rubygem-rdoc vulnerabilities (Red Hat)
113 vulnerabilities.
rubygem-rdocRed HatRuby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows HTTP Response Splitting....5.3 Mediumrubygem-rdocRed HatWEBrick::HTTPAuth::DigestAuth in Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4...7.5 Highrubygem-rdocRed HatRuby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 mishandles path checking within...6.5 Mediumrubygem-rdocRed HatAn integer overflow in the search_in_range function in regexec.c in Oniguruma 6.x before 6.9...9.8 Criticalrubygem-rdocRed HatRubyzip denial of service5.5 Mediumrubygem-rdocRed HatRubyGems Escape sequence injection in errors7.5 Highrubygem-rdocRed HatCode injection in RubyGems8.8 Highrubygem-rdocRed HatRubyGems Escape sequence injection vulnerability in api response handling7.5 Highrubygem-rdocRed HatRubyGems Escape sequence injection vulnerability in gem owner7.5 Highrubygem-rdocRed HatRubyGems Escape sequence injection vulnerability in verbose7.5 Highrubygem-rdocRed HatRubyGems Delete directory using symlink when decompressing tar7.4 Highrubygem-rdocRed HatAn issue was discovered in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x...8.1 Highrubygem-rdocRed HatRuby Openssl Allows Incorrect Value Comparison9.8 Criticalrubygem-rdocRed HatSinatra Cross-site Scripting vulnerability6.1 Mediumrubygem-rdocRed HatIn Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0...9.1 Criticalrubygem-rdocRed HatIn Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0...7.5 Highrubygem-rdocRed HatIn Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0...7.5 Highrubygem-rdocRed HatIn Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0...7.5 Highrubygem-rdocRed HatDirectory traversal vulnerability in the Dir.mktmpdir method in the tmpdir library in Ruby before...7.5 Highrubygem-rdocRed HatRuby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0...5.3 Mediumrubygem-rdocRed Hatrails-html-sanitizer Cross-site Scripting vulnerability6.1 Mediumrubygem-rdocRed HatCross-site Scripting in loofah6.1 Mediumrubygem-rdocRed HatRubyGems Path Traversal vulnerability5.5 Mediumrubygem-rdocRed HatRubyGems Cross-site Scripting vulnerability6.1 Mediumrubygem-rdocRed HatRubyGems Improper Input Validation vulnerability5.3 Mediumrubygem-rdocRed HatRubyGems Improper Verification of Cryptographic Signature vulnerability9.8 Criticalrubygem-rdocRed HatRubyGems Infinite Loop vulnerability7.5 Highrubygem-rdocRed HatRubyGems Deserialization of Untrusted Data vulnerability7.8 Highrubygem-rdocRed HatRubyGems Link Following vulnerability7.5 Highrubygem-rdocRed HatThe qpidd broker in Apache Qpid 0.30 and earlier allows remote authenticated users to cause a...6.5 Mediumrubygem-rdocRed HatThe lazy_initialize function in lib/resolv.rb in Ruby through 2.4.3 uses Kernel#open, which might...9.8 Criticalrubygem-rdocRed HatRuby before 2.4.3 allows Net::FTP command injection. Net::FTP#get, getbinaryfile, gettextfile,...8.8 Highrubygem-rdocRed Hatqpidd in Apache Qpid 0.30 and earlier allows remote attackers to cause a denial of service ...7.5 Highrubygem-rdocRed HatRubyGems vulnerable to Deserialization of Untrusted Data9.8 Criticalrubygem-rdocRed HatRuby OpenSSL DoS Vulnerability7.5 Highrubygem-rdocRed HatWEBrick RCE Vulnerability8.8 Highrubygem-rdocRed HatRuby before 2.4.2, 2.3.5, and 2.2.8 is vulnerable to a malicious format string which contains a...9.1 Criticalrubygem-rdocRed HatRuby through 2.2.7, 2.3.x through 2.3.4, and 2.4.x through 2.4.1 can expose arbitrary memory...9.8 Criticalrubygem-rdocRed HatRubyGems has Origin Validation Error vulnerability8.1 Highrubygem-rdocRed HatRubyGems may allow a maliciously crafted gem to overwrite files7.5 Highrubygem-rdocRed HatRubyGems Improper Input Validation vulnerability7.5 Highrubygem-rdocRed HatRubyGems Code Injection vulnerability9.8 Criticalrubygem-rdocRed HatForeman before 1.10.3 and 1.11.0 before 1.11.0-RC2 allow remote authenticated users to read,...5.4 Mediumrubygem-rdocRed HatForeman before 1.9.0 allows remote authenticated users with the edit_users permission to edit...6.0 Mediumrubygem-rdocRed HatForeman before 1.8.1 does not set the secure flag for the _session_id cookie in an https session,...5.0 Mediumrubygem-rdocRed HatForeman before 1.7.5 allows remote authenticated users to bypass organization and location...4.0 Mediumrubygem-rdocRed HatForman before 1.7.4 does not verify SSL certificates for LDAP connections, which allows man-in...5.0 Mediumrubygem-rdocRed HatCross-site scripting (XSS) vulnerability in the template preview function in Foreman before 1.6.1...4.3 Mediumrubygem-rdocRed HatNokogiri is vulnerable to XML External Entity (XXE) attack7.5 Highrubygem-rdocRed HatMongoDB before 2.4.13 and 2.6.x before 2.6.8 allows remote attackers to cause a denial of service...5.0 Medium- Show moreLoading…