rubygem-rake vulnerabilities (Red Hat)
229 vulnerabilities.
rubygem-rakeRed HatRubyGems Improper Input Validation vulnerability5.3 Mediumrubygem-rakeRed HatRubyGems Improper Verification of Cryptographic Signature vulnerability9.8 Criticalrubygem-rakeRed HatRubyGems Infinite Loop vulnerability7.5 Highrubygem-rakeRed HatRubyGems Deserialization of Untrusted Data vulnerability7.8 Highrubygem-rakeRed HatRubyGems Link Following vulnerability7.5 Highrubygem-rakeRed Hatrack-protection gem timing attack vulnerability when validating CSRF token5.9 Mediumrubygem-rakeRed HatDjango Denial-of-service possibility in truncatechars_html and truncatewords_html template filters5.3 Mediumrubygem-rakeRed HatDjango denial-of-service possibility in urlize and urlizetrunc template filters5.3 Mediumrubygem-rakeRed HatThe qpidd broker in Apache Qpid 0.30 and earlier allows remote authenticated users to cause a...6.5 Mediumrubygem-rakeRed HatIn previous versions of Puppet Agent it was possible for the agent to retrieve facts from an...6.5 Mediumrubygem-rakeRed HatDjango vulnerable to information leakage in AuthenticationForm7.5 Highrubygem-rakeRed HatPrivilege Escalation in Hibernate Validator7.0 Highrubygem-rakeRed HatTarball permission preservation in puppet5.5 Mediumrubygem-rakeRed HatThe lazy_initialize function in lib/resolv.rb in Ruby through 2.4.3 uses Kernel#open, which might...9.8 Criticalrubygem-rakeRed Hatnet-ldap Improper Certificate Validation vulnerability5.9 Mediumrubygem-rakeRed HatRuby before 2.4.3 allows Net::FTP command injection. Net::FTP#get, getbinaryfile, gettextfile,...8.8 Highrubygem-rakeRed HatAn attacker submitting facts to the Foreman server containing HTML can cause a stored XSS on...6.1 Mediumrubygem-rakeRed Hatjackson-databind vulnerable to deserialization flaw leading to unauthenticated remote code execution9.8 Criticalrubygem-rakeRed Hatqpidd in Apache Qpid 0.30 and earlier allows remote attackers to cause a denial of service ...7.5 Highrubygem-rakeRed HatPallets Werkzeug cross-site scripting vulnerability6.1 Mediumrubygem-rakeRed HatRubyGems vulnerable to Deserialization of Untrusted Data9.8 Criticalrubygem-rakeRed HatRuby OpenSSL DoS Vulnerability7.5 Highrubygem-rakeRed HatWEBrick RCE Vulnerability8.8 Highrubygem-rakeRed HatRuby before 2.4.2, 2.3.5, and 2.2.8 is vulnerable to a malicious format string which contains a...9.1 Criticalrubygem-rakeRed HatRuby through 2.2.7, 2.3.x through 2.3.4, and 2.4.x through 2.4.1 can expose arbitrary memory...9.8 Criticalrubygem-rakeRed HatRubyGems has Origin Validation Error vulnerability8.1 Highrubygem-rakeRed HatRubyGems may allow a maliciously crafted gem to overwrite files7.5 Highrubygem-rakeRed HatRubyGems Improper Input Validation vulnerability7.5 Highrubygem-rakeRed HatRubyGems Code Injection vulnerability9.8 Criticalrubygem-rakeRed HatWithdrawn Advisory: Improper Restriction of XML External Entity Reference in Apache ActiveMQ9.8 Criticalrubygem-rakeRed HatDjango open redirect and possible XSS attack via user-supplied numeric redirect URLs6.1 Mediumrubygem-rakeRed HatQOS.ch Logback vulnerable to Deserialization of Untrusted Data9.8 Criticalrubygem-rakeRed HatDenial of service in JBoss resteasy7.5 Highrubygem-rakeRed HatForeman before 1.10.3 and 1.11.0 before 1.11.0-RC2 allow remote authenticated users to read,...5.4 Mediumrubygem-rakeRed HatModerate severity vulnerability that affects org.apache.qpid:proton-j6.5 Mediumrubygem-rakeRed HatBouncy Castle in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to obtain...3.3 Lowrubygem-rakeRed HatCRLF injection vulnerability in the Ceph Object Gateway (aka radosgw or RGW) in Ceph before 0.94...4.3 Mediumrubygem-rakeRed HatForeman before 1.9.0 allows remote authenticated users with the edit_users permission to edit...6.0 Mediumrubygem-rakeRed HatForeman before 1.8.1 does not set the secure flag for the _session_id cookie in an https session,...5.0 Mediumrubygem-rakeRed HatForeman before 1.7.5 allows remote authenticated users to bypass organization and location...4.0 Mediumrubygem-rakeRed HatForman before 1.7.4 does not verify SSL certificates for LDAP connections, which allows man-in...5.0 Mediumrubygem-rakeRed HatCross-site scripting (XSS) vulnerability in the template preview function in Foreman before 1.6.1...4.3 Mediumrubygem-rakeRed HatRack vulnerable to Denial of Service via large parameter depth request5.0 Mediumrubygem-rakeRed HatNokogiri is vulnerable to XML External Entity (XXE) attack7.5 Highrubygem-rakeRed Hatrest-client Gem Vulnerable to Session Fixation9.8 Criticalrubygem-rakeRed Hatrest-client allows local users to obtain sensitive information by reading the log2.1 Lowrubygem-rakeRed HatMongoDB before 2.4.13 and 2.6.x before 2.6.8 allows remote attackers to cause a denial of service...5.0 Mediumrubygem-rakeRed HatUnspecified vulnerability in Apache Qpid 0.30 and earlier allows remote attackers to bypass...5.0 Mediumrubygem-rakeRed HatThe REXML parser in Ruby 1.9.x before 1.9.3 patchlevel 551, 2.0.x before 2.0.0 patchlevel 598,...5.0 Mediumrubygem-rakeRed HatRed Hat OpenShift Enterprise before 2.2 does not properly restrict access to gears, which allows...7.5 High- Show moreLoading…