19349 matches found
USN-8431-1 ruby2.3, ruby2.5 vulnerabilities
It was discovered that Ruby's Net::IMAP library did not properly verify that Transport Layer Security TLS encryption was started after issuing a STARTTLS command. A remote attacker could possibly use this issue to perform a machine-in-the-middle attack and silently bypass TLS encryption...
BGP Health Check Scanner
This Ruby script implements a lightweight network scanner for basic health verification of a BGP service. It connects to a target TCP port default 179 and performs a minimal, non-exploitative handshake using simplified BGP OPEN and KEEPALIVE messages based on the protocol structure used by the BI...
SUSE CVE-2026-42258
Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to versions 0.4.24, 0.5.14, and 0.6.4, symbol arguments to commands are vulnerable to a CRLF Injection / IMAP Command injection via Symbol arguments passed to IMAP commands. This issue has been patched ...
CVE-2026-47167
Vim is an open source, command line text editor. Prior to version 9.2.0496, a code injection vulnerability exists in s:stepmatch in the cucumber filetype plugin runtime/ftplugin/cucumber.vim on Vim builds with +ruby support. Step-definition patterns read from .rb files under the repository's...
AZL-89775 CVE-2026-47167 affecting package vim for versions less than 9.2.0620-1
Vim is an open source, command line text editor. Prior to version 9.2.0496, a code injection vulnerability exists in s:stepmatch in the cucumber filetype plugin runtime/ftplugin/cucumber.vim on Vim builds with +ruby support. Step-definition patterns read from .rb files under the repository's...
CVE-2026-47167
Vim is an open source, command line text editor. Prior to version 9.2.0496, a code injection vulnerability exists in s:stepmatch in the cucumber filetype plugin runtime/ftplugin/cucumber.vim on Vim builds with +ruby support. Step-definition patterns read from .rb files under the repository's...
UBUNTU-CVE-2026-47167
Vim is an open source, command line text editor. Prior to version 9.2.0496, a code injection vulnerability exists in s:stepmatch in the cucumber filetype plugin runtime/ftplugin/cucumber.vim on Vim builds with +ruby support. Step-definition patterns read from .rb files under the repository's...
CVE-2026-47167 Vim: Vimscript Code Injection in cucumber filetype plugin via crafted step-definition regex
Vim is an open source, command line text editor. Prior to version 9.2.0496, a code injection vulnerability exists in s:stepmatch in the cucumber filetype plugin runtime/ftplugin/cucumber.vim on Vim builds with +ruby support. Step-definition patterns read from .rb files under the repository's...
CVE-2026-47167 Vim: Vimscript Code Injection in cucumber filetype plugin via crafted step-definition regex
Vim is an open source, command line text editor. Prior to version 9.2.0496, a code injection vulnerability exists in s:stepmatch in the cucumber filetype plugin runtime/ftplugin/cucumber.vim on Vim builds with +ruby support. Step-definition patterns read from .rb files under the repository's...
CVE-2026-47167
Vim has a code injection vulnerability in the cucumber filetype plugin (runtime/ftplugin/cucumber.vim) affecting builds with +ruby support prior to version 9.2.0496. A crafted step-definition regex pulled from .rb files under features// or stories/ / directories is embedded into a Ruby Kernel.eva...
CVE-2026-47167 Vim: Vimscript Code Injection in cucumber filetype plugin via crafted step-definition regex
Vim is an open source, command line text editor. Prior to version 9.2.0496, a code injection vulnerability exists in s:stepmatch in the cucumber filetype plugin runtime/ftplugin/cucumber.vim on Vim builds with +ruby support. Step-definition patterns read from .rb files under the repository's...
EUVD-2026-36280
Vim is an open source, command line text editor. Prior to version 9.2.0496, a code injection vulnerability exists in s:stepmatch in the cucumber filetype plugin runtime/ftplugin/cucumber.vim on Vim builds with +ruby support. Step-definition patterns read from .rb files under the repository's...
CVE-2026-47167
Vim is an open source, command line text editor. Prior to version 9.2.0496, a code injection vulnerability exists in s:stepmatch in the cucumber filetype plugin runtime/ftplugin/cucumber.vim on Vim builds with +ruby support. Step-definition patterns read from .rb files under the repository's...
CVE-2026-47167
Vim is an open source, command line text editor. Prior to version 9.2.0496, a code injection vulnerability exists in s:stepmatch in the cucumber filetype plugin runtime/ftplugin/cucumber.vim on Vim builds with +ruby support. Step-definition patterns read from .rb files under the repository's...
CVE-2026-47241 vulnerabilities
Vulnerabilities for packages: ruby3.2-rails, ruby3.3-rails, jruby, ruby3.4-rails, kube-logging-operator, logstash, kube-fluentd-operator, ruby4.0-rails...
GHSA-46Q3-7GV7-QMGG vulnerabilities
Vulnerabilities for packages: ruby3.2-rails, ruby3.3-rails, jruby, ruby3.4-rails, kube-logging-operator, logstash, kube-fluentd-operator, ruby4.0-rails...
GHSA-8P34-64R3-MWG8 vulnerabilities
Vulnerabilities for packages: ruby3.2-rails, ruby3.3-rails, jruby, ruby3.4-rails, kube-logging-operator, logstash, kube-fluentd-operator, ruby4.0-rails...
CVE-2026-47242 vulnerabilities
Vulnerabilities for packages: ruby3.2-rails, ruby3.3-rails, jruby, ruby3.4-rails, kube-logging-operator, logstash, kube-fluentd-operator, ruby4.0-rails...
GHSA-C4FP-CXRR-MJ66 vulnerabilities
Vulnerabilities for packages: ruby3.2-rails, ruby3.3-rails, jruby, ruby3.4-rails, kube-logging-operator, logstash, kube-fluentd-operator, ruby4.0-rails...
CVE-2026-47241 vulnerabilities
Vulnerabilities for packages: logstash-fips, ruby3.2-rails, ruby4.0-rails, kube-fluentd-operator, jruby, truffleruby, gitlab-rails-ce, ruby3.4-rails, gitlab-rails-ce-fips, logstash, ruby3.3-rails, kube-logging-operator...