rubygem-passenger vulnerabilities (Red Hat)
120 vulnerabilities.
rubygem-passengerRed HatForeman before 1.7.5 allows remote authenticated users to bypass organization and location...4.0 Mediumrubygem-passengerRed HatForman before 1.7.4 does not verify SSL certificates for LDAP connections, which allows man-in...5.0 Mediumrubygem-passengerRed HatCross-site scripting (XSS) vulnerability in the template preview function in Foreman before 1.6.1...4.3 Mediumrubygem-passengerRed HatRack vulnerable to Denial of Service via large parameter depth request5.0 Mediumrubygem-passengerRed Hatrest-client Gem Vulnerable to Session Fixation9.8 Criticalrubygem-passengerRed Hatrest-client allows local users to obtain sensitive information by reading the log2.1 Lowrubygem-passengerRed HatMongoDB before 2.4.13 and 2.6.x before 2.6.8 allows remote attackers to cause a denial of service...5.0 Mediumrubygem-passengerRed HatUnspecified vulnerability in Apache Qpid 0.30 and earlier allows remote attackers to bypass...5.0 Mediumrubygem-passengerRed HatRed Hat OpenShift Enterprise before 2.2 does not properly restrict access to gears, which allows...7.5 Highrubygem-passengerRed HatRed Hat OpenShift Enterprise before 2.2 allows local users to obtain IP address and port number...2.1 Lowrubygem-passengerRed HatSimpleGeo python-oauth2 does not check the nonce allowing replay attacks4.3 Mediumrubygem-passengerRed HatJenkins Cross-Site Request Forgery vulnerabilities6.8 Mediumrubygem-passengerRed HatJenkins vulnerable to Cross-site Scripting2.1 Lowrubygem-passengerRed HatMultiple unspecified vulnerabilities in Google V8 before 3.24.35.10, as used in Google Chrome...7.5 Highrubygem-passengerRed HatSimpleGeo python-oauth2 vulnerable to the use of Insufficiently Random Values to generate nonces5.8 Mediumrubygem-passengerRed Hatinsecure temporary directory usage in passenger4.4 Mediumrubygem-passengerRed HatPhusion Passenger Denial of Service4.6 Mediumrubygem-passengerRed HatAlgorithmic complexity vulnerability in the ssl.match_hostname function in Python 3.2.x, 3.3.x,...4.3 Mediumrubygem-passengerRed HatCross-site scripting (XSS) vulnerability in ZeroClipboard.swf and ZeroClipboard10.swf in...4.3 Mediumrubygem-passengerRed HatApache Tomcat affected by vulnerability in TLS and SSL protocol5.8 Medium