rubygem-nokogiri vulnerabilities (Red Hat)
89 vulnerabilities.
rubygem-nokogiriRed HatApache Commons Configuration insecure interpolation defaults9.8 Criticalrubygem-nokogiriRed HatDjango `Trunc()` and `Extract()` database functions vulnerable to SQL Injection9.8 Criticalrubygem-nokogiriRed HatRails::Html::Sanitizer vulnerable to Cross-site Scripting6.1 Mediumrubygem-nokogiriRed HatImproper Handling of Unexpected Data Type in Nokogiri8.2 Highrubygem-nokogiriRed Hatsinatra does not validate expanded path matches7.5 Highrubygem-nokogiriRed HatXSS Vulnerability in Action View tag helpers6.1 Mediumrubygem-nokogiriRed HatCross-site Scripting Vulnerability in Action Pack6.1 Mediumrubygem-nokogiriRed HatCommand Injection8.1 Highrubygem-nokogiriRed HatInefficient Regular Expression Complexity in Nokogiri7.5 Highrubygem-nokogiriRed HatCross-site Scripting in Django6.1 Mediumrubygem-nokogiriRed HatSnappyFrameDecoder doesn't restrict chunk length any may buffer skippable chunks in an unnecessary way7.5 Highrubygem-nokogiriRed HatBzip2Decoder doesn't allow setting size restrictions for decompressed data7.5 Highrubygem-nokogiriRed HatThe default configuration of broker.conf in Red Hat OpenShift Enterprise 2.x before 2.1 has a...9.8 Criticalrubygem-nokogiriRed Hatmcollective has a default password set at install9.8 Criticalrubygem-nokogiriRed Hatopenshift-origin-node Improper Input Validation vulnerability5.5 Mediumrubygem-nokogiriRed Hatcfme-gemset versions 5.10.4.3 and below, 5.9.9.3 and below are vulnerable to a data leak, due to...4.3 Mediumrubygem-nokogiriRed HatWithdrawn Advisory: Improper Certificate Validation in Apache Qpid Proton7.4 Highrubygem-nokogiriRed HatBootstrap Cross-site Scripting vulnerability6.1 Mediumrubygem-nokogiriRed HatSinatra Cross-site Scripting vulnerability6.1 Mediumrubygem-nokogiriRed Hatrails-html-sanitizer Cross-site Scripting vulnerability6.1 Mediumrubygem-nokogiriRed HatCross-site Scripting in loofah6.1 Mediumrubygem-nokogiriRed HatNokogiri is vulnerable to XML External Entity (XXE) attack7.5 Highrubygem-nokogiriRed HatRed Hat OpenShift Enterprise before 2.2 does not properly restrict access to gears, which allows...7.5 Highrubygem-nokogiriRed HatRed Hat OpenShift Enterprise before 2.2 allows local users to obtain IP address and port number...2.1 Lowrubygem-nokogiriRed HatJenkins Cross-Site Request Forgery vulnerabilities6.8 Mediumrubygem-nokogiriRed HatJenkins vulnerable to Cross-site Scripting2.1 Lowrubygem-nokogiriRed HatCross-site scripting (XSS) vulnerability in ZeroClipboard.swf and ZeroClipboard10.swf in...4.3 Mediumrubygem-nokogiriRed Hataviary/jobcontrol.py in Condor, as used in Red Hat Enterprise MRG 2.3, when removing a job,...4.3 Mediumrubygem-nokogiriRed HatThe command_give_request_ad function in condor_startd.V6/command.cpp Condor 7.6.x before 7.6.10...5.8 Mediumrubygem-nokogiriRed HatThe filesystem authentication (condor_io/condor_auth_fs.cpp) in Condor 7.6.x before 7.6.10 and 7...6.4 Mediumrubygem-nokogiriRed Hatsrc/condor_schedd.V6/schedd.cpp in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 does not...4.0 Mediumrubygem-nokogiriRed HatCumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0,...4.9 Mediumrubygem-nokogiriRed HatSession fixation vulnerability in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging,...4.9 Mediumrubygem-nokogiriRed HatMultiple cross-site request forgery (CSRF) vulnerabilities in Cumin before 0.1.5444, as used in...6.8 Mediumrubygem-nokogiriRed HatCumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0,...4.0 Mediumrubygem-nokogiriRed HatMultiple SQL injection vulnerabilities in the get_sample_filters_by_signature function in Cumin...7.5 Highrubygem-nokogiriRed HatMultiple cross-site scripting (XSS) vulnerabilities in Cumin before 0.1.5444, as used in Red Hat...4.3 Mediumrubygem-nokogiriRed HatCumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0,...5.8 Mediumrubygem-nokogiriRed HatCumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0,...5.0 Medium