ruby2.5 vulnerabilities (openSUSE)
49 vulnerabilities.
-
ruby2.5openSUSE resolv vulnerable to DoS via insufficient DNS domain name length validation 7.5 High -
ruby2.5openSUSE Ruby WEBrick read_header HTTP Request Smuggling Vulnerability 6.5 Medium -
ruby2.5openSUSE URI allows for userinfo Leakage in URI#join, URI#merge, and URI#+ 3.2 Low -
ruby2.5openSUSE CGI has Regular Expression Denial of Service (ReDoS) potential in Util#escapeElement 4.0 Medium -
ruby2.5openSUSE CGI has Denial of Service (DoS) potential in Cookie.parse 5.8 Medium -
ruby2.5openSUSE REXML ReDoS vulnerability 6.6 Medium -
ruby2.5openSUSE HTTP Request Smuggling in ruby webrick 7.5 High -
ruby2.5openSUSE Denial of service when publishing a package on rubygems.org 4.3 Medium -
ruby2.5openSUSE Ruby Time component ReDoS issue 5.3 Medium -
ruby2.5openSUSE Ruby URI component ReDoS issue 5.3 Medium -
ruby2.5openSUSE HTTP response splitting in CGI 8.8 High -
ruby2.5openSUSE There is a buffer over-read in Ruby before 2.6.10, 2.7.x before 2.7.6, 3.x before 3.0.4, and 3.1... 7.5 High -
ruby2.5openSUSE Cookie Prefix Spoofing in CGI::Cookie.parse 7.5 High -
ruby2.5openSUSE Regular expression denial of service vulnerability (ReDoS) in date 7.5 High -
ruby2.5openSUSE An issue was discovered in Ruby through 2.6.7, 2.7.x through 2.7.3, and 3.x through 3.0.1. Net:... 7.4 High -
ruby2.5openSUSE Arbitrary Code Execution in Rdoc 7.0 High -
ruby2.5openSUSE An issue was discovered in Ruby through 2.6.7, 2.7.x through 2.7.3, and 3.x through 3.0.1. A... 5.8 Medium -
ruby2.5openSUSE REXML round-trip instability 7.5 High -
ruby2.5openSUSE WEBRick vulnerable to HTTP Request/Response Smuggling 7.5 High -
ruby2.5openSUSE An issue was discovered in Ruby 2.5.x through 2.5.7, 2.6.x through 2.6.5, and 2.7.0. If a victim... 5.3 Medium -
ruby2.5openSUSE Unsafe object creation in json RubyGem 7.5 High -
ruby2.5openSUSE OS Command Injection in Rake 6.4 Medium -
ruby2.5openSUSE Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows code injection if the... 8.1 High -
ruby2.5openSUSE Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows HTTP Response Splitting.... 5.3 Medium -
ruby2.5openSUSE WEBrick::HTTPAuth::DigestAuth in Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4... 7.5 High -
ruby2.5openSUSE Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 mishandles path checking within... 6.5 Medium -
ruby2.5openSUSE RubyGems Escape sequence injection in errors 7.5 High -
ruby2.5openSUSE Code injection in RubyGems 8.8 High -
ruby2.5openSUSE RubyGems Escape sequence injection vulnerability in api response handling 7.5 High -
ruby2.5openSUSE RubyGems Escape sequence injection vulnerability in gem owner 7.5 High -
ruby2.5openSUSE RubyGems Escape sequence injection vulnerability in verbose 7.5 High -
ruby2.5openSUSE RubyGems Delete directory using symlink when decompressing tar 7.4 High -
ruby2.5openSUSE An issue was discovered in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x... 8.1 High -
ruby2.5openSUSE Ruby Openssl Allows Incorrect Value Comparison 9.8 Critical -
ruby2.5openSUSE In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0... 9.1 Critical -
ruby2.5openSUSE In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0... 7.5 High -
ruby2.5openSUSE In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0... 7.5 High -
ruby2.5openSUSE In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0... 7.5 High -
ruby2.5openSUSE Directory traversal vulnerability in the Dir.mktmpdir method in the tmpdir library in Ruby before... 7.5 High -
ruby2.5openSUSE Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0... 5.3 Medium -
ruby2.5openSUSE RubyGems Path Traversal vulnerability 5.5 Medium -
ruby2.5openSUSE RubyGems Cross-site Scripting vulnerability 6.1 Medium -
ruby2.5openSUSE RubyGems Improper Input Validation vulnerability 5.3 Medium -
ruby2.5openSUSE RubyGems Improper Verification of Cryptographic Signature vulnerability 9.8 Critical -
ruby2.5openSUSE RubyGems Infinite Loop vulnerability 7.5 High -
ruby2.5openSUSE RubyGems Deserialization of Untrusted Data vulnerability 7.8 High -
ruby2.5openSUSE RubyGems Link Following vulnerability 7.5 High -
ruby2.5openSUSE Cross-Site Scripting (XSS) in jquery 6.1 Medium -
ruby2.5openSUSE Cross-Site Scripting in jquery 6.1 Medium