ruby-devel vulnerabilities (Red Hat)
137 vulnerabilities.
ruby-develRed HatThe SecureRandom.random_bytes function in lib/securerandom.rb in Ruby before 1.8.7-p352 and 1.9.x...5.0 Mediumruby-develRed HatThe VpMemAlloc function in bigdecimal.c in the BigDecimal class in Ruby 1.9.2-p136 and earlier,...6.8 Mediumruby-develRed HatThe safe-level feature in Ruby 1.8.6 through 1.8.6-420, 1.8.7 through 1.8.7-330, and 1.8.8dev...5.0 Mediumruby-develRed HatThe FileUtils.remove_entry_secure method in Ruby 1.8.6 through 1.8.6-420, 1.8.7 through 1.8.7-330...6.3 Mediumruby-develRed HatCross-site scripting (XSS) vulnerability in the WEBrick HTTP server in Ruby in Apple Mac OS X 10...4.3 Mediumruby-develRed HatWEBrick Improper Input Validation vulnerability7.5 Highruby-develRed HatThe BigDecimal library in Ruby 1.8.6 before p369 and 1.8.7 before p173 allows context-dependent...5.0 Mediumruby-develRed Hatext/openssl/ossl_ocsp.c in Ruby 1.8 and 1.9 does not properly check the return value from the...6.8 Mediumruby-develRed HatWEBrick Denial of Service Vulnerability7.8 Highruby-develRed Hatresolv.rb in Ruby 1.8.5 and earlier, 1.8.6 before 1.8.6-p287, 1.8.7 before 1.8.7-p72, and 1.9...5.8 Mediumruby-develRed HatThe REXML module in Ruby 1.8.6 through 1.8.6-p287, 1.8.7 through 1.8.7-p72, and 1.9 allows...5.0 Mediumruby-develRed HatThe regular expression engine (regex.c) in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8...5.0 Mediumruby-develRed HatThe dl module in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1...7.5 Highruby-develRed HatAlgorithmic complexity vulnerability in the WEBrick::HTTPUtils.split_header_value function in...7.8 Highruby-develRed HatRuby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423...7.5 Highruby-develRed HatInteger overflow in the rb_ary_fill function in array.c in Ruby before revision 17756 allows...7.5 Highruby-develRed HatInteger overflow in the (1) rb_ary_splice function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5...7.8 Highruby-develRed HatInteger overflow in the (1) rb_ary_splice function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5...7.8 Highruby-develRed HatThe rb_str_format function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6...7.8 Highruby-develRed HatMultiple integer overflows in the rb_ary_store function in Ruby 1.8.4 and earlier, 1.8.5 before 1...10.0 Highruby-develRed HatMultiple integer overflows in the rb_str_buf_append function in Ruby 1.8.4 and earlier, 1.8.5...10.0 Highruby-develRed HatDirectory traversal vulnerability in WEBrick in Ruby 1.8 before 1.8.5-p115 and 1.8.6-p114, and 1...5.0 Mediumruby-develRed HatThe (1) Net::ftptls, (2) Net::telnets, (3) Net::imap, (4) Net::pop, and (5) Net::smtp libraries...5.0 Mediumruby-develRed HatThe connect method in lib/net/http.rb in the (1) Net::HTTP and (2) Net::HTTPS libraries in Ruby 1...4.3 Mediumruby-develRed HatThe APOP protocol allows remote attackers to guess the first 3 characters of a password via man...2.6 Lowruby-develRed HatThe read_multipart function in cgi.rb in Ruby before 1.8.5-p2 does not properly detect boundaries...5.0 Mediumruby-develRed HatThe cgi.rb CGI library for Ruby 1.8 allows remote attackers to cause a denial of service ...5.0 Mediumruby-develRed HatMultiple unspecified vulnerabilities in Ruby before 1.8.5 allow remote attackers to bypass "safe...6.4 Mediumruby-develRed HatThe HTTP/XMLRPC server in Ruby before 1.8.2 uses blocking sockets, which allows attackers to...5.0 Mediumruby-develRed HatRuby 1.6.x up to 1.6.8, 1.8.x up to 1.8.2, and 1.9.0 development up to 2005-09-01 allows...7.5 Highruby-develRed HatThe XMLRPC server in utils.rb for the ruby library (libruby) 1.8 sets an invalid default value...7.5 Highruby-develRed HatThe CGI module in Ruby 1.6 before 1.6.8, and 1.8 before 1.8.2, allows remote attackers to cause a...5.0 Mediumruby-develRed HatThe FileStore capability in CGI::Session for Ruby before 1.8.1, and possibly PStore, creates...2.1 Low