17029 matches found
Linux Distros Unpatched Vulnerability : CVE-2024-32978
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Kaminari is a paginator for web app frameworks and object relational mappings. A security vulnerability involving insecure file permissions has been identified ...
Linux Distros Unpatched Vulnerability : CVE-2022-31072
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Octokit is a Ruby toolkit for the GitHub API. Versions 4.23.0 and 4.24.0 of the octokit gem were published containing world-writeable files. Specifically, the g...
Linux Distros Unpatched Vulnerability : CVE-2017-0903
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RubyGems versions between 2.0.0 and 2.6.13 are vulnerable to a possible remote code execution vulnerability. YAML deserialization of gem specifications can bypa...
Linux Distros Unpatched Vulnerability : CVE-2025-6442
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ruby WEBrick readheader HTTP Request Smuggling Vulnerability. This vulnerability allows remote attackers to smuggle arbitrary HTTP requests on affected...
Linux Distros Unpatched Vulnerability : CVE-2024-26142
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Rails is a web-application framework. Starting in version 7.1.0, there is a possible ReDoS vulnerability in the Accept header parsing routines of Action Dispatc...
Linux Distros Unpatched Vulnerability : CVE-2014-0083
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Ruby net-ldap gem before 0.11 uses a weak salt when generating SSHA passwords. CVE-2014-0083 Note that Nessus relies on the presence of the package as...
SUSE SLED15: libruby2_5-2_5 / ruby2.5 / ruby2.5-devel / ruby2.5-devel-extra / etc (SUSE-SU-2025:02814-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:02814-1 advisory. - CVE-2024-35221: Fixed remote denial of service via YAML manifest bsc1225905 Tenable has extracted the...
CVE-2011-10019
Spreecommerce versions prior to 0.60.2 contains a remote command execution vulnerability in its search functionality. The application fails to properly sanitize input passed via the searchsend parameter, which is dynamically invoked using Ruby’s send method. This allows attackers to execute...
Security update for ruby2.5
This update for ruby2.5 fixes the following issues: CVE-2024-35221: Fixed remote denial of service via YAML manifest bsc1225905 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the...
SUSE-SU-2025:02814-1 Security update for ruby2.5
This update for ruby2.5 fixes the following issues: - CVE-2024-35221: Fixed remote denial of service via YAML manifest bsc1225905...
GHSA-76R7-HHXJ-R776 vulnerabilities
Vulnerabilities for packages: ruby3.2-activerecord, ruby3.4-activerecord, ruby3.3-activerecord...
CVE-2025-55193 vulnerabilities
Vulnerabilities for packages: ruby3.2-activerecord, ruby3.4-activerecord, ruby3.3-activerecord...
GHSA-76R7-HHXJ-R776 vulnerabilities
Vulnerabilities for packages: ruby3.4-activerecord, ruby3.2-activerecord, ruby3.3-activerecord...
CVE-2025-55193 vulnerabilities
Vulnerabilities for packages: ruby3.4-activerecord, ruby3.2-activerecord, ruby3.3-activerecord...
Linux Distros Unpatched Vulnerability : CVE-2022-24790
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Puma is a simple, fast, multi-threaded, parallel HTTP 1.1 server for Ruby/Rack applications. When using Puma behind a proxy that does not properly validate that...
MAL-2025-34365 Malicious code in tableau_ruby (npm)
The package tableauruby was found to contain malicious code...
Malicious code in ruby-limiter (npm)
The package ruby-limiter was found to contain malicious code...
MAL-2025-32532 Malicious code in ruby-limiter (npm)
The package ruby-limiter was found to contain malicious code...