Lucene search
K

14168 matches found

Tenable Nessus
Tenable Nessus
added 2024/10/09 12:0 a.m.18 views

EulerOS 2.0 SP12 : ruby (EulerOS-SA-2024-2542)

According to the versions of the ruby packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Rubygems.org is the Ruby community's gem hosting service. A Gem publisher can cause a Remote DoS when publishing a Gem. This is due to how Ruby read...

4.3CVSS6.5AI score0.00051EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/10/09 12:0 a.m.27 views

EulerOS 2.0 SP11 : ruby (EulerOS-SA-2024-2568)

According to the versions of the ruby packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Rubygems.org is the Ruby community's gem hosting service. A Gem publisher can cause a Remote DoS when publishing a Gem. This is due to how Ruby read...

6.6CVSS7.2AI score0.08428EPSS
Exploits1References4
OpenVAS
OpenVAS
added 2024/10/09 12:0 a.m.15 views

Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2024-2594)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.6CVSS5.1AI score0.08428EPSS
Exploits1References2
OSV
OSV
added 2024/10/08 4:35 p.m.1 views

USN-7057-2 ruby-webrick vulnerability

USN-7057-1 fixed a vulnerability in WEBrick. This update provides the corresponding updates for Ubuntu 22.04 LTS. Original advisory details: It was discovered that WEBrick incorrectly handled having both a Content- Length header and a Transfer-Encoding header. A remote attacker could possibly use...

6.8AI score0.00224EPSS
Exploits0References2
Ubuntu
Ubuntu
added 2024/10/08 4:35 p.m.12 views

USN-7057-2: WEBrick vulnerability

USN-7057-1 fixed a vulnerability in WEBrick. This update provides the corresponding updates for Ubuntu 22.04 LTS. Original advisory details: It was discovered that WEBrick incorrectly handled having both a Content- Length header and a Transfer-Encoding header. A remote attacker could possibly use...

6.9AI score0.00224EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2024/10/08 12:0 a.m.96 views

Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-20230302.102001)

The version of AHV installed on the remote host is prior to 20230302.102005. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-20230302.102001 advisory. - squashfsopendir in unsquash-2.c in Squashfs-Tools 4.5 allows Directory Traversal, a different vulnerability...

9.8CVSS7.1AI score0.91924EPSS
Exploits26References30
OpenVAS
OpenVAS
added 2024/10/08 12:0 a.m.11 views

Ubuntu: Security Advisory (USN-7057-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.7AI score0.00224EPSS
Exploits0References2
OSV
OSV
added 2024/10/07 11:29 a.m.4 views

USN-7057-1 ruby-webrick vulnerability

It was discovered that WEBrick incorrectly handled having both a Content- Length header and a Transfer-Encoding header. A remote attacker could possibly use this issue to perform a HTTP request smuggling attack...

6.8AI score0.00224EPSS
Exploits0References2
Ubuntu
Ubuntu
added 2024/10/07 11:29 a.m.12 views

USN-7057-1: WEBrick vulnerability

It was discovered that WEBrick incorrectly handled having both a Content- Length header and a Transfer-Encoding header. A remote attacker could possibly use this issue to perform a HTTP request smuggling attack...

6.9AI score0.00224EPSS
Exploits0
GithubExploit
GithubExploit
added 2024/10/07 9:24 a.m.941 views

Exploit for Improper Verification of Cryptographic Signature in Onelogin Ruby-Saml

Ruby-SAML / GitLab Authentication Bypass CVE-2024-45409 expl...

10CVSS9.8AI score0.44644EPSS
Exploits2
OSV
OSV
added 2024/10/04 6:58 a.m.18 views

RHSA-2023:7025 Red Hat Security Advisory: ruby:2.5 security update

Bulletin has no description...

8.8CVSS7.5AI score0.011EPSS
Exploits1References24
OSV
OSV
added 2024/10/04 6:58 a.m.15 views

RHSA-2022:6450 Red Hat Security Advisory: ruby:3.0 security, bug fix, and enhancement update

Bulletin has no description...

7.7CVSS7.9AI score0.00765EPSS
Exploits2References24
OSV
OSV
added 2024/10/04 6:58 a.m.20 views

RHSA-2022:6447 Red Hat Security Advisory: ruby:2.7 security, bug fix, and enhancement update

Bulletin has no description...

7.5CVSS7.9AI score0.00765EPSS
Exploits2References18
OSV
OSV
added 2024/10/04 6:58 a.m.34 views

RHSA-2022:5338 Red Hat Security Advisory: ruby:2.6 security, bug fix, and enhancement update

Bulletin has no description...

6.2CVSS7.8AI score0.00332EPSS
Exploits0References9
BDU FSTEC
BDU FSTEC
added 2024/10/04 12:0 a.m.2 views

The vulnerability of HTTP servers for Ruby/Rack applications developed with Puma allows attackers to access confidential information.

The vulnerability of HTTP servers for Ruby/Rack applications developed with Puma involves the proxy server sending a response back to another unknown client. Exploiting this vulnerability allows an attacker operating remotely to gain access to confidential information...

3.7CVSS6.2AI score0.00288EPSS
Exploits0References5Affected Software4
BDU FSTEC
BDU FSTEC
added 2024/10/04 12:0 a.m.2 views

The vulnerability of HTTP servers for Ruby/Rack applications developed with Puma allows attackers to access confidential information.

The vulnerability of HTTP servers for Ruby/Rack applications developed by Puma relates to the exposure of confidential information to unauthorized individuals. Exploiting this vulnerability could allow a malicious actor to gain access to confidential information...

8CVSS6.5AI score0.00479EPSS
Exploits0References7Affected Software5
BDU FSTEC
BDU FSTEC
added 2024/10/04 12:0 a.m.2 views

The vulnerability of HTTP servers for Ruby/Rack applications developed with Puma allows attackers to execute arbitrary code.

The vulnerability of HTTP servers for Ruby/Rack applications developed with Puma is related to improper handling of HTTP requests. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

5.4CVSS6.7AI score0.00803EPSS
Exploits0References9Affected Software5
BDU FSTEC
BDU FSTEC
added 2024/10/04 12:0 a.m.1 views

The vulnerability of HTTP servers for Ruby/Rack applications developed with Puma, which allows attackers to induce a service failure.

The vulnerability of HTTP servers for Ruby/Rack applications related to HTTP request processing flaws. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

9.4CVSS6.5AI score0.00417EPSS
Exploits0References10Affected Software5
OpenVAS
OpenVAS
added 2024/10/02 12:0 a.m.10 views

Ubuntu: Security Advisory (USN-7050-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6CVSS5.3AI score0.00386EPSS
Exploits0References2
OSV
OSV
added 2024/10/01 2:48 p.m.18 views

RHSA-2022:6856 Red Hat Security Advisory: rh-ruby27-ruby security, bug fix, and enhancement update

Bulletin has no description...

7.5CVSS7.9AI score0.00765EPSS
Exploits3References22
Rows per page
Query Builder