Filter
-Infinity
0
Trending
RubyGemsUnauthorized gem takeover for some gems on rubygems.org
9.9
First published (updated )
RubyGemsrubygems.org MFA Bypass through password reset function could allow account takeover
9.8
EPSS
0.08%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
RubyGems Mail GemRubyGems allows creation of users with arbitrary unverified emails
8.8
First published (updated )
Red Hat Enterprise Linux ServerLast updated 24 July 2024
8.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
RubyGemsUnauthorized takeover for new versions of some platform-specific gems
7.7
First published (updated )
rubygems/rubygems-updateAn issue was discovered in RubyGems 2.6 and later through 3.0.2. Gem::GemcutterUtilities#with_respon…
7.5
First published (updated )
rubygems/rubygems-updateAn issue was discovered in RubyGems 2.6 and later through 3.0.2. Since Gem::CommandManager#run calls…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
rubygems/rubygems-updateAn issue was discovered in RubyGems 2.6 and later through 3.0.2. The gem owner command outputs the c…
7.5
First published (updated )
rubygems/rubygems-updateAn issue was discovered in RubyGems 2.6 and later through 3.0.2. Since Gem::UserInteraction#verbose …
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Red Hat Enterprise Linux ServerInput Validation, Path Traversal
7.5
First published (updated )
RubyGemsUnauthorized gem replacement for full names ending in numbers on rubygems.org
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
RubyGems Mail GemAn issue was discovered in RubyGems 2.6 and later through 3.0.2. A crafted gem with a multi-line nam…
7
First published (updated )
RubyGemsRubyGems before 1.8.23 can redirect HTTPS connections to HTTP, which makes it easier for remote atta…
5.8
First published (updated )
PublifyPublify Vulnerable To Cross-Site Scripting (XSS) Via Redirects Requiring User Interaction
5.4
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.