ruby vulnerabilities (Red Hat)
137 vulnerabilities.
rubyRed HatThe SecureRandom.random_bytes function in lib/securerandom.rb in Ruby before 1.8.7-p352 and 1.9.x...5.0 MediumrubyRed HatThe VpMemAlloc function in bigdecimal.c in the BigDecimal class in Ruby 1.9.2-p136 and earlier,...6.8 MediumrubyRed HatThe safe-level feature in Ruby 1.8.6 through 1.8.6-420, 1.8.7 through 1.8.7-330, and 1.8.8dev...5.0 MediumrubyRed HatThe FileUtils.remove_entry_secure method in Ruby 1.8.6 through 1.8.6-420, 1.8.7 through 1.8.7-330...6.3 MediumrubyRed HatCross-site scripting (XSS) vulnerability in the WEBrick HTTP server in Ruby in Apple Mac OS X 10...4.3 MediumrubyRed HatWEBrick Improper Input Validation vulnerability7.5 HighrubyRed HatThe BigDecimal library in Ruby 1.8.6 before p369 and 1.8.7 before p173 allows context-dependent...5.0 MediumrubyRed Hatext/openssl/ossl_ocsp.c in Ruby 1.8 and 1.9 does not properly check the return value from the...6.8 MediumrubyRed HatWEBrick Denial of Service Vulnerability7.8 HighrubyRed Hatresolv.rb in Ruby 1.8.5 and earlier, 1.8.6 before 1.8.6-p287, 1.8.7 before 1.8.7-p72, and 1.9...5.8 MediumrubyRed HatThe REXML module in Ruby 1.8.6 through 1.8.6-p287, 1.8.7 through 1.8.7-p72, and 1.9 allows...5.0 MediumrubyRed HatThe regular expression engine (regex.c) in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8...5.0 MediumrubyRed HatThe dl module in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1...7.5 HighrubyRed HatAlgorithmic complexity vulnerability in the WEBrick::HTTPUtils.split_header_value function in...7.8 HighrubyRed HatRuby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423...7.5 HighrubyRed HatInteger overflow in the rb_ary_fill function in array.c in Ruby before revision 17756 allows...7.5 HighrubyRed HatInteger overflow in the (1) rb_ary_splice function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5...7.8 HighrubyRed HatInteger overflow in the (1) rb_ary_splice function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5...7.8 HighrubyRed HatThe rb_str_format function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6...7.8 HighrubyRed HatMultiple integer overflows in the rb_ary_store function in Ruby 1.8.4 and earlier, 1.8.5 before 1...10.0 HighrubyRed HatMultiple integer overflows in the rb_str_buf_append function in Ruby 1.8.4 and earlier, 1.8.5...10.0 HighrubyRed HatDirectory traversal vulnerability in WEBrick in Ruby 1.8 before 1.8.5-p115 and 1.8.6-p114, and 1...5.0 MediumrubyRed HatThe (1) Net::ftptls, (2) Net::telnets, (3) Net::imap, (4) Net::pop, and (5) Net::smtp libraries...5.0 MediumrubyRed HatThe connect method in lib/net/http.rb in the (1) Net::HTTP and (2) Net::HTTPS libraries in Ruby 1...4.3 MediumrubyRed HatThe APOP protocol allows remote attackers to guess the first 3 characters of a password via man...2.6 LowrubyRed HatThe read_multipart function in cgi.rb in Ruby before 1.8.5-p2 does not properly detect boundaries...5.0 MediumrubyRed HatThe cgi.rb CGI library for Ruby 1.8 allows remote attackers to cause a denial of service ...5.0 MediumrubyRed HatMultiple unspecified vulnerabilities in Ruby before 1.8.5 allow remote attackers to bypass "safe...6.4 MediumrubyRed HatThe HTTP/XMLRPC server in Ruby before 1.8.2 uses blocking sockets, which allows attackers to...5.0 MediumrubyRed HatRuby 1.6.x up to 1.6.8, 1.8.x up to 1.8.2, and 1.9.0 development up to 2005-09-01 allows...7.5 HighrubyRed HatThe XMLRPC server in utils.rb for the ruby library (libruby) 1.8 sets an invalid default value...7.5 HighrubyRed HatThe CGI module in Ruby 1.6 before 1.6.8, and 1.8 before 1.8.2, allows remote attackers to cause a...5.0 MediumrubyRed HatThe FileStore capability in CGI::Session for Ruby before 1.8.1, and possibly PStore, creates...2.1 Low