rubygem-puma vulnerabilities (SUSE)
77 vulnerabilities.
-
rubygem-pumaSUSE Header normalization allows for client to clobber proxy set headers in Puma 5.4 Medium -
rubygem-pumaSUSE HTTP Request/Response Smuggling in puma 5.9 Medium -
rubygem-pumaSUSE Inconsistent Interpretation of HTTP Requests in puma 7.3 High -
rubygem-pumaSUSE Django `Trunc()` and `Extract()` database functions vulnerable to SQL Injection 9.8 Critical -
rubygem-pumaSUSE SQL Injection in Django 9.8 Critical -
rubygem-pumaSUSE HTTP Request Smuggling in puma 9.1 Critical -
rubygem-pumaSUSE Information Exposure when using Puma with Rails 8.0 High -
rubygem-pumaSUSE golang.org/x/net/http2 allows uncontrolled memory consumption 7.5 High -
rubygem-pumaSUSE An open redirect flaw was found in Kibana versions before 7.13.0 and 6.8.16. If a logged in user... 6.1 Medium -
rubygem-pumaSUSE Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in puma 3.7 Low -
rubygem-pumaSUSE Snapshot authentication bypass in grafana 9.8 Critical -
rubygem-pumaSUSE Keepalive Connections Causing Denial Of Service in puma 7.5 High -
rubygem-pumaSUSE Improper Handling of Highly Compressed Data (Data Amplification) and Memory Allocation with Excessive Size Value in eventlet 5.3 Medium -
rubygem-pumaSUSE Injection in Redcarpet 6.8 Medium -
rubygem-pumaSUSE It was discovered that OpenShift Container Platform's (OCP) distribution of Kibana could open in... 4.3 Medium -
rubygem-pumaSUSE Out-of-bounds reads in Pillow 5.5 Medium -
rubygem-pumaSUSE Out-of-bounds read in Pillow 8.1 High -
rubygem-pumaSUSE Out-of-bounds reads in Pillow 5.5 Medium -
rubygem-pumaSUSE Out-of-bounds read in Pillow 5.5 Medium -
rubygem-pumaSUSE Rack allows Percent-encoded cookies to overwrite existing prefixed cookie names 7.5 High -
rubygem-pumaSUSE Openstack cinder Improper handling of ScaleIO backend credentials 6.5 Medium -
rubygem-pumaSUSE Server Side Request Forgery in Grafana 8.2 High -
rubygem-pumaSUSE XSS in Django 6.1 Medium -
rubygem-pumaSUSE Data leakage via cache key collision in Django 5.9 Medium -
rubygem-pumaSUSE HTTP Smuggling via Transfer-Encoding Header in Puma 6.8 Medium -
rubygem-pumaSUSE HTTP Smuggling via Transfer-Encoding Header in Puma 7.5 High -
rubygem-pumaSUSE Information disclosure issue in Active Resource 7.5 High -
rubygem-pumaSUSE Grafana version < 6.7.3 is vulnerable for annotation popup XSS. 6.1 Medium -
rubygem-pumaSUSE Unsafe object creation in json RubyGem 7.5 High -
rubygem-pumaSUSE OpenStack Manila Unprivileged users can retrieve, use and manipulate share networks 8.3 High -
rubygem-pumaSUSE SQL injection in Django 8.8 High -
rubygem-pumaSUSE OS Command Injection in ansible 7.4 High -
rubygem-pumaSUSE HTTP Response Splitting in Puma 6.5 Medium -
rubygem-pumaSUSE mysql-systemd-helper allows setting 640 permissions of arbitrary files 5.1 Medium -
rubygem-pumaSUSE crowbar provision leaks admin password to all nodes in cleartext 9.3 Critical -
rubygem-pumaSUSE SQL injection in Django 9.8 Critical -
rubygem-pumaSUSE libxml as used in Nokogiri has an infinite loop in a certain end-of-file situation 7.5 High -
rubygem-pumaSUSE Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions... 5.9 Medium -
rubygem-pumaSUSE Improper Verification of Cryptographic Signature in PySAML2 7.5 High -
rubygem-pumaSUSE Uncontrolled Resource Consumption in Pillow 7.5 High -
rubygem-pumaSUSE Buffer Copy without Checking Size of Input in Pillow 9.8 Critical -
rubygem-pumaSUSE PCX P mode buffer overflow in Pillow 9.8 Critical -
rubygem-pumaSUSE Out-of-bounds Read in Pillow 7.1 High -
rubygem-pumaSUSE HTTP Request Smuggling in Waitress: Invalid whitespace characters in headers 7.1 High -
rubygem-pumaSUSE HTTP Request Smuggling: Content-Length Sent Twice in Waitress 7.1 High -
rubygem-pumaSUSE HTTP Request Smuggling: LF vs CRLF handling in Waitress 7.1 High -
rubygem-pumaSUSE HTTP Request Smuggling: Invalid Transfer-Encoding in Waitress 7.1 High -
rubygem-pumaSUSE Django Potential account hijack via password reset form 9.8 Critical -
rubygem-pumaSUSE Potential DOS attack in Puma 5.3 Medium -
rubygem-pumaSUSE RabbitMQ Web Management Plugin DoS via heap overflow 4.5 Medium - Show olderLoading…