ruby-tcltk vulnerabilities (Red Hat)
76 vulnerabilities.
-
ruby-tcltkRed Hat net-imap: Command Injection via unvalidated Symbol inputs 5.8 Medium -
ruby-tcltkRed Hat net-imap vulnerable to STARTTLS stripping via invalid response timing 7.6 High -
ruby-tcltkRed Hat RubyGems Escape sequence injection in errors 7.5 High -
ruby-tcltkRed Hat Code injection in RubyGems 8.8 High -
ruby-tcltkRed Hat RubyGems Escape sequence injection vulnerability in api response handling 7.5 High -
ruby-tcltkRed Hat RubyGems Escape sequence injection vulnerability in gem owner 7.5 High -
ruby-tcltkRed Hat RubyGems Escape sequence injection vulnerability in verbose 7.5 High -
ruby-tcltkRed Hat An issue was discovered in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x... 8.1 High -
ruby-tcltkRed Hat Ruby Openssl Allows Incorrect Value Comparison 9.8 Critical -
ruby-tcltkRed Hat In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0... 9.1 Critical -
ruby-tcltkRed Hat In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0... 7.5 High -
ruby-tcltkRed Hat In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0... 7.5 High -
ruby-tcltkRed Hat In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0... 7.5 High -
ruby-tcltkRed Hat Directory traversal vulnerability in the Dir.mktmpdir method in the tmpdir library in Ruby before... 7.5 High -
ruby-tcltkRed Hat Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0... 5.3 Medium -
ruby-tcltkRed Hat RubyGems Path Traversal vulnerability 5.5 Medium -
ruby-tcltkRed Hat RubyGems Cross-site Scripting vulnerability 6.1 Medium -
ruby-tcltkRed Hat RubyGems Improper Input Validation vulnerability 5.3 Medium -
ruby-tcltkRed Hat RubyGems Improper Verification of Cryptographic Signature vulnerability 9.8 Critical -
ruby-tcltkRed Hat RubyGems Infinite Loop vulnerability 7.5 High -
ruby-tcltkRed Hat RubyGems Deserialization of Untrusted Data vulnerability 7.8 High -
ruby-tcltkRed Hat RubyGems Link Following vulnerability 7.5 High -
ruby-tcltkRed Hat The lazy_initialize function in lib/resolv.rb in Ruby through 2.4.3 uses Kernel#open, which might... 9.8 Critical -
ruby-tcltkRed Hat Ruby before 2.4.3 allows Net::FTP command injection. Net::FTP#get, getbinaryfile, gettextfile,... 8.8 High -
ruby-tcltkRed Hat RubyGems vulnerable to Deserialization of Untrusted Data 9.8 Critical -
ruby-tcltkRed Hat Ruby OpenSSL DoS Vulnerability 7.5 High -
ruby-tcltkRed Hat WEBrick RCE Vulnerability 8.8 High -
ruby-tcltkRed Hat Ruby before 2.4.2, 2.3.5, and 2.2.8 is vulnerable to a malicious format string which contains a... 9.1 Critical -
ruby-tcltkRed Hat Ruby through 2.2.7, 2.3.x through 2.3.4, and 2.4.x through 2.4.1 can expose arbitrary memory... 9.8 Critical -
ruby-tcltkRed Hat RubyGems has Origin Validation Error vulnerability 8.1 High -
ruby-tcltkRed Hat RubyGems may allow a maliciously crafted gem to overwrite files 7.5 High -
ruby-tcltkRed Hat RubyGems Improper Input Validation vulnerability 7.5 High -
ruby-tcltkRed Hat RubyGems Code Injection vulnerability 9.8 Critical -
ruby-tcltkRed Hat The REXML parser in Ruby 1.9.x before 1.9.3 patchlevel 551, 2.0.x before 2.0.0 patchlevel 598,... 5.0 Medium -
ruby-tcltkRed Hat The REXML parser in Ruby 1.9.x before 1.9.3-p550, 2.0.x before 2.0.0-p594, and 2.1.x before 2.1.4... 5.0 Medium -
ruby-tcltkRed Hat Off-by-one error in the encodes function in pack.c in Ruby 1.9.3 and earlier, and 2.x through 2.1... 5.0 Medium -
ruby-tcltkRed Hat Heap-based buffer overflow in Ruby 1.8, 1.9 before 1.9.3-p484, 2.0 before 2.0.0-p353, 2.1 before... 6.8 Medium -
ruby-tcltkRed Hat The OpenSSL::SSL.verify_certificate_identity function in lib/openssl/ssl.rb in Ruby 1.8 before 1... 6.8 Medium -
ruby-tcltkRed Hat The safe-level feature in Ruby 1.8.7 allows context-dependent attackers to modify strings via the... 4.3 Medium -
ruby-tcltkRed Hat Ruby vulnerable to denial of service 5.0 Medium -
ruby-tcltkRed Hat The rb_get_path_check function in file.c in Ruby 1.9.3 before patchlevel 286 and Ruby 2.0.0... 5.0 Medium -
ruby-tcltkRed Hat Ruby (aka CRuby) before 1.8.7-p357 computes hash values without restricting the ability to... 7.8 High -
ruby-tcltkRed Hat Ruby before 1.8.6-p114 does not reset the random seed upon forking, which makes it easier for... 5.0 Medium -
ruby-tcltkRed Hat The SecureRandom.random_bytes function in lib/securerandom.rb in Ruby before 1.8.7-p352 and 1.9.x... 5.0 Medium -
ruby-tcltkRed Hat The VpMemAlloc function in bigdecimal.c in the BigDecimal class in Ruby 1.9.2-p136 and earlier,... 6.8 Medium -
ruby-tcltkRed Hat The safe-level feature in Ruby 1.8.6 through 1.8.6-420, 1.8.7 through 1.8.7-330, and 1.8.8dev... 5.0 Medium -
ruby-tcltkRed Hat The FileUtils.remove_entry_secure method in Ruby 1.8.6 through 1.8.6-420, 1.8.7 through 1.8.7-330... 6.3 Medium -
ruby-tcltkRed Hat Cross-site scripting (XSS) vulnerability in the WEBrick HTTP server in Ruby in Apple Mac OS X 10... 4.3 Medium -
ruby-tcltkRed Hat WEBrick Improper Input Validation vulnerability 7.5 High -
ruby-tcltkRed Hat The BigDecimal library in Ruby 1.8.6 before p369 and 1.8.7 before p173 allows context-dependent... 5.0 Medium - Show olderLoading…