Skip to contentRuby-lang vulnerabilities
Newest
- ruby-lang rubyThe VpMemAlloc function in bigdecimal.c in the BigDecimal class in Ruby 1.9.2-p136 and earlier,...CVE-2011-01886.8 Medium
- ruby-lang rubyThe safe-level feature in Ruby 1.8.6 through 1.8.6-420, 1.8.7 through 1.8.7-330, and 1.8.8dev...CVE-2011-10055.0 Medium
- ruby-lang rubyThe FileUtils.remove_entry_secure method in Ruby 1.8.6 through 1.8.6-420, 1.8.7 through 1.8.7-330...CVE-2011-10046.3 Medium
- ruby-lang rubyBuffer overflow in Ruby 1.9.x before 1.9.1-p429 on Windows might allow local users to gain...CVE-2010-24897.2 High
- ruby-lang webrickWEBrick Improper Input Validation vulnerabilityCVE-2009-4492Public exploitFix availableEPSS 16.2%7.5 High
- ruby-lang rubyHeap-based buffer overflow in the rb_str_justify function in string.c in Ruby 1.9.1 before 1.9.1...CVE-2009-412410.0 High
- ruby-lang rubyThe BigDecimal library in Ruby 1.8.6 before p369 and 1.8.7 before p173 allows context-dependent...CVE-2009-1904Public exploitEPSS 12.8%5.0 Medium
- ruby-lang rubyext/openssl/ossl_ocsp.c in Ruby 1.8 and 1.9 does not properly check the return value from the...CVE-2009-06426.8 Medium
- ruby-lang rubyWEBrick Denial of Service VulnerabilityCVE-2008-4310Public exploitFix availableEPSS 13.6%7.8 High
- ruby-lang rubyresolv.rb in Ruby 1.8.5 and earlier, 1.8.6 before 1.8.6-p287, 1.8.7 before 1.8.7-p72, and 1.9...CVE-2008-39055.8 Medium
- ruby-lang rubyThe REXML module in Ruby 1.8.6 through 1.8.6-p287, 1.8.7 through 1.8.7-p72, and 1.9 allows...CVE-2008-3790Public exploitEPSS 15.2%5.0 Medium
- ruby-lang rubyThe regular expression engine (regex.c) in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8...CVE-2008-3443Public exploitFix availableEPSS 15.7%5.0 Medium
- ruby-lang rubyThe dl module in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1...CVE-2008-3657Public exploitEPSS 13.7%7.5 High
- ruby-lang rubyAlgorithmic complexity vulnerability in the WEBrick::HTTPUtils.split_header_value function in...CVE-2008-3656Public exploitEPSS 70.2%7.8 High
- ruby-lang rubyRuby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423...CVE-2008-3655Public exploitEPSS 14.1%7.5 High
- ruby-lang rubyInteger overflow in the rb_ary_fill function in array.c in Ruby before revision 17756 allows...CVE-2008-23767.5 High
- ruby-lang ruby, canonical ubuntu linux, debian linux +2 moreInteger overflow in the (1) rb_ary_splice function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5...CVE-2008-27267.8 High
- ruby-lang ruby, canonical ubuntu linux, debian linux +2 moreInteger overflow in the (1) rb_ary_splice function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5...CVE-2008-27257.8 High
- ruby-lang ruby, canonical ubuntu linux, debian linux +2 moreThe rb_str_format function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6...CVE-2008-26647.8 High
- ruby-lang ruby, canonical ubuntu linux, debian linux +2 moreMultiple integer overflows in the rb_ary_store function in Ruby 1.8.4 and earlier, 1.8.5 before 1...CVE-2008-266310.0 High
- ruby-lang ruby, canonical ubuntu linux, debian linux +2 moreMultiple integer overflows in the rb_str_buf_append function in Ruby 1.8.4 and earlier, 1.8.5...CVE-2008-266210.0 High
- ruby-lang rubyDirectory traversal vulnerability in WEBrick in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231,...CVE-2008-18915.0 Medium
- ruby-lang webrick, fedoraproject fedora +1 moreDirectory traversal vulnerability in WEBrick in Ruby 1.8 before 1.8.5-p115 and 1.8.6-p114, and 1...CVE-2008-1145Public exploitEPSS 27.1%5.0 Medium
- ruby-lang rubyThe (1) Net::ftptls, (2) Net::telnets, (3) Net::imap, (4) Net::pop, and (5) Net::smtp libraries...CVE-2007-57705.0 Medium
- ruby-lang rubyThe connect method in lib/net/http.rb in the (1) Net::HTTP and (2) Net::HTTPS libraries in Ruby 1...CVE-2007-51624.3 Medium