Lucene search
+L

124 matches found

OpenVAS
OpenVAS
added 2012/07/30 12:0 a.m.35 views

CentOS Update for ruby CESA-2011:0909 centos5 x86_64

Check for the Version of ruby OpenVAS Vulnerability Test CentOS Update for ruby CESA-2011:0909 centos5 x8664 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

6.8CVSS0.15684EPSS
Exploits4References2
OpenVAS
OpenVAS
added 2012/06/06 12:0 a.m.38 views

RedHat Update for ruby RHSA-2011:0910-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

6.8CVSS6.8AI score0.03025EPSS
Exploits2References2
OpenVAS
OpenVAS
added 2012/06/06 12:0 a.m.37 views

RedHat Update for ruby RHSA-2011:0910-01

Check for the Version of ruby OpenVAS Vulnerability Test RedHat Update for ruby RHSA-2011:0910-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

6.8CVSS5.8AI score0.03025EPSS
Exploits2References2
OpenVAS
OpenVAS
added 2012/05/31 12:0 a.m.24 views

FreeBSD Ports: foswiki

The remote host is missing an update to the system as announced in the referenced advisory. VID 495b46fd-a30f-11e1-82c9-d0df9acfd7e5 OpenVAS Vulnerability Test $ Description: Auto generated from VID 495b46fd-a30f-11e1-82c9-d0df9acfd7e5 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

2.1CVSS6.6AI score0.01425EPSS
Exploits1
OpenVAS
OpenVAS
added 2012/05/31 12:0 a.m.21 views

FreeBSD Ports: foswiki

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

2.1CVSS6.6AI score0.01425EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2012/05/18 12:0 a.m.52 views

Mac OS X Multiple Vulnerabilities (2012-002)

This host is missing an important security update according to Mac OS X 10.6.8 Update/Mac OS X Security Update 2012-002. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

10CVSS7.4AI score0.83911EPSS
Exploits42References40
OpenVAS
OpenVAS
added 2012/05/18 12:0 a.m.60 views

Mac OS X Multiple Vulnerabilities (2012-002)

This host is missing an important security update according to Mac OS X 10.6.8 Update/Mac OS X Security Update 2012-002. OpenVAS Vulnerability Test $Id: gbmacosxsu12-002.nasl 6521 2017-07-04 14:51:10Z cfischer $ Mac OS X Multiple Vulnerabilities 2012-002 Authors: Madhuri D Copyright: Copyright c...

10CVSS0.8AI score0.83911EPSS
Exploits42References4
OpenVAS
OpenVAS
added 2012/03/07 12:0 a.m.25 views

Ubuntu: Security Advisory (USN-1377-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.9AI score0.04246EPSS
Exploits5References2
NVD
NVD
added 2012/02/08 4:11 a.m.15 views

CVE-2012-1004

Multiple cross-site scripting XSS vulnerabilities in UI/Register.pm in Foswiki before 1.1.5 allow remote authenticated users with CHANGE privileges to inject arbitrary web script or HTML via the 1 text, 2 FirstName, 3 LastName, 4 OrganisationName, 5 OrganisationUrl, 6 Profession, 7 Country, 8...

2.1CVSS5.4AI score0.01425EPSS
Exploits1References5
Cvelist
Cvelist
added 2012/02/08 2:0 a.m.24 views

CVE-2012-1004

Multiple cross-site scripting XSS vulnerabilities in UI/Register.pm in Foswiki before 1.1.5 allow remote authenticated users with CHANGE privileges to inject arbitrary web script or HTML via the 1 text, 2 FirstName, 3 LastName, 4 OrganisationName, 5 OrganisationUrl, 6 Profession, 7 Country, 8...

5.4AI score0.01425EPSS
Exploits1References5
CVE
CVE
added 2012/02/08 2:0 a.m.54 views

CVE-2012-1004

Foswiki CVE-2012-1004 describes multiple XSS vulnerabilities in UI/Register.pm affecting Foswiki before 1.1.5. The issue allows remote authenticated users with CHANGE privileges to inject arbitrary web script or HTML via parameters such as text, FirstName, LastName, OrganisationName, Organisation...

