rubygem-bundler vulnerabilities (Red Hat)
86 vulnerabilities.
rubygem-bundlerRed Hatmcollective has a default password set at install9.8 Criticalrubygem-bundlerRed Hatopenshift-origin-node Improper Input Validation vulnerability5.5 Mediumrubygem-bundlerRed HatRuby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows code injection if the...8.1 Highrubygem-bundlerRed HatRuby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows HTTP Response Splitting....5.3 Mediumrubygem-bundlerRed HatWEBrick::HTTPAuth::DigestAuth in Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4...7.5 Highrubygem-bundlerRed HatRuby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 mishandles path checking within...6.5 Mediumrubygem-bundlerRed HatAn integer overflow in the search_in_range function in regexec.c in Oniguruma 6.x before 6.9...9.8 Criticalrubygem-bundlerRed HatRubyGems Escape sequence injection in errors7.5 Highrubygem-bundlerRed HatCode injection in RubyGems8.8 Highrubygem-bundlerRed HatRubyGems Escape sequence injection vulnerability in api response handling7.5 Highrubygem-bundlerRed HatRubyGems Escape sequence injection vulnerability in gem owner7.5 Highrubygem-bundlerRed HatRubyGems Escape sequence injection vulnerability in verbose7.5 Highrubygem-bundlerRed HatRubyGems Delete directory using symlink when decompressing tar7.4 Highrubygem-bundlerRed HatThe qpidd broker in Apache Qpid 0.30 and earlier allows remote authenticated users to cause a...6.5 Mediumrubygem-bundlerRed Hatqpidd in Apache Qpid 0.30 and earlier allows remote attackers to cause a denial of service ...7.5 Highrubygem-bundlerRed HatForeman before 1.10.3 and 1.11.0 before 1.11.0-RC2 allow remote authenticated users to read,...5.4 Mediumrubygem-bundlerRed HatForeman before 1.9.0 allows remote authenticated users with the edit_users permission to edit...6.0 Mediumrubygem-bundlerRed HatForeman before 1.8.1 does not set the secure flag for the _session_id cookie in an https session,...5.0 Mediumrubygem-bundlerRed HatForeman before 1.7.5 allows remote authenticated users to bypass organization and location...4.0 Mediumrubygem-bundlerRed HatForman before 1.7.4 does not verify SSL certificates for LDAP connections, which allows man-in...5.0 Mediumrubygem-bundlerRed HatCross-site scripting (XSS) vulnerability in the template preview function in Foreman before 1.6.1...4.3 Mediumrubygem-bundlerRed HatMongoDB before 2.4.13 and 2.6.x before 2.6.8 allows remote attackers to cause a denial of service...5.0 Mediumrubygem-bundlerRed HatUnspecified vulnerability in Apache Qpid 0.30 and earlier allows remote attackers to bypass...5.0 Mediumrubygem-bundlerRed HatRed Hat OpenShift Enterprise before 2.2 does not properly restrict access to gears, which allows...7.5 Highrubygem-bundlerRed HatRed Hat OpenShift Enterprise before 2.2 allows local users to obtain IP address and port number...2.1 Lowrubygem-bundlerRed HatBundler may install gems from a different source than expected5.0 Mediumrubygem-bundlerRed HatSimpleGeo python-oauth2 does not check the nonce allowing replay attacks4.3 Mediumrubygem-bundlerRed HatJenkins Cross-Site Request Forgery vulnerabilities6.8 Mediumrubygem-bundlerRed HatJenkins vulnerable to Cross-site Scripting2.1 Lowrubygem-bundlerRed HatSimpleGeo python-oauth2 vulnerable to the use of Insufficiently Random Values to generate nonces5.8 Mediumrubygem-bundlerRed HatAlgorithmic complexity vulnerability in the ssl.match_hostname function in Python 3.2.x, 3.3.x,...4.3 Mediumrubygem-bundlerRed HatCross-site scripting (XSS) vulnerability in ZeroClipboard.swf and ZeroClipboard10.swf in...4.3 Medium