ruby-RubyGems vulnerabilities (Mageia)

21 vulnerabilities.

• ruby-RubyGems Mageia RubyGems Escape sequence injection in errors CVE-2019-8325 Fix available 7.5 HighMarch 27, 2019
• ruby-RubyGems Mageia Code injection in RubyGems CVE-2019-8324 Fix available 8.8 HighMarch 27, 2019
• ruby-RubyGems Mageia RubyGems Escape sequence injection vulnerability in api response handling CVE-2019-8323 Fix available 7.5 HighMarch 27, 2019
• ruby-RubyGems Mageia RubyGems Escape sequence injection vulnerability in gem owner CVE-2019-8322 Fix available 7.5 HighMarch 27, 2019
• ruby-RubyGems Mageia RubyGems Escape sequence injection vulnerability in verbose CVE-2019-8321 Fix available 7.5 HighMarch 27, 2019
• ruby-RubyGems Mageia RubyGems Delete directory using symlink when decompressing tar CVE-2019-8320 Fix available 7.4 HighMarch 27, 2019
• ruby-RubyGems Mageia RubyGems Path Traversal vulnerability CVE-2018-1000079 Fix available 5.5 MediumMarch 13, 2018
• ruby-RubyGems Mageia RubyGems Cross-site Scripting vulnerability CVE-2018-1000078 Fix available 6.1 MediumMarch 13, 2018
• ruby-RubyGems Mageia RubyGems Improper Input Validation vulnerability CVE-2018-1000077 Fix available 5.3 MediumMarch 13, 2018
• ruby-RubyGems Mageia RubyGems Improper Verification of Cryptographic Signature vulnerability CVE-2018-1000076 Fix available 9.8 CriticalMarch 13, 2018
• ruby-RubyGems Mageia RubyGems Infinite Loop vulnerability CVE-2018-1000075 Fix available 7.5 HighMarch 13, 2018
• ruby-RubyGems Mageia RubyGems Deserialization of Untrusted Data vulnerability CVE-2018-1000074 Fix available 7.8 HighMarch 13, 2018
• ruby-RubyGems Mageia RubyGems Link Following vulnerability CVE-2018-1000073 Fix available 7.5 HighMarch 13, 2018
• ruby-RubyGems Mageia RubyGems vulnerable to Deserialization of Untrusted Data CVE-2017-0903 Fix available EPSS 15.9% 9.8 CriticalOctober 11, 2017
• ruby-RubyGems Mageia RubyGems has Origin Validation Error vulnerability CVE-2017-0902 Fix available 8.1 HighAugust 31, 2017
• ruby-RubyGems Mageia RubyGems may allow a maliciously crafted gem to overwrite files CVE-2017-0901 Public exploitFix available EPSS 29.4% 7.5 HighAugust 31, 2017
• ruby-RubyGems Mageia RubyGems Improper Input Validation vulnerability CVE-2017-0900 Fix available 7.5 HighAugust 31, 2017
• ruby-RubyGems Mageia RubyGems Code Injection vulnerability CVE-2017-0899 Fix available EPSS 11.1% 9.8 CriticalAugust 31, 2017
• ruby-RubyGems Mageia RubyGems vulnerable to DNS hijack attack CVE-2015-3900 Fix available 5.0 MediumJune 24, 2015
• ruby-RubyGems Mageia RubyGems Regular Expression Denial of Service CVE-2013-4363 Fix available 4.3 MediumOctober 9, 2013
• ruby-RubyGems Mageia RubyGems Regular Expression Denial of Service vulnerability CVE-2013-4287 Fix available 4.3 MediumOctober 9, 2013