Skip to content

rubygem-passenger-native vulnerabilities (Red Hat)

120 vulnerabilities.

rubygem-passenger-native Red HatForeman before 1.7.5 allows remote authenticated users to bypass organization and location...CVE-2015-18444.0 MediumAugust 14, 2015
rubygem-passenger-native Red HatForman before 1.7.4 does not verify SSL certificates for LDAP connections, which allows man-in...CVE-2015-18165.0 MediumAugust 14, 2015
rubygem-passenger-native Red HatCross-site scripting (XSS) vulnerability in the template preview function in Foreman before 1.6.1...CVE-2014-36534.3 MediumJuly 6, 2015
rubygem-passenger-native Red HatRack vulnerable to Denial of Service via large parameter depth requestCVE-2015-3225Fix available5.0 MediumJune 26, 2015
rubygem-passenger-native Red Hatrest-client Gem Vulnerable to Session FixationCVE-2015-1820Fix available9.8 CriticalMay 15, 2015
rubygem-passenger-native Red Hatrest-client allows local users to obtain sensitive information by reading the logCVE-2015-3448Fix available2.1 LowApril 29, 2015
rubygem-passenger-native Red HatMongoDB before 2.4.13 and 2.6.x before 2.6.8 allows remote attackers to cause a denial of service...CVE-2015-1609Fix available5.0 MediumMarch 20, 2015
rubygem-passenger-native Red HatUnspecified vulnerability in Apache Qpid 0.30 and earlier allows remote attackers to bypass...CVE-2015-02235.0 MediumFebruary 2, 2015
rubygem-passenger-native Red HatRed Hat OpenShift Enterprise before 2.2 does not properly restrict access to gears, which allows...CVE-2014-36747.5 HighNovember 13, 2014
rubygem-passenger-native Red HatRed Hat OpenShift Enterprise before 2.2 allows local users to obtain IP address and port number...CVE-2014-36022.1 LowNovember 13, 2014
rubygem-passenger-native Red HatSimpleGeo python-oauth2 does not check the nonce allowing replay attacksCVE-2013-4346Fix available4.3 MediumMay 20, 2014
rubygem-passenger-native Red HatJenkins Cross-Site Request Forgery vulnerabilitiesCVE-2013-2034Fix available6.8 MediumMay 14, 2014
rubygem-passenger-native Red HatJenkins vulnerable to Cross-site ScriptingCVE-2013-2033Fix available2.1 LowApril 10, 2014
rubygem-passenger-native Red HatMultiple unspecified vulnerabilities in Google V8 before 3.24.35.10, as used in Google Chrome...CVE-2013-6668Public exploitFix available7.5 HighMarch 5, 2014
rubygem-passenger-native Red HatSimpleGeo python-oauth2 vulnerable to the use of Insufficiently Random Values to generate noncesCVE-2013-4347Fix available5.8 MediumOctober 25, 2013
rubygem-passenger-native Red Hatinsecure temporary directory usage in passengerCVE-2013-4136Fix available4.4 MediumAugust 22, 2013
rubygem-passenger-native Red HatPhusion Passenger Denial of ServiceCVE-2013-2119Fix available4.6 MediumJuly 9, 2013
rubygem-passenger-native Red HatAlgorithmic complexity vulnerability in the ssl.match_hostname function in Python 3.2.x, 3.3.x,...CVE-2013-2099Fix available4.3 MediumMay 16, 2013
rubygem-passenger-native Red HatCross-site scripting (XSS) vulnerability in ZeroClipboard.swf and ZeroClipboard10.swf in...CVE-2013-18084.3 MediumMarch 28, 2013
rubygem-passenger-native Red HatApache Tomcat affected by vulnerability in TLS and SSL protocolCVE-2009-3555Public exploitFix availableEPSS 87.3%5.8 MediumNovember 9, 2009