jruby vulnerabilities (Ubuntu)
54 vulnerabilities.
-
jrubyUbuntu Mail: Email address spoofing via malformed RFC 2047 encoded-words 5.3 Medium -
jrubyUbuntu Ruby JSON: JSON generator heap buffer overflow when streaming to an IO 3.7 Low -
jrubyUbuntu Net::IMAP: Command Injection via ID command argument 5.8 Medium -
jrubyUbuntu Net::IMAP: Denial of Service via incomplete raw argument validation 2.1 Low -
jrubyUbuntu Net::IMAP: Command Injection via non-synchronizing literal in "raw" argument 5.8 Medium -
jrubyUbuntu An issue was discovered in Ruby 4 before 4.0.5. A race condition leading to a use-after-free in... 8.1 High -
jrubyUbuntu net-imap: Command Injection via "raw" arguments to multiple commands 5.8 Medium -
jrubyUbuntu net-imap: Command Injection via unvalidated Symbol inputs 5.8 Medium -
jrubyUbuntu net-imap: Denial of service via high iteration count for `SCRAM-*` authentication 6.0 Medium -
jrubyUbuntu net-imap: Quadratic complexity when reading response literals 2.3 Low -
jrubyUbuntu ERB has an @_init deserialization guard bypass via def_module / def_method / def_class 8.1 High -
jrubyUbuntu zlib: Buffer Overflow in Zlib::GzipReader ungetc via large input leads to memory corruption 1.7 Low -
jrubyUbuntu resolv vulnerable to DoS via insufficient DNS domain name length validation 7.5 High -
jrubyUbuntu net-imap vulnerable to STARTTLS stripping via invalid response timing 7.6 High -
jrubyUbuntu Ruby WEBrick read_header HTTP Request Smuggling Vulnerability 6.5 Medium -
jrubyUbuntu net-imap rubygem vulnerable to possible DoS by memory exhaustion 6.0 Medium -
jrubyUbuntu URI allows for userinfo Leakage in URI#join, URI#merge, and URI#+ 3.2 Low -
jrubyUbuntu CGI has Regular Expression Denial of Service (ReDoS) potential in Util#escapeElement 4.0 Medium -
jrubyUbuntu CGI has Denial of Service (DoS) potential in Cookie.parse 5.8 Medium -
jrubyUbuntu Rexml: rexml: denial of service via inefficient regex parsing 7.5 High -
jrubyUbuntu REXML DoS vulnerability 5.3 Medium -
jrubyUbuntu REXML DoS vulnerability 5.3 Medium -
jrubyUbuntu Denial of service in REXML 4.3 Medium -
jrubyUbuntu REXML contains a denial of service vulnerability 5.3 Medium -
jrubyUbuntu An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the... 6.6 Medium -
jrubyUbuntu RDoc RCE vulnerability with .rdoc_options 4.5 Medium -
jrubyUbuntu URI gem has ReDoS vulnerability 5.3 Medium -
jrubyUbuntu Ruby Time component ReDoS issue 5.3 Medium -
jrubyUbuntu Ruby URI component ReDoS issue 5.3 Medium -
jrubyUbuntu HTTP response splitting in CGI 8.8 High -
jrubyUbuntu Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows code injection if the... 8.1 High -
jrubyUbuntu Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows HTTP Response Splitting.... 5.3 Medium -
jrubyUbuntu WEBrick::HTTPAuth::DigestAuth in Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4... 7.5 High -
jrubyUbuntu RubyGems Escape sequence injection in errors 7.5 High -
jrubyUbuntu Code injection in RubyGems 8.8 High -
jrubyUbuntu RubyGems Escape sequence injection vulnerability in api response handling 7.5 High -
jrubyUbuntu RubyGems Escape sequence injection vulnerability in gem owner 7.5 High -
jrubyUbuntu RubyGems Escape sequence injection vulnerability in verbose 7.5 High -
jrubyUbuntu RubyGems Delete directory using symlink when decompressing tar 7.4 High -
jrubyUbuntu Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0... 5.3 Medium -
jrubyUbuntu RubyGems Path Traversal vulnerability 5.5 Medium -
jrubyUbuntu RubyGems Cross-site Scripting vulnerability 6.1 Medium -
jrubyUbuntu RubyGems Improper Input Validation vulnerability 5.3 Medium -
jrubyUbuntu RubyGems Improper Verification of Cryptographic Signature vulnerability 9.8 Critical -
jrubyUbuntu RubyGems Infinite Loop vulnerability 7.5 High -
jrubyUbuntu RubyGems Deserialization of Untrusted Data vulnerability 7.8 High -
jrubyUbuntu RubyGems Link Following vulnerability 7.5 High -
jrubyUbuntu RubyGems vulnerable to Deserialization of Untrusted Data 9.8 Critical -
jrubyUbuntu RubyGems has Origin Validation Error vulnerability 8.1 High -
jrubyUbuntu RubyGems may allow a maliciously crafted gem to overwrite files 7.5 High - Show olderLoading…