ruby vulnerabilities (Mageia)
56 vulnerabilities.
-
rubyMageia URI allows for userinfo Leakage in URI#join, URI#merge, and URI#+ 3.2 Low -
rubyMageia CGI has Regular Expression Denial of Service (ReDoS) potential in Util#escapeElement 4.0 Medium -
rubyMageia CGI has Denial of Service (DoS) potential in Cookie.parse 5.8 Medium -
rubyMageia Net::IMAP vulnerable to possible DoS by memory exhaustion 6.5 Medium -
rubyMageia REXML ReDoS vulnerability 6.6 Medium -
rubyMageia REXML denial of service vulnerability 5.9 Medium -
rubyMageia REXML DoS vulnerability 5.3 Medium -
rubyMageia REXML DoS vulnerability 5.3 Medium -
rubyMageia Denial of service in REXML 4.3 Medium -
rubyMageia REXML contains a denial of service vulnerability 5.3 Medium -
rubyMageia An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the... 6.6 Medium -
rubyMageia RDoc RCE vulnerability with .rdoc_options 4.5 Medium -
rubyMageia StringIO buffer overread vulnerability 9.8 Critical -
rubyMageia HTTP response splitting in CGI 8.8 High -
rubyMageia There is a buffer over-read in Ruby before 2.6.10, 2.7.x before 2.7.6, 3.x before 3.0.4, and 3.1... 7.5 High -
rubyMageia A double free was found in the Regexp compiler in Ruby 3.x before 3.0.4 and 3.1.x before 3.1.2.... 9.8 Critical -
rubyMageia Cookie Prefix Spoofing in CGI::Cookie.parse 7.5 High -
rubyMageia Local Code Execution through Argument Injection via dash leading git url parameter in Gemfile 6.7 Medium -
rubyMageia Buffer overrun in CGI.escape_html 9.8 Critical -
rubyMageia Regular expression denial of service vulnerability (ReDoS) in date 7.5 High -
rubyMageia An issue was discovered in Ruby through 2.6.7, 2.7.x through 2.7.3, and 3.x through 3.0.1. Net:... 7.4 High -
rubyMageia Arbitrary Code Execution in Rdoc 7.0 High -
rubyMageia An issue was discovered in Ruby through 2.6.7, 2.7.x through 2.7.3, and 3.x through 3.0.1. A... 5.8 Medium -
rubyMageia Dependency Confusion in Bundler 8.8 High -
rubyMageia REXML round-trip instability 7.5 High -
rubyMageia WEBRick vulnerable to HTTP Request/Response Smuggling 7.5 High -
rubyMageia An issue was discovered in Ruby 2.5.x through 2.5.7, 2.6.x through 2.6.5, and 2.7.0. If a victim... 5.3 Medium -
rubyMageia Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows code injection if the... 8.1 High -
rubyMageia Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows HTTP Response Splitting.... 5.3 Medium -
rubyMageia WEBrick::HTTPAuth::DigestAuth in Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4... 7.5 High -
rubyMageia Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 mishandles path checking within... 6.5 Medium -
rubyMageia An issue was discovered in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x... 8.1 High -
rubyMageia Ruby Openssl Allows Incorrect Value Comparison 9.8 Critical -
rubyMageia In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0... 9.1 Critical -
rubyMageia In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0... 7.5 High -
rubyMageia In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0... 7.5 High -
rubyMageia In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0... 7.5 High -
rubyMageia Directory traversal vulnerability in the Dir.mktmpdir method in the tmpdir library in Ruby before... 7.5 High -
rubyMageia Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0... 5.3 Medium -
rubyMageia The lazy_initialize function in lib/resolv.rb in Ruby through 2.4.3 uses Kernel#open, which might... 9.8 Critical -
rubyMageia Ruby before 2.4.3 allows Net::FTP command injection. Net::FTP#get, getbinaryfile, gettextfile,... 8.8 High -
rubyMageia Ruby OpenSSL DoS Vulnerability 7.5 High -
rubyMageia WEBrick RCE Vulnerability 8.8 High -
rubyMageia Ruby before 2.4.2, 2.3.5, and 2.2.8 is vulnerable to a malicious format string which contains a... 9.1 Critical -
rubyMageia Ruby through 2.2.7, 2.3.x through 2.3.4, and 2.4.x through 2.4.1 can expose arbitrary memory... 9.8 Critical -
rubyMageia Net::SMTP in Ruby before 2.4.0 is vulnerable to SMTP command injection via CRLF sequences in a... 6.1 Medium -
rubyMageia An exploitable heap overflow vulnerability exists in the Fiddle::Function.new "initialize"... 9.8 Critical -
rubyMageia Type confusion exists in _cancel_eval Ruby's TclTkIp class method. Attacker passing different... 9.8 Critical -
rubyMageia OpenSSL gem for Ruby using inadequate encryption strength 7.5 High -
rubyMageia The Fiddle::Handle implementation in ext/fiddle/handle.c in Ruby before 2.0.0-p648, 2.1 before 2... 8.4 High - Show olderLoading…