Skip to content

rh-ruby24-rubygem-json vulnerabilities (Red Hat)

31 vulnerabilities.

rh-ruby24-rubygem-json Red Hat RubyGems Escape sequence injection in errors CVE-2019-8325 Fix available 7.5 HighMarch 27, 2019
rh-ruby24-rubygem-json Red Hat Code injection in RubyGems CVE-2019-8324 Fix available 8.8 HighMarch 27, 2019
rh-ruby24-rubygem-json Red Hat RubyGems Escape sequence injection vulnerability in api response handling CVE-2019-8323 Fix available 7.5 HighMarch 27, 2019
rh-ruby24-rubygem-json Red Hat RubyGems Escape sequence injection vulnerability in gem owner CVE-2019-8322 Fix available 7.5 HighMarch 27, 2019
rh-ruby24-rubygem-json Red Hat RubyGems Escape sequence injection vulnerability in verbose CVE-2019-8321 Fix available 7.5 HighMarch 27, 2019
rh-ruby24-rubygem-json Red Hat RubyGems Delete directory using symlink when decompressing tar CVE-2019-8320 Fix available 7.4 HighMarch 27, 2019
rh-ruby24-rubygem-json Red Hat An issue was discovered in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x... CVE-2018-16396 Fix available 8.1 HighOctober 26, 2018
rh-ruby24-rubygem-json Red Hat Ruby Openssl Allows Incorrect Value Comparison CVE-2018-16395 Fix available EPSS 10.7% 9.8 CriticalOctober 26, 2018
rh-ruby24-rubygem-json Red Hat In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0... CVE-2018-8780 Fix available 9.1 CriticalApril 3, 2018
rh-ruby24-rubygem-json Red Hat In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0... CVE-2018-8779 Fix available 7.5 HighApril 3, 2018
rh-ruby24-rubygem-json Red Hat In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0... CVE-2018-8778 Fix available 7.5 HighApril 3, 2018
rh-ruby24-rubygem-json Red Hat In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0... CVE-2018-8777 Fix available 7.5 HighApril 3, 2018
rh-ruby24-rubygem-json Red Hat Directory traversal vulnerability in the Dir.mktmpdir method in the tmpdir library in Ruby before... CVE-2018-6914 Fix available EPSS 10.2% 7.5 HighApril 3, 2018
rh-ruby24-rubygem-json Red Hat Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0... CVE-2017-17742 Fix available 5.3 MediumApril 3, 2018
rh-ruby24-rubygem-json Red Hat RubyGems Path Traversal vulnerability CVE-2018-1000079 Fix available 5.5 MediumMarch 13, 2018
rh-ruby24-rubygem-json Red Hat RubyGems Cross-site Scripting vulnerability CVE-2018-1000078 Fix available 6.1 MediumMarch 13, 2018
rh-ruby24-rubygem-json Red Hat RubyGems Improper Input Validation vulnerability CVE-2018-1000077 Fix available 5.3 MediumMarch 13, 2018
rh-ruby24-rubygem-json Red Hat RubyGems Improper Verification of Cryptographic Signature vulnerability CVE-2018-1000076 Fix available 9.8 CriticalMarch 13, 2018
rh-ruby24-rubygem-json Red Hat RubyGems Infinite Loop vulnerability CVE-2018-1000075 Fix available 7.5 HighMarch 13, 2018
rh-ruby24-rubygem-json Red Hat RubyGems Deserialization of Untrusted Data vulnerability CVE-2018-1000074 Fix available 7.8 HighMarch 13, 2018
rh-ruby24-rubygem-json Red Hat RubyGems Link Following vulnerability CVE-2018-1000073 Fix available 7.5 HighMarch 13, 2018
rh-ruby24-rubygem-json Red Hat The lazy_initialize function in lib/resolv.rb in Ruby through 2.4.3 uses Kernel#open, which might... CVE-2017-17790 Fix available 9.8 CriticalDecember 20, 2017
rh-ruby24-rubygem-json Red Hat Ruby before 2.4.3 allows Net::FTP command injection. Net::FTP#get, getbinaryfile, gettextfile,... CVE-2017-17405 Public exploitFix available EPSS 73.8% 8.8 HighDecember 15, 2017
rh-ruby24-rubygem-json Red Hat RubyGems vulnerable to Deserialization of Untrusted Data CVE-2017-0903 Fix available EPSS 15.9% 9.8 CriticalOctober 11, 2017
rh-ruby24-rubygem-json Red Hat WEBrick RCE Vulnerability CVE-2017-10784 Fix available EPSS 16.4% 8.8 HighSeptember 19, 2017
rh-ruby24-rubygem-json Red Hat Ruby before 2.4.2, 2.3.5, and 2.2.8 is vulnerable to a malicious format string which contains a... CVE-2017-0898 Fix available 9.1 CriticalSeptember 15, 2017
rh-ruby24-rubygem-json Red Hat Ruby through 2.2.7, 2.3.x through 2.3.4, and 2.4.x through 2.4.1 can expose arbitrary memory... CVE-2017-14064 Fix available 9.8 CriticalAugust 31, 2017
rh-ruby24-rubygem-json Red Hat RubyGems has Origin Validation Error vulnerability CVE-2017-0902 Fix available 8.1 HighAugust 31, 2017
rh-ruby24-rubygem-json Red Hat RubyGems may allow a maliciously crafted gem to overwrite files CVE-2017-0901 Public exploitFix available EPSS 29.4% 7.5 HighAugust 31, 2017
rh-ruby24-rubygem-json Red Hat RubyGems Improper Input Validation vulnerability CVE-2017-0900 Fix available 7.5 HighAugust 31, 2017
rh-ruby24-rubygem-json Red Hat RubyGems Code Injection vulnerability CVE-2017-0899 Fix available EPSS 11.1% 9.8 CriticalAugust 31, 2017