhat/rubyPath Traversal

First published (updated )

Rubygems RubygemsXSS

First published (updated )

redhat/rubyPath Traversal

7.5
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Rubygems RubygemsLast updated 24 July 2024

7.5
First published (updated )

Rubygems RubygemsLast updated 24 July 2024

7.8
First published (updated )

Redhat Enterprise Linux Server EusCode Injection

First published (updated )

Rubygems RubygemsLast updated 24 July 2024

First published (updated )

Canonical Ubuntu LinuxInput Validation, Path Traversal

7.5
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Redhat Enterprise Linux Server EusInput Validation

7.5
First published (updated )

Canonical Ubuntu LinuxLast updated 24 July 2024

8.1
First published (updated )

Rubygems Rubygems.orgrubygems.org MFA Bypass through password reset function could allow account takeover

EPSS
0.08%
First published (updated )

Rubygems Rubygems.orgUnauthorized gem replacement for full names ending in numbers on rubygems.org

7.5
First published (updated )

Rubygems FastreaderCode Injection

7.5
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Rubygems Command WrapCode Injection

7.5
First published (updated )

Rubygems Mail GemPath Traversal

First published (updated )

Rubygems Mail GemInput Validation

7.5
First published (updated )

Rubygems RubygemsRubyGems before 1.8.23 can redirect HTTPS connections to HTTP, which makes it easier for remote atta…

First published (updated )

Rubygems RubygemsRubyGems before 1.8.23 does not verify an SSL certificate, which allows remote attackers to modify a…

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Rubygems RubygemsAlgorithmic complexity vulnerability in Gem::Version::ANCHORED_VERSION_PATTERN in lib/rubygems/versi…

First published (updated )

Rubygems RubygemsAlgorithmic complexity vulnerability in Gem::Version::VERSION_PATTERN in lib/rubygems/version.rb in …

First published (updated )

rubygems/mini_magickCode Injection

7.5
First published (updated )

Rubygems Json GemInput Validation, SQL Injection

7.5
First published (updated )

Rubygems RubygemsInput Validation

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Rubygems RubygemsRubyGems 2.0.x before 2.0.16, 2.2.x before 2.2.4, and 2.4.x before 2.4.7 does not validate the hostn…

First published (updated )

rubygems/rubygems-updateAn issue was discovered in RubyGems 2.6 and later through 3.0.2. Gem::GemcutterUtilities#with_respon…

7.5
First published (updated )

redhat/rubyCode Injection, Input Validation

8.8
First published (updated )

rubygems/rubygems-updatePath Traversal

8.8
First published (updated )

rubygems/rubygems-updateAn issue was discovered in RubyGems 2.6 and later through 3.0.2. Since Gem::CommandManager#run calls…

7.5
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203