Lucene search
Redhat.comRH:CVE-2016-7954HistoryOct 05, 2016 - 12:47 p.m.
CVE-2016-7954
2016-10-0512:47:20
redhat.com
access.redhat.com
15
0.009 Low
EPSS
Percentile
82.6%
Bundler 1.x might allow remote attackers to inject arbitrary Ruby code into an application by leveraging a gem name collision on a secondary source. NOTE: this might overlap CVE-2013-0334.
Related
debiancve
debiancve
CVE-2016-7954
2016-12-22 22:59:00
CVE-2013-0334
2014-10-31 14:55:02
cvelist
cvelist
CVE-2016-7954
2016-12-22 22:00:00
CVE-2013-0334
2014-10-31 14:00:00
ubuntucve
ubuntucve
CVE-2016-7954
2016-12-22 00:00:00
CVE-2013-0334
2014-10-31 00:00:00
osv
osv
Bundler allows attacker to inject arbitrary code via secondary Gem source
2022-05-14 00:57:16
Bundler may install gems from a different source than expected
2022-05-05 02:48:48
prion
prion
Design/Logic Flaw
2016-12-22 22:59:00
Code injection
2014-10-31 14:55:00
cve
cve
CVE-2016-7954
2016-12-22 22:59:00
CVE-2013-0334
2014-10-31 14:55:02
github
github
Bundler allows attacker to inject arbitrary code via secondary Gem source
2022-05-14 00:57:16
Bundler may install gems from a different source than expected
2022-05-05 02:48:48
nvd
nvd
CVE-2016-7954
2016-12-22 22:59:00
CVE-2013-0334
2014-10-31 14:55:02
nessus
nessus
RHEL 6 : rubygem-bundler (Unpatched Vulnerability)
2024-05-11 00:00:00
RHEL 6 : rubygem-bundler (Unpatched Vulnerability)
2024-06-03 00:00:00
RHEL 7 : rubygem-bundler (Unpatched Vulnerability)
2024-06-03 00:00:00
oraclelinux
oraclelinux
rubygem-bundler and rubygem-thor security, bug fix, and enhancement update
2015-11-23 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: rubygem-bundler-1.7.3-1.fc21
2014-10-12 05:07:35
[SECURITY] Fedora 19 Update: rubygem-bundler-1.7.3-1.fc19
2014-10-12 05:02:47
[SECURITY] Fedora 20 Update: rubygem-bundler-1.7.3-1.fc20
2014-10-12 05:07:22
redhat
redhat
gentoo
gentoo
Bundler: Insecure installation
2016-09-26 00:00:00
openvas
openvas
RedHat Update for rubygem-bundler and rubygem-thor RHSA-2015:2180-07
2015-11-20 00:00:00
Fedora Update for rubygem-bundler FEDORA-2014-11630
2014-10-13 00:00:00
Fedora Update for rubygem-bundler FEDORA-2014-11649
2014-10-13 00:00:00
centos
centos
rubygem security update
2015-11-30 19:51:23
rubygems
rubygems