ruby2.1 vulnerabilities (SUSE)
51 vulnerabilities.
-
ruby2.1SUSE HTTP Request Smuggling in ruby webrick 7.5 High -
ruby2.1SUSE An issue was discovered in Ruby through 2.6.7, 2.7.x through 2.7.3, and 3.x through 3.0.1. Net:... 7.4 High -
ruby2.1SUSE Arbitrary Code Execution in Rdoc 7.0 High -
ruby2.1SUSE An issue was discovered in Ruby through 2.6.7, 2.7.x through 2.7.3, and 3.x through 3.0.1. A... 5.8 Medium -
ruby2.1SUSE WEBRick vulnerable to HTTP Request/Response Smuggling 7.5 High -
ruby2.1SUSE Unsafe object creation in json RubyGem 7.5 High -
ruby2.1SUSE Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows code injection if the... 8.1 High -
ruby2.1SUSE Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows HTTP Response Splitting.... 5.3 Medium -
ruby2.1SUSE WEBrick::HTTPAuth::DigestAuth in Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4... 7.5 High -
ruby2.1SUSE Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 mishandles path checking within... 6.5 Medium -
ruby2.1SUSE RubyGems Escape sequence injection in errors 7.5 High -
ruby2.1SUSE Code injection in RubyGems 8.8 High -
ruby2.1SUSE RubyGems Escape sequence injection vulnerability in api response handling 7.5 High -
ruby2.1SUSE RubyGems Escape sequence injection vulnerability in gem owner 7.5 High -
ruby2.1SUSE RubyGems Escape sequence injection vulnerability in verbose 7.5 High -
ruby2.1SUSE RubyGems Delete directory using symlink when decompressing tar 7.4 High -
ruby2.1SUSE An issue was discovered in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x... 8.1 High -
ruby2.1SUSE Ruby Openssl Allows Incorrect Value Comparison 9.8 Critical -
ruby2.1SUSE In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0... 9.1 Critical -
ruby2.1SUSE In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0... 7.5 High -
ruby2.1SUSE In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0... 7.5 High -
ruby2.1SUSE In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0... 7.5 High -
ruby2.1SUSE Directory traversal vulnerability in the Dir.mktmpdir method in the tmpdir library in Ruby before... 7.5 High -
ruby2.1SUSE Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0... 5.3 Medium -
ruby2.1SUSE RubyGems Path Traversal vulnerability 5.5 Medium -
ruby2.1SUSE RubyGems Cross-site Scripting vulnerability 6.1 Medium -
ruby2.1SUSE RubyGems Improper Input Validation vulnerability 5.3 Medium -
ruby2.1SUSE RubyGems Improper Verification of Cryptographic Signature vulnerability 9.8 Critical -
ruby2.1SUSE RubyGems Infinite Loop vulnerability 7.5 High -
ruby2.1SUSE RubyGems Deserialization of Untrusted Data vulnerability 7.8 High -
ruby2.1SUSE RubyGems Link Following vulnerability 7.5 High -
ruby2.1SUSE The lazy_initialize function in lib/resolv.rb in Ruby through 2.4.3 uses Kernel#open, which might... 9.8 Critical -
ruby2.1SUSE Ruby before 2.4.3 allows Net::FTP command injection. Net::FTP#get, getbinaryfile, gettextfile,... 8.8 High -
ruby2.1SUSE RubyGems vulnerable to Deserialization of Untrusted Data 9.8 Critical -
ruby2.1SUSE Ruby OpenSSL DoS Vulnerability 7.5 High -
ruby2.1SUSE WEBrick RCE Vulnerability 8.8 High -
ruby2.1SUSE Ruby before 2.4.2, 2.3.5, and 2.2.8 is vulnerable to a malicious format string which contains a... 9.1 Critical -
ruby2.1SUSE Ruby through 2.2.7, 2.3.x through 2.3.4, and 2.4.x through 2.4.1 can expose arbitrary memory... 9.8 Critical -
ruby2.1SUSE RubyGems has Origin Validation Error vulnerability 8.1 High -
ruby2.1SUSE RubyGems may allow a maliciously crafted gem to overwrite files 7.5 High -
ruby2.1SUSE RubyGems Improper Input Validation vulnerability 7.5 High -
ruby2.1SUSE RubyGems Code Injection vulnerability 9.8 Critical -
ruby2.1SUSE Net::SMTP in Ruby before 2.4.0 is vulnerable to SMTP command injection via CRLF sequences in a... 6.1 Medium -
ruby2.1SUSE An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and... 7.5 High -
ruby2.1SUSE An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and... 9.8 Critical -
ruby2.1SUSE An exploitable heap overflow vulnerability exists in the Fiddle::Function.new "initialize"... 9.8 Critical -
ruby2.1SUSE OpenSSL gem for Ruby using inadequate encryption strength 7.5 High -
ruby2.1SUSE The Fiddle::Handle implementation in ext/fiddle/handle.c in Ruby before 2.0.0-p648, 2.1 before 2... 8.4 High -
ruby2.1SUSE RubyGems vulnerable to DNS hijack attack 5.0 Medium -
ruby2.1SUSE verify_certificate_identity in the OpenSSL extension in Ruby before 2.0.0 patchlevel 645, 2.1.x... 5.9 Medium - Show olderLoading…