rubygem-json-debuginfo vulnerabilities (Red Hat)
100 vulnerabilities.
rubygem-json-debuginfoRed Hatmcollective has a default password set at install9.8 Criticalrubygem-json-debuginfoRed Hatopenshift-origin-node Improper Input Validation vulnerability5.5 Mediumrubygem-json-debuginfoRed HatRuby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows code injection if the...8.1 Highrubygem-json-debuginfoRed HatRuby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows HTTP Response Splitting....5.3 Mediumrubygem-json-debuginfoRed HatWEBrick::HTTPAuth::DigestAuth in Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4...7.5 Highrubygem-json-debuginfoRed HatRuby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 mishandles path checking within...6.5 Mediumrubygem-json-debuginfoRed HatAn integer overflow in the search_in_range function in regexec.c in Oniguruma 6.x before 6.9...9.8 Criticalrubygem-json-debuginfoRed HatA lack of access control was found in the message queues maintained by Satellite's QPID broker...8.0 Highrubygem-json-debuginfoRed HatRubyGems Escape sequence injection in errors7.5 Highrubygem-json-debuginfoRed HatCode injection in RubyGems8.8 Highrubygem-json-debuginfoRed HatRubyGems Escape sequence injection vulnerability in api response handling7.5 Highrubygem-json-debuginfoRed HatRubyGems Escape sequence injection vulnerability in gem owner7.5 Highrubygem-json-debuginfoRed HatRubyGems Escape sequence injection vulnerability in verbose7.5 Highrubygem-json-debuginfoRed HatRubyGems Delete directory using symlink when decompressing tar7.4 Highrubygem-json-debuginfoRed HatSinatra Cross-site Scripting vulnerability6.1 Mediumrubygem-json-debuginfoRed Hatrails-html-sanitizer Cross-site Scripting vulnerability6.1 Mediumrubygem-json-debuginfoRed HatCross-site Scripting in loofah6.1 Mediumrubygem-json-debuginfoRed HatThe qpidd broker in Apache Qpid 0.30 and earlier allows remote authenticated users to cause a...6.5 Mediumrubygem-json-debuginfoRed Hatqpidd in Apache Qpid 0.30 and earlier allows remote attackers to cause a denial of service ...7.5 Highrubygem-json-debuginfoRed HatForeman before 1.10.3 and 1.11.0 before 1.11.0-RC2 allow remote authenticated users to read,...5.4 Mediumrubygem-json-debuginfoRed HatForeman before 1.9.0 allows remote authenticated users with the edit_users permission to edit...6.0 Mediumrubygem-json-debuginfoRed HatForeman before 1.8.1 does not set the secure flag for the _session_id cookie in an https session,...5.0 Mediumrubygem-json-debuginfoRed HatForeman before 1.7.5 allows remote authenticated users to bypass organization and location...4.0 Mediumrubygem-json-debuginfoRed HatForman before 1.7.4 does not verify SSL certificates for LDAP connections, which allows man-in...5.0 Mediumrubygem-json-debuginfoRed HatCross-site scripting (XSS) vulnerability in the template preview function in Foreman before 1.6.1...4.3 Mediumrubygem-json-debuginfoRed HatNokogiri is vulnerable to XML External Entity (XXE) attack7.5 Highrubygem-json-debuginfoRed HatMongoDB before 2.4.13 and 2.6.x before 2.6.8 allows remote attackers to cause a denial of service...5.0 Mediumrubygem-json-debuginfoRed HatUnspecified vulnerability in Apache Qpid 0.30 and earlier allows remote attackers to bypass...5.0 Mediumrubygem-json-debuginfoRed HatRed Hat OpenShift Enterprise before 2.2 does not properly restrict access to gears, which allows...7.5 Highrubygem-json-debuginfoRed HatRed Hat OpenShift Enterprise before 2.2 allows local users to obtain IP address and port number...2.1 Lowrubygem-json-debuginfoRed HatSimpleGeo python-oauth2 does not check the nonce allowing replay attacks4.3 Mediumrubygem-json-debuginfoRed HatSimpleGeo python-oauth2 vulnerable to the use of Insufficiently Random Values to generate nonces5.8 Mediumrubygem-json-debuginfoRed HatAlgorithmic complexity vulnerability in the ssl.match_hostname function in Python 3.2.x, 3.3.x,...4.3 Mediumrubygem-json-debuginfoRed HatRDoc contains XSS vulnerability4.3 Mediumrubygem-json-debuginfoRed HatJSON gem has Improper Input Validation vulnerability7.5 Highrubygem-json-debuginfoRed HatThe command_give_request_ad function in condor_startd.V6/command.cpp Condor 7.6.x before 7.6.10...5.8 Mediumrubygem-json-debuginfoRed HatThe filesystem authentication (condor_io/condor_auth_fs.cpp) in Condor 7.6.x before 7.6.10 and 7...6.4 Mediumrubygem-json-debuginfoRed Hatsrc/condor_schedd.V6/schedd.cpp in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 does not...4.0 Mediumrubygem-json-debuginfoRed HatCumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0,...4.9 Mediumrubygem-json-debuginfoRed HatSession fixation vulnerability in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging,...4.9 Mediumrubygem-json-debuginfoRed HatMultiple cross-site request forgery (CSRF) vulnerabilities in Cumin before 0.1.5444, as used in...6.8 Mediumrubygem-json-debuginfoRed HatCumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0,...4.0 Mediumrubygem-json-debuginfoRed HatMultiple SQL injection vulnerabilities in the get_sample_filters_by_signature function in Cumin...7.5 Highrubygem-json-debuginfoRed HatMultiple cross-site scripting (XSS) vulnerabilities in Cumin before 0.1.5444, as used in Red Hat...4.3 Mediumrubygem-json-debuginfoRed HatCumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0,...5.8 Mediumrubygem-json-debuginfoRed HatCumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0,...5.0 Medium