rubygems-update vulnerabilities (RubyGems)

25 vulnerabilities.

• rubygems-update RubyGems RubyGems Escape sequence injection in errors CVE-2019-8325 Fix available 7.5 HighMarch 27, 2019
• rubygems-update RubyGems Code injection in RubyGems CVE-2019-8324 Fix available 8.8 HighMarch 27, 2019
• rubygems-update RubyGems RubyGems Escape sequence injection vulnerability in api response handling CVE-2019-8323 Fix available 7.5 HighMarch 27, 2019
• rubygems-update RubyGems RubyGems Escape sequence injection vulnerability in gem owner CVE-2019-8322 Fix available 7.5 HighMarch 27, 2019
• rubygems-update RubyGems RubyGems Escape sequence injection vulnerability in verbose CVE-2019-8321 Fix available 7.5 HighMarch 27, 2019
• rubygems-update RubyGems RubyGems Delete directory using symlink when decompressing tar CVE-2019-8320 Fix available 7.4 HighMarch 27, 2019
• rubygems-update RubyGems RubyGems Path Traversal vulnerability CVE-2018-1000079 Fix available 5.5 MediumMarch 13, 2018
• rubygems-update RubyGems RubyGems Cross-site Scripting vulnerability CVE-2018-1000078 Fix available 6.1 MediumMarch 13, 2018
• rubygems-update RubyGems RubyGems Improper Input Validation vulnerability CVE-2018-1000077 Fix available 5.3 MediumMarch 13, 2018
• rubygems-update RubyGems RubyGems Improper Verification of Cryptographic Signature vulnerability CVE-2018-1000076 Fix available 9.8 CriticalMarch 13, 2018
• rubygems-update RubyGems RubyGems Infinite Loop vulnerability CVE-2018-1000075 Fix available 7.5 HighMarch 13, 2018
• rubygems-update RubyGems RubyGems Deserialization of Untrusted Data vulnerability CVE-2018-1000074 Fix available 7.8 HighMarch 13, 2018
• rubygems-update RubyGems RubyGems Link Following vulnerability CVE-2018-1000073 Fix available 7.5 HighMarch 13, 2018
• rubygems-update RubyGems RubyGems vulnerable to Deserialization of Untrusted Data CVE-2017-0903 Fix available EPSS 15.9% 9.8 CriticalOctober 11, 2017
• rubygems-update RubyGems RubyGems has Origin Validation Error vulnerability CVE-2017-0902 Fix available 8.1 HighAugust 31, 2017
• rubygems-update RubyGems RubyGems may allow a maliciously crafted gem to overwrite files CVE-2017-0901 Public exploitFix available EPSS 29.4% 7.5 HighAugust 31, 2017
• rubygems-update RubyGems RubyGems Improper Input Validation vulnerability CVE-2017-0900 Fix available 7.5 HighAugust 31, 2017
• rubygems-update RubyGems RubyGems Code Injection vulnerability CVE-2017-0899 Fix available EPSS 11.1% 9.8 CriticalAugust 31, 2017
• rubygems-update RubyGems RubyGems Improper Input Validation vulnerability CVE-2015-4020 Fix available 4.3 MediumAugust 25, 2015
• rubygems-update RubyGems RubyGems vulnerable to DNS hijack attack CVE-2015-3900 Fix available 5.0 MediumJune 24, 2015
• rubygems-update RubyGems RubyGems Regular Expression Denial of Service CVE-2013-4363 Fix available 4.3 MediumOctober 9, 2013
• rubygems-update RubyGems RubyGems Regular Expression Denial of Service vulnerability CVE-2013-4287 Fix available 4.3 MediumOctober 9, 2013
• rubygems-update RubyGems RubyGems does not verify SSL certificate CVE-2012-2126 Fix available 4.3 MediumApril 20, 2012
• rubygems-update RubyGems RubyGems HTTPS to HTTP redirect CVE-2012-2125 Fix available 5.8 MediumApril 20, 2012
• rubygems-update RubyGems RubyGems file overwrite vulnerability CVE-2007-0469 Fix available 9.3 HighJanuary 24, 2007