2.1CVSS5.4AI score0.01425EPSS
Exploits1References5Affected Software1
Cent OS
Cent OS
added 2011/06/30 4:28 p.m.81 views

ruby security update

CentOS Errata and Security Advisory CESA-2011:0909 Updated ruby packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base...

7.5CVSS6.6AI score0.15684EPSS
Exploits4References7
RedHat Linux
RedHat Linux
added 2011/06/28 5:30 p.m.36 views

Moderate: Red Hat Security Advisory: ruby security update

Updated ruby packages that fix three security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

6.8CVSS6.7AI score0.03025EPSS
Exploits2References6
Oracle linux
Oracle linux
added 2011/06/28 12:0 a.m.48 views

ruby security update

1.8.5-19.el56.1 - Address CVE-2011-1004 'Symlink race condition by removing directory trees in fileutils module' ruby-1.8.7-CVE-2011-1004.patch - Address CVE-2011-1005 'Untrusted codes able to modify arbitrary strings' ruby-1.8.7-CVE-2011-1005.patch - Address CVE-2011-0188 'memory corruption in...

6.8CVSS1.8AI score0.15684EPSS
Exploits4
OpenVAS
OpenVAS
added 2011/06/03 12:0 a.m.33 views

Mandriva Update for ruby MDVSA-2011:097 (ruby)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

6.8CVSS6.2AI score0.03025EPSS
Exploits2References3
Tenable Nessus
Tenable Nessus
added 2011/05/24 12:0 a.m.33 views

Mandriva Linux Security Advisory : ruby (MDVSA-2011:097)

Multiple vulnerabilities have been identified and fixed in ruby : Cross-site scripting XSS vulnerability in the WEBrick HTTP server in Ruby allows remote attackers to inject arbitrary web script or HTML via a crafted URI that triggers a UTF-7 error page CVE-2010-0541. The...

6.8CVSS6.8AI score0.03025EPSS
Exploits2References4
OpenVAS
OpenVAS
added 2011/03/07 12:0 a.m.32 views

Fedora Update for ruby FEDORA-2011-1913

Check for the Version of ruby OpenVAS Vulnerability Test Fedora Update for ruby FEDORA-2011-1913 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

6.3CVSS7.1AI score0.02814EPSS
Exploits2References2
CVE
CVE
added 2011/03/02 7:0 p.m.102 views

CVE-2011-1004

CVE-2011-1004 affects Ruby 1.8.6–1.9.3dev; the FileUtils.remove_entry_secure method is vulnerable to a symlink race, allowing local users to delete arbitrary files. Affected versions and impact are documented in trusted advisories. Remediation mentioned in connected docs includes upgrading to Rub...

6.3CVSS7.9AI score0.00385EPSS
Exploits0References16Affected Software1
Tenable Nessus
Tenable Nessus
added 2011/03/02 12:0 a.m.39 views

Fedora 13 : ruby-1.8.6.420-2.fc13 (2011-1913)

Two patches backported from 1.8.7 branch, for - Symlink race condition in FileUtils.removeentrysecure - bypass of $SAFE mechanism in Exceptiontos Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

6.3CVSS8.2AI score0.02772EPSS
Exploits2References5
RubySec
RubySec
added 2011/02/19 12:0 a.m.68 views

CVE-2011-1004 Ruby: Symlink race condition by removing directory trees in fileutils module

The FileUtils.removeentrysecure method in Ruby 1.8.6 through 1.8.6-420, 1.8.7 through 1.8.7-330, 1.8.8dev, 1.9.1 through 1.9.1-430, 1.9.2 through 1.9.2-136, and 1.9.3dev allows local users to delete arbitrary files via a symlink attack...

6.3CVSS6.2AI score0.00385EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder