rubygems vulnerabilities (Red Hat)
125 vulnerabilities.
rubygemsRed Hatmcollective has a default password set at install9.8 CriticalrubygemsRed Hatopenshift-origin-node Improper Input Validation vulnerability5.5 MediumrubygemsRed HatRuby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows code injection if the...8.1 HighrubygemsRed HatRuby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows HTTP Response Splitting....5.3 MediumrubygemsRed HatWEBrick::HTTPAuth::DigestAuth in Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4...7.5 HighrubygemsRed HatRuby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 mishandles path checking within...6.5 MediumrubygemsRed HatAn integer overflow in the search_in_range function in regexec.c in Oniguruma 6.x before 6.9...9.8 CriticalrubygemsRed HatRubyzip denial of service5.5 MediumrubygemsRed HatA lack of access control was found in the message queues maintained by Satellite's QPID broker...8.0 HighrubygemsRed HatRubyGems Escape sequence injection in errors7.5 HighrubygemsRed HatCode injection in RubyGems8.8 HighrubygemsRed HatRubyGems Escape sequence injection vulnerability in api response handling7.5 HighrubygemsRed HatRubyGems Escape sequence injection vulnerability in gem owner7.5 HighrubygemsRed HatRubyGems Escape sequence injection vulnerability in verbose7.5 HighrubygemsRed HatRubyGems Delete directory using symlink when decompressing tar7.4 HighrubygemsRed HatAn issue was discovered in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x...8.1 HighrubygemsRed HatRuby Openssl Allows Incorrect Value Comparison9.8 CriticalrubygemsRed HatSinatra Cross-site Scripting vulnerability6.1 MediumrubygemsRed HatIn Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0...9.1 CriticalrubygemsRed HatIn Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0...7.5 HighrubygemsRed HatIn Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0...7.5 HighrubygemsRed HatIn Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0...7.5 HighrubygemsRed HatDirectory traversal vulnerability in the Dir.mktmpdir method in the tmpdir library in Ruby before...7.5 HighrubygemsRed HatRuby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0...5.3 MediumrubygemsRed Hatrails-html-sanitizer Cross-site Scripting vulnerability6.1 MediumrubygemsRed HatCross-site Scripting in loofah6.1 MediumrubygemsRed HatRubyGems Path Traversal vulnerability5.5 MediumrubygemsRed HatRubyGems Cross-site Scripting vulnerability6.1 MediumrubygemsRed HatRubyGems Improper Input Validation vulnerability5.3 MediumrubygemsRed HatRubyGems Improper Verification of Cryptographic Signature vulnerability9.8 CriticalrubygemsRed HatRubyGems Infinite Loop vulnerability7.5 HighrubygemsRed HatRubyGems Deserialization of Untrusted Data vulnerability7.8 HighrubygemsRed HatRubyGems Link Following vulnerability7.5 HighrubygemsRed HatThe lazy_initialize function in lib/resolv.rb in Ruby through 2.4.3 uses Kernel#open, which might...9.8 CriticalrubygemsRed HatRuby before 2.4.3 allows Net::FTP command injection. Net::FTP#get, getbinaryfile, gettextfile,...8.8 HighrubygemsRed HatRubyGems vulnerable to Deserialization of Untrusted Data9.8 CriticalrubygemsRed HatRuby OpenSSL DoS Vulnerability7.5 HighrubygemsRed HatWEBrick RCE Vulnerability8.8 HighrubygemsRed HatRuby before 2.4.2, 2.3.5, and 2.2.8 is vulnerable to a malicious format string which contains a...9.1 CriticalrubygemsRed HatRuby through 2.2.7, 2.3.x through 2.3.4, and 2.4.x through 2.4.1 can expose arbitrary memory...9.8 CriticalrubygemsRed HatRubyGems has Origin Validation Error vulnerability8.1 HighrubygemsRed HatRubyGems may allow a maliciously crafted gem to overwrite files7.5 HighrubygemsRed HatRubyGems Improper Input Validation vulnerability7.5 HighrubygemsRed HatRubyGems Code Injection vulnerability9.8 CriticalrubygemsRed HatNokogiri is vulnerable to XML External Entity (XXE) attack7.5 HighrubygemsRed HatThe REXML parser in Ruby 1.9.x before 1.9.3 patchlevel 551, 2.0.x before 2.0.0 patchlevel 598,...5.0 MediumrubygemsRed HatRed Hat OpenShift Enterprise before 2.2 does not properly restrict access to gears, which allows...7.5 HighrubygemsRed HatRed Hat OpenShift Enterprise before 2.2 allows local users to obtain IP address and port number...2.1 LowrubygemsRed HatThe REXML parser in Ruby 1.9.x before 1.9.3-p550, 2.0.x before 2.0.0-p594, and 2.1.x before 2.1.4...5.0 MediumrubygemsRed HatOff-by-one error in the encodes function in pack.c in Ruby 1.9.3 and earlier, and 2.x through 2.1...5.0 Medium- Show moreLoading…