rubygem-xmlrpc vulnerabilities (Red Hat)
83 vulnerabilities.
rubygem-xmlrpcRed HatActive Record RCE bug with Serialized Columns9.8 Criticalrubygem-xmlrpcRed HatApache Commons Configuration insecure interpolation defaults9.8 Criticalrubygem-xmlrpcRed HatXSS Vulnerability in Action View tag helpers6.1 Mediumrubygem-xmlrpcRed HatCross-site Scripting Vulnerability in Action Pack6.1 Mediumrubygem-xmlrpcRed HatThere is a buffer over-read in Ruby before 2.6.10, 2.7.x before 2.7.6, 3.x before 3.0.4, and 3.1...7.5 Highrubygem-xmlrpcRed HatCookie Prefix Spoofing in CGI::Cookie.parse7.5 Highrubygem-xmlrpcRed HatLocal Code Execution through Argument Injection via dash leading git url parameter in Gemfile6.7 Mediumrubygem-xmlrpcRed HatRegular expression denial of service vulnerability (ReDoS) in date7.5 Highrubygem-xmlrpcRed HatAn issue was discovered in Ruby through 2.6.7, 2.7.x through 2.7.3, and 3.x through 3.0.1. Net:...7.4 Highrubygem-xmlrpcRed HatArbitrary Code Execution in Rdoc7.0 Highrubygem-xmlrpcRed HatAn issue was discovered in Ruby through 2.6.7, 2.7.x through 2.7.3, and 3.x through 3.0.1. A...5.8 Mediumrubygem-xmlrpcRed HatDependency Confusion in Bundler8.8 Highrubygem-xmlrpcRed HatREXML round-trip instability7.5 Highrubygem-xmlrpcRed HatWEBRick vulnerable to HTTP Request/Response Smuggling7.5 Highrubygem-xmlrpcRed HatInsecure path handling in Bundler7.8 Highrubygem-xmlrpcRed HatAn issue was discovered in Ruby 2.5.x through 2.5.7, 2.6.x through 2.6.5, and 2.7.0. If a victim...5.3 Mediumrubygem-xmlrpcRed HatUnsafe object creation in json RubyGem7.5 Highrubygem-xmlrpcRed HatRuby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows code injection if the...8.1 Highrubygem-xmlrpcRed HatRuby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows HTTP Response Splitting....5.3 Mediumrubygem-xmlrpcRed HatWEBrick::HTTPAuth::DigestAuth in Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4...7.5 Highrubygem-xmlrpcRed HatRuby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 mishandles path checking within...6.5 Mediumrubygem-xmlrpcRed HatAn integer overflow in the search_in_range function in regexec.c in Oniguruma 6.x before 6.9...9.8 Criticalrubygem-xmlrpcRed HatRubyzip denial of service5.5 Mediumrubygem-xmlrpcRed HatRubyGems Escape sequence injection in errors7.5 Highrubygem-xmlrpcRed HatCode injection in RubyGems8.8 Highrubygem-xmlrpcRed HatRubyGems Escape sequence injection vulnerability in api response handling7.5 Highrubygem-xmlrpcRed HatRubyGems Escape sequence injection vulnerability in gem owner7.5 Highrubygem-xmlrpcRed HatRubyGems Escape sequence injection vulnerability in verbose7.5 Highrubygem-xmlrpcRed HatRubyGems Delete directory using symlink when decompressing tar7.4 Highrubygem-xmlrpcRed HatSinatra Cross-site Scripting vulnerability6.1 Mediumrubygem-xmlrpcRed Hatrails-html-sanitizer Cross-site Scripting vulnerability6.1 Mediumrubygem-xmlrpcRed HatCross-site Scripting in loofah6.1 Mediumrubygem-xmlrpcRed HatNokogiri is vulnerable to XML External Entity (XXE) attack7.5 High