Vulners
Lucene search
An issue was discovered in the OpenSSL library in Ruby before 2.3.8 2.4.x before 2.4.5 2.5.x before 2.5.2 and 2.6.x before 2.6.0-preview3. When two OpenSSL::X509::Name objects are compared using == depending on the ordering non-equal objects may return true. When the first argument is one character longer than the second or the second argument contains a character that is one less than a character in the same position of the first argument the result of == will be true. This could be leveraged to create an illegitimate certificate that may be accepted as legitimate and then used in signing or encryption operations.
| Reporter | Title | Published | Views | Family All 142 |
|---|---|---|---|---|
 | Security Bulletin: Multiple Security Vulnerabilities affect IBM® Cloud Private - fluentd | 12 Feb 201918:05 | – | ibm |
| Security Bulletin: Vyatta 5600 vRouter Software Patches - Release 1801-s, 1801-t and 1801-u | 5 Dec 201822:20 | – | ibm |
| Security Bulletin: A vulnerability in Ruby affects PowerKVM | 4 Mar 201905:55 | – | ibm |
 | ruby -- multiple vulnerabilities | 17 Oct 201800:00 | – | freebsd |
 | Amazon Linux 2 : ruby (ALAS-2019-1143) | 10 Jan 201900:00 | – | nessus |
| Amazon Linux AMI : ruby23 / ruby24 (ALAS-2018-1113) | 7 Dec 201800:00 | – | nessus |
| CentOS 7 : ruby (CESA-2018:3738) | 14 Dec 201800:00 | – | nessus |
| Debian DLA-1558-1 : ruby2.1 security update | 29 Oct 201800:00 | – | nessus |
| Debian DSA-4332-1 : ruby2.3 - security update | 5 Nov 201800:00 | – | nessus |
| EulerOS 2.0 SP3 : ruby (EulerOS-SA-2019-1340) | 6 May 201900:00 | – | nessus |
10
Node
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
25 Sep 2020 07:00Current
9.6High risk
Vulners AI Score9.6
CVSS 27.5
CVSS 39.8
CVSS 3.19.8
EPSS0.0421