Lucene search
ZnzH1:331984HistoryApr 02, 2018 - 2:50 p.m.
Ruby: HTTP header can split /[\r\n]/ instead of /\r\n/
2018-04-0214:50:38
znz
hackerone.com
36
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.009 Low
EPSS
Percentile
80.6%
Related
redhatcve
redhatcve
CVE-2019-16254
2020-01-09 19:38:59
CVE-2017-17742
2018-03-29 09:19:31
alpinelinux
alpinelinux
CVE-2019-16254
2019-11-26 18:15:00
CVE-2017-17742
2018-04-03 22:29:00
prion
prion
Input validation
2019-11-26 18:15:00
Design/Logic Flaw
2018-04-03 22:29:00
Cross site scripting
2020-02-28 17:15:00
cve
cve
debiancve
debiancve
openvas
openvas
Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2020-1130)
2020-02-24 00:00:00
Debian: Security Advisory (DLA-2027-1)
2019-12-11 00:00:00
Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2020-1031)
2020-01-23 00:00:00
osv
osv
CVE-2019-16254
2019-11-26 18:15:15
jruby - security update
2019-12-10 00:00:00
CVE-2017-17742
2018-04-03 22:29:00
nessus
nessus
EulerOS 2.0 SP5 : ruby (EulerOS-SA-2020-1130)
2020-02-24 00:00:00
Debian DLA-2027-1 : jruby security update
2019-12-12 00:00:00
EulerOS Virtualization for ARM 64 3.0.5.0 : ruby (EulerOS-SA-2020-1051)
2020-01-13 00:00:00
ubuntucve
ubuntucve
debian
debian
[SECURITY] [DLA 2027-1] jruby security update
2019-12-10 12:43:11
[SECURITY] [DLA 2007-1] ruby2.1 security update
2019-11-25 21:24:29
[SECURITY] [DLA 3408-1] jruby security update
2023-04-30 20:58:08
archlinux
archlinux
[ASA-201910-2] ruby: multiple issues
2019-10-02 00:00:00
[ASA-201910-5] ruby2.5: multiple issues
2019-10-02 00:00:00
veracode
veracode
HTTP Response Splitting
2019-01-15 09:27:07
HTTP Response Splitting
2019-10-02 06:21:10
CRLF Injection
2020-03-02 01:51:14
cbl_mariner
cbl_mariner
CVE-2019-16254 affecting package ruby 2.6.3-3
2021-06-09 03:50:37
hackerone
hackerone
Ruby: Response splitting vulnerability in WEBrick
2016-07-25 20:33:08
Ruby: RubyのCGIライブラリにHTTPレスポンス分割（HTTPヘッダインジェクション）があり、秘密情報が漏洩する
2021-05-21 01:10:02
amazon
amazon
Important: ruby
2024-02-29 10:03:00
Important: ruby24
2020-08-26 23:09:00
Medium: ruby
2019-08-23 03:41:00
rubygems
rubygems
HTTP response splitting in WEBrick (Additional fix)
2019-09-30 21:00:00
github
github
HTTP Response Splitting in Puma
2020-02-28 16:53:55
redhat
redhat
(RHSA-2020:1963) Moderate: ruby security update
2020-04-29 09:03:52
(RHSA-2020:2212) Moderate: ruby security update
2020-05-19 13:16:01
(RHSA-2020:2288) Moderate: ruby security update
2020-05-26 08:52:58
freebsd
freebsd
ruby -- multiple vulnerabilities
2019-10-01 00:00:00
ruby -- multiple vulnerabilities
2018-03-28 00:00:00
cloudfoundry
cloudfoundry
USN-4201-1: Ruby vulnerabilities | Cloud Foundry
2019-12-05 00:00:00
mageia
mageia
Updated jruby packages fix security vulnerabilities
2020-11-27 23:14:57
Updated ruby packages fix security vulnerabilities
2019-12-25 22:08:41
Updated ruby packages fix security vulnerability
2018-10-26 21:47:14
symantec
symantec
Ruby Multiple Security Vulnerabilities
2019-10-01 00:00:00
ubuntu
ubuntu
Ruby vulnerabilities
2019-11-26 00:00:00
Ruby regression
2021-03-25 00:00:00
Ruby vulnerabilities
2018-06-13 00:00:00
gentoo
gentoo
Ruby: Multiple vulnerabilities
2020-03-13 00:00:00
fedora
fedora
[SECURITY] Fedora 28 Update: ruby-2.5.1-92.fc28
2018-04-15 02:45:12
[SECURITY] Fedora 26 Update: ruby-2.4.4-88.fc26
2018-05-29 11:09:55
[SECURITY] Fedora 27 Update: ruby-2.4.4-89.fc27
2018-06-06 12:59:35
f5
f5
K80173446 : Multiple Ruby vulnerabilities
2018-05-08 00:00:00
slackware
slackware
[slackware-security] ruby
2018-03-29 22:43:54
suse
suse
Recommended update for ruby2.5 (important)
2020-03-28 00:00:00
Security update for ruby-bundled-gems-rpmhelper, ruby2.5 (important)
2019-07-21 00:00:00
rocky
rocky
ruby:2.5 security, bug fix, and enhancement update
2021-06-29 13:58:20
ruby:2.6 security, bug fix, and enhancement update
2021-06-29 13:58:40
almalinux
almalinux
Moderate: ruby:2.5 security, bug fix, and enhancement update
2021-06-29 13:58:20
Moderate: ruby:2.6 security, bug fix, and enhancement update
2021-06-29 13:58:40
oraclelinux
oraclelinux
ruby:2.5 security, bug fix, and enhancement update
2021-07-02 00:00:00
ruby:2.6 security, bug fix, and enhancement update
2021-07-07 00:00:00
ruby security update
2019-08-13 00:00:00
ibm
ibm
centos
centos
ruby, rubygem, rubygems security update
2019-08-30 04:17:17
rosalinux
rosalinux
Advisory ROSA-SA-2021-1966
2021-07-02 18:06:34
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.009 Low
EPSS
Percentile
80.6%
Related for H1:331984