rubygem-bson vulnerabilities (Red Hat)
60 vulnerabilities.
-
rubygem-bsonRed Hat GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB Ruby Driver 6.1 Medium -
rubygem-bsonRed Hat An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::Resource.get_class,... 7.5 High -
rubygem-bsonRed Hat net-imap: Command Injection via unvalidated Symbol inputs 5.8 Medium -
rubygem-bsonRed Hat net-imap vulnerable to STARTTLS stripping via invalid response timing 7.6 High -
rubygem-bsonRed Hat REXML ReDoS vulnerability 6.6 Medium -
rubygem-bsonRed Hat REXML contains a denial of service vulnerability 5.3 Medium -
rubygem-bsonRed Hat An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the... 6.6 Medium -
rubygem-bsonRed Hat RDoc RCE vulnerability with .rdoc_options 4.5 Medium -
rubygem-bsonRed Hat StringIO buffer overread vulnerability 9.8 Critical -
rubygem-bsonRed Hat URI gem has ReDoS vulnerability 5.3 Medium -
rubygem-bsonRed Hat Ruby Time component ReDoS issue 5.3 Medium -
rubygem-bsonRed Hat Ruby URI component ReDoS issue 5.3 Medium -
rubygem-bsonRed Hat HTTP response splitting in CGI 8.8 High -
rubygem-bsonRed Hat There is a buffer over-read in Ruby before 2.6.10, 2.7.x before 2.7.6, 3.x before 3.0.4, and 3.1... 7.5 High -
rubygem-bsonRed Hat Cookie Prefix Spoofing in CGI::Cookie.parse 7.5 High -
rubygem-bsonRed Hat Local Code Execution through Argument Injection via dash leading git url parameter in Gemfile 6.7 Medium -
rubygem-bsonRed Hat Regular expression denial of service vulnerability (ReDoS) in date 7.5 High -
rubygem-bsonRed Hat An issue was discovered in Ruby through 2.6.7, 2.7.x through 2.7.3, and 3.x through 3.0.1. Net:... 7.4 High -
rubygem-bsonRed Hat Arbitrary Code Execution in Rdoc 7.0 High -
rubygem-bsonRed Hat An issue was discovered in Ruby through 2.6.7, 2.7.x through 2.7.3, and 3.x through 3.0.1. A... 5.8 Medium -
rubygem-bsonRed Hat Dependency Confusion in Bundler 8.8 High -
rubygem-bsonRed Hat REXML round-trip instability 7.5 High -
rubygem-bsonRed Hat WEBRick vulnerable to HTTP Request/Response Smuggling 7.5 High -
rubygem-bsonRed Hat Insecure path handling in Bundler 7.8 High -
rubygem-bsonRed Hat An issue was discovered in Ruby 2.5.x through 2.5.7, 2.6.x through 2.6.5, and 2.7.0. If a victim... 5.3 Medium -
rubygem-bsonRed Hat Unsafe object creation in json RubyGem 7.5 High -
rubygem-bsonRed Hat The default configuration of broker.conf in Red Hat OpenShift Enterprise 2.x before 2.1 has a... 9.8 Critical -
rubygem-bsonRed Hat mcollective has a default password set at install 9.8 Critical -
rubygem-bsonRed Hat openshift-origin-node Improper Input Validation vulnerability 5.5 Medium -
rubygem-bsonRed Hat Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows code injection if the... 8.1 High -
rubygem-bsonRed Hat Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows HTTP Response Splitting.... 5.3 Medium -
rubygem-bsonRed Hat WEBrick::HTTPAuth::DigestAuth in Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4... 7.5 High -
rubygem-bsonRed Hat Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 mishandles path checking within... 6.5 Medium -
rubygem-bsonRed Hat An integer overflow in the search_in_range function in regexec.c in Oniguruma 6.x before 6.9... 9.8 Critical -
rubygem-bsonRed Hat RubyGems Escape sequence injection in errors 7.5 High -
rubygem-bsonRed Hat Code injection in RubyGems 8.8 High -
rubygem-bsonRed Hat RubyGems Escape sequence injection vulnerability in api response handling 7.5 High -
rubygem-bsonRed Hat RubyGems Escape sequence injection vulnerability in gem owner 7.5 High -
rubygem-bsonRed Hat RubyGems Escape sequence injection vulnerability in verbose 7.5 High -
rubygem-bsonRed Hat RubyGems Delete directory using symlink when decompressing tar 7.4 High -
rubygem-bsonRed Hat Red Hat OpenShift Enterprise before 2.2 does not properly restrict access to gears, which allows... 7.5 High -
rubygem-bsonRed Hat Red Hat OpenShift Enterprise before 2.2 allows local users to obtain IP address and port number... 2.1 Low -
rubygem-bsonRed Hat Jenkins Cross-Site Request Forgery vulnerabilities 6.8 Medium -
rubygem-bsonRed Hat Jenkins vulnerable to Cross-site Scripting 2.1 Low -
rubygem-bsonRed Hat Ruby 1.8.7 before patchlevel 371, 1.9.3 before patchlevel 286, and 2.0 before revision r37068... 5.0 Medium -
rubygem-bsonRed Hat Ruby 1.9.3 before patchlevel 286 and 2.0 before revision r37068 allows context-dependent... 5.0 Medium -
rubygem-bsonRed Hat Cross-site scripting (XSS) vulnerability in ZeroClipboard.swf and ZeroClipboard10.swf in... 4.3 Medium -
rubygem-bsonRed Hat ruby_parser allows local users to overwrite arbitrary files via symlink attack on temporary file with predictable name 2.1 Low -
rubygem-bsonRed Hat ActiveRecord vulnerable to modification of protected model attributes 4.3 Medium -
rubygem-bsonRed Hat Active Record allows bypassing of database-query restrictions 6.4 Medium - Show olderLoading…