Lucene search
+L

90 matches found

Positive Technologies
Positive Technologies
added 2026/04/07 12:0 a.m.7 views

PT-2026-30910

Name of the Vulnerable Software and Affected Versions Addressable versions 2.3.0 through 2.8.9 Description Addressable, an alternative URI implementation for Ruby, contains a flaw in its URI template implementation. Templates utilizing the '' explode modifier with any expansion operator e.g., foo...

7.5CVSS5.9AI score0.0036EPSS
SaveExploits0References19
CNNVD
CNNVD
added 2026/04/07 12:0 a.m.25 views

Addressable 安全漏洞

Addressable is a Ruby library developed by Bob Aman. Versions of Addressable from 2.3.0 to 2.9.0 contained a security vulnerability. This vulnerability stemmed from the URI template implementation; two types of regular expressions generated by the URI templates had catastrophic backtracking, whic...

7.5CVSS5.8AI score0.0036EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/11/05 12:0 a.m.8 views

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990323)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990323 advisory. In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumaclerp: Fix object nesting warning ACLs in Spectrum-2 and newer ASICs can reside i...

7.8CVSS6AI score0.00218EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2021-1480

Malware in sbrugna...

7.5CVSS7.5AI score0.02199EPSS
SaveExploits0References18
Tenable Nessus
Tenable Nessus
added 2025/08/30 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2021-32740

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. An uncontrolled resource consumption vulnerabili...

7.5CVSS7.3AI score0.02199EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/15 12:0 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2019-5108

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An exploitable denial-of-service vulnerability exists in the Linux kernel prior to mainline 5.3. An attacker could exploit this vulnerability by triggering AP t...

7.4CVSS6.8AI score0.10114EPSS
SaveExploits1References2
Microsoft CVE
Microsoft CVE
added 2025/07/11 7:0 a.m.5 views

net: mvpp2: Prevent parser TCAM memory corruption

...

5.5CVSS6.8AI score0.00139EPSS
SaveExploits0
SUSE CVE
SUSE CVE
added 2023/02/15 3:40 a.m.3 views

SUSE CVE-2021-32740

Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. An uncontrolled resource consumption vulnerability exists after version 2.3.0 through version 2.7.0. Within the URI template implementation in Addressable, a maliciously crafted templat...

7.5CVSS7.7AI score0.02199EPSS
SaveExploits0References5
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.17 views

Mageia: Security Advisory (MGASA-2021-0417)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.02199EPSS
SaveExploits0References4
IBM Security Bulletins
IBM Security Bulletins
added 2022/01/10 6:35 a.m.31 views

Security Bulletin: Vulnerability in addressable - CVE-2021-32740 impacts IBM Watson Machine Learning Accelerator

Summary Addressable is used IBM Watson Machine Learning Accelerator. This bulletin provides mitigations for the addressable vulnerability CVE-2021-32740 by upgrading addressable to latest version. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affect...

7.5CVSS7.3AI score0.02199EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
added 2022/01/01 12:0 a.m.8 views

PT-2025-8472

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, specifically in the rtw89 module. The issue involves CAM leaks during the L2 reset process and ieee80211 restart hw function call...

5.5CVSS6.3AI score0.00218EPSS
SaveExploits0References19
RedHat Linux
RedHat Linux
added 2021/11/16 3:43 p.m.9 views

rubygem-addressable: ReDoS in templates

A resource-consumption vulnerability was found in rubygem addressable, where its URI template implementation could allow an attacker's crafted template to consume resources, resulting in a denial of service. The highest threat from this vulnerability is to system availability...

7.5CVSS7.3AI score0.02199EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2021/09/10 12:0 a.m.10 views

The vulnerability of the Addressable library, related to uncontrolled resource consumption, allows a hacker to trigger a service failure.

The vulnerability of the Addressable library is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures...

7.8CVSS7.1AI score0.02199EPSS
SaveExploits0References8Affected Software8
OSV
OSV
added 2021/09/04 5:1 p.m.6 views

MGASA-2021-0417 Updated ruby-addressable packages fix security vulnerability

A security flaw was found on rubygem-addressable that a crafted template may cause a Denial of Service CVE-2021-32740...

7.5CVSS7.4AI score0.02199EPSS
SaveExploits0References3
Mageia
Mageia
added 2021/09/04 5:1 p.m.37 views

Updated ruby-addressable packages fix security vulnerability

A security flaw was found on rubygem-addressable that a crafted template may cause a Denial of Service CVE-2021-32740...

7.5CVSS2.3AI score0.02199EPSS
SaveExploits0References2
OSV
OSV
added 2021/09/02 12:43 p.m.7 views

SUSE-SU-2021:2928-1 Security update for rubygem-addressable

This update for rubygem-addressable fixes the following issues: - CVE-2021-32740: Fixed denial of service via maliciously crafted templates bsc1188207...

7.5CVSS7.5AI score0.02199EPSS
SaveExploits0References3
OSV
OSV
added 2021/09/02 12:42 p.m.8 views

SUSE-SU-2021:2927-1 Security update for rubygem-addressable

This update for rubygem-addressable fixes the following issues: - CVE-2021-32740: Fixed denial of service via maliciously crafted templates bsc1188207...

7.5CVSS7.5AI score0.02199EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2021/08/28 12:0 a.m.21 views

Fedora: Security Advisory for rubygem-addressable (FEDORA-2021-5d14763df8)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.6AI score0.02199EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2021/08/28 12:0 a.m.20 views

Fedora: Security Advisory for rubygem-addressable (FEDORA-2021-e9fc035565)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.6AI score0.02199EPSS
SaveExploits0References2
Fedora
Fedora
added 2021/08/27 6:55 p.m.32 views

[SECURITY] Fedora 33 Update: rubygem-addressable-2.7.0-5.fc33

Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. It is flexible, offers heuristic parsing, and additionally provides extensive support for IRIs and URI templates...

7.5CVSS7.7AI score0.02199EPSS
SaveExploits0
Rows per page
Query Builder