rh-ruby23-rubygem-json vulnerabilities (Red Hat)
34 vulnerabilities.
-
rh-ruby23-rubygem-jsonRed Hat Code injection in RubyGems 8.8 High -
rh-ruby23-rubygem-jsonRed Hat An issue was discovered in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x... 8.1 High -
rh-ruby23-rubygem-jsonRed Hat Ruby Openssl Allows Incorrect Value Comparison 9.8 Critical -
rh-ruby23-rubygem-jsonRed Hat A flaw was found in CloudForms before 5.9.0.22 in the self-service UI snapshot feature where the... 6.5 Medium -
rh-ruby23-rubygem-jsonRed Hat It was found that CloudForms does not verify that the server hostname matches the domain name in... 6.5 Medium -
rh-ruby23-rubygem-jsonRed Hat Ansible Tower through version 3.2.3 has a vulnerability that allows users only with access to... 8.8 High -
rh-ruby23-rubygem-jsonRed Hat Ansible Tower before version 3.2.4 has a flaw in the management of system and organization... 7.2 High -
rh-ruby23-rubygem-jsonRed Hat In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0... 9.1 Critical -
rh-ruby23-rubygem-jsonRed Hat In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0... 7.5 High -
rh-ruby23-rubygem-jsonRed Hat In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0... 7.5 High -
rh-ruby23-rubygem-jsonRed Hat In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0... 7.5 High -
rh-ruby23-rubygem-jsonRed Hat Directory traversal vulnerability in the Dir.mktmpdir method in the tmpdir library in Ruby before... 7.5 High -
rh-ruby23-rubygem-jsonRed Hat Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0... 5.3 Medium -
rh-ruby23-rubygem-jsonRed Hat Paramiko not properly checking authentication before processing other requests 9.8 Critical -
rh-ruby23-rubygem-jsonRed Hat RubyGems Path Traversal vulnerability 5.5 Medium -
rh-ruby23-rubygem-jsonRed Hat RubyGems Cross-site Scripting vulnerability 6.1 Medium -
rh-ruby23-rubygem-jsonRed Hat RubyGems Improper Input Validation vulnerability 5.3 Medium -
rh-ruby23-rubygem-jsonRed Hat RubyGems Improper Verification of Cryptographic Signature vulnerability 9.8 Critical -
rh-ruby23-rubygem-jsonRed Hat RubyGems Infinite Loop vulnerability 7.5 High -
rh-ruby23-rubygem-jsonRed Hat RubyGems Deserialization of Untrusted Data vulnerability 7.8 High -
rh-ruby23-rubygem-jsonRed Hat RubyGems Link Following vulnerability 7.5 High -
rh-ruby23-rubygem-jsonRed Hat The lazy_initialize function in lib/resolv.rb in Ruby through 2.4.3 uses Kernel#open, which might... 9.8 Critical -
rh-ruby23-rubygem-jsonRed Hat Ruby before 2.4.3 allows Net::FTP command injection. Net::FTP#get, getbinaryfile, gettextfile,... 8.8 High -
rh-ruby23-rubygem-jsonRed Hat RubyGems vulnerable to Deserialization of Untrusted Data 9.8 Critical -
rh-ruby23-rubygem-jsonRed Hat Ruby OpenSSL DoS Vulnerability 7.5 High -
rh-ruby23-rubygem-jsonRed Hat WEBrick RCE Vulnerability 8.8 High -
rh-ruby23-rubygem-jsonRed Hat Ruby before 2.4.2, 2.3.5, and 2.2.8 is vulnerable to a malicious format string which contains a... 9.1 Critical -
rh-ruby23-rubygem-jsonRed Hat Ruby through 2.2.7, 2.3.x through 2.3.4, and 2.4.x through 2.4.1 can expose arbitrary memory... 9.8 Critical -
rh-ruby23-rubygem-jsonRed Hat RubyGems has Origin Validation Error vulnerability 8.1 High -
rh-ruby23-rubygem-jsonRed Hat RubyGems may allow a maliciously crafted gem to overwrite files 7.5 High -
rh-ruby23-rubygem-jsonRed Hat RubyGems Improper Input Validation vulnerability 7.5 High -
rh-ruby23-rubygem-jsonRed Hat RubyGems Code Injection vulnerability 9.8 Critical -
rh-ruby23-rubygem-jsonRed Hat CloudForms Management Engine before 5.8 includes a default SSL/TLS certificate. 7.5 High -
rh-ruby23-rubygem-jsonRed Hat i18n gem Cross-site Scripting vulnerability 4.3 Medium