Lucene search
K

24 matches found

OpenVAS
OpenVAS
added 2025/07/23 12:0 a.m.7 views

Ubuntu: Security Advisory (USN-7659-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.2CVSS7.1AI score0.2421EPSS
Exploits3References2
OSV
OSV
added 2025/07/21 11:29 p.m.0 views

USN-7659-1 ruby-nokogiri vulnerabilities

It was discovered Nokogiri did not correctly parse XML Schemas. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 20.04 LTS. CVE-2020-26247 Agustin Gianni discovere...

8.2CVSS6.8AI score0.2421EPSS
Exploits3References4
Tenable Nessus
Tenable Nessus
added 2025/05/30 12:0 a.m.10 views

Photon OS 4.0: Rubygem PHSA-2025-4.0-0807

An update of the rubygem package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0807. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

8.8CVSS7.8AI score0.51733EPSS
Exploits2References5
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2022-29181

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nokogiri is an open source XML and HTML library for Ruby. Nokogiri prior to version 1.13.6 does not type- check all inputs into the XML and HTML4 SAX parsers,...

8.2CVSS6.9AI score0.02886EPSS
Exploits1References2
IBM Security Bulletins
IBM Security Bulletins
added 2024/09/12 6:57 a.m.31 views

Security Bulletin: Vulnerabilities in Logstash affect IBM Operations Analytics - Log Analysis (CVE-2022-29181, CVE-2022-23476)

Summary There are multple nokogiri vulnerabilities in Logstash that effect IBM Operations Analytics - Log Analysis. These have been addressed. Vulnerability Details CVEID:CVE-2022-29181 DESCRIPTION: Nokogiri is vulnerable to a denial of service, caused by improper handling of unexpected data type...

8.2CVSS7.8AI score0.02886EPSS
Exploits1Affected Software1
SUSE CVE
SUSE CVE
added 2023/02/15 3:26 a.m.3 views

SUSE CVE-2022-29181

Nokogiri is an open source XML and HTML library for Ruby. Nokogiri prior to version 1.13.6 does not type-check all inputs into the XML and HTML4 SAX parsers, allowing specially crafted untrusted inputs to cause illegal memory access errors segfault or reads from unrelated memory. Version 1.13.6...

7.1CVSS7.5AI score0.02886EPSS
Exploits1References7
Amazon
Amazon
added 2022/12/06 12:0 a.m.30 views

Important: rubygem-nokogiri

Issue Overview: A flaw was found in the rubygem-nokogiri package. This flaw allows malicious users to change partial contents or configurations on the system. Additionally, this vulnerability can also cause a limited denial of service in the form of interruptions in resource availability...

8.2CVSS7.3AI score0.02886EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2022/11/17 12:0 a.m.34 views

SUSE SLED15 / SLES15 Security Update : rubygem-nokogiri (SUSE-SU-2022:4016-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:4016-1 advisory. - Nokogiri is an open source XML and HTML library for Ruby. Nokogiri = 1.13.4. There are no known workarounds...

8.2CVSS7.2AI score0.03354EPSS
Exploits1References7
Tenable Nessus
Tenable Nessus
added 2022/11/17 12:0 a.m.33 views

SUSE SLED15 / SLES15 Security Update : rubygem-nokogiri (SUSE-SU-2022:4015-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:4015-1 advisory. - Nokogiri is an open source XML and HTML library for Ruby. Nokogiri = 1.13.4. There are no known workarounds...

8.2CVSS7.2AI score0.03354EPSS
Exploits1References7
OpenVAS
OpenVAS
added 2022/11/17 12:0 a.m.21 views

SUSE: Security Advisory (SUSE-SU-2022:4016-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.2CVSS7.9AI score0.03354EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2022/11/17 12:0 a.m.24 views

SUSE: Security Advisory (SUSE-SU-2022:4015-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.2CVSS7.9AI score0.03354EPSS
Exploits1References2
OSV
OSV
added 2022/11/16 1:51 p.m.3 views

SUSE-SU-2022:4015-1 Security update for rubygem-nokogiri

This update for rubygem-nokogiri fixes the following issues: - CVE-2022-24836: Fixes possibility to DoS because of inefficient RE in HTML encoding. bsc1198408 - CVE-2022-29181: Fixes Improper Handling of Unexpected Data Typesi. bsc1199782...

8.2CVSS7.6AI score0.03354EPSS
Exploits1References5
OSV
OSV
added 2022/11/07 2:29 p.m.8 views

SUSE-SU-2022:3890-1 Security update for rubygem-nokogiri

This update for rubygem-nokogiri fixes the following issues: - CVE-2022-24836: Fixes possibility to DoS because of inefficient RE in HTML encoding. bsc1198408 - CVE-2022-29181: Fixes Improper Handling of Unexpected Data Typesi. bsc1199782...

8.2CVSS7.6AI score0.03354EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2022/05/23 5:49 a.m.47 views

CVE-2022-29181

A flaw was found in the rubygem-nokogiri package. This flaw allows malicious users to change partial contents or configurations on the system. Additionally, this vulnerability can also cause a limited denial of service in the form of interruptions in resource availability. Mitigation To avoid thi...

8.2CVSS4.1AI score0.02886EPSS
Exploits1References4
OpenVAS
OpenVAS
added 2022/05/23 12:0 a.m.17 views

Mageia: Security Advisory (MGASA-2022-0200)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.2CVSS8.2AI score0.02886EPSS
Exploits1References5
Circl
Circl
added 2022/05/20 10:30 p.m.1 views

CVE-2022-29181

creationtimestamp| type| source ---|---|--- 2022-05-20 22:30:51+00:00| seen| https://t.me/cibsecurity/43081 2025-04-22 18:03:34+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12920 2025-07-23 13:51:51+00:00| seen|...

8.2CVSS7.1AI score0.02886EPSS
Exploits1References4
NVD
NVD
added 2022/05/20 7:15 p.m.17 views

CVE-2022-29181

Nokogiri is an open source XML and HTML library for Ruby. Nokogiri prior to version 1.13.6 does not type-check all inputs into the XML and HTML4 SAX parsers, allowing specially crafted untrusted inputs to cause illegal memory access errors segfault or reads from unrelated memory. Version 1.13.6...

8.2CVSS0.02886EPSS
Exploits1References9
UbuntuCve
UbuntuCve
added 2022/05/20 7:15 p.m.36 views

CVE-2022-29181

Nokogiri is an open source XML and HTML library for Ruby. Nokogiri prior to version 1.13.6 does not type-check all inputs into the XML and HTML4 SAX parsers, allowing specially crafted untrusted inputs to cause illegal memory access errors segfault or reads from unrelated memory. Version 1.13.6...

8.2CVSS6.8AI score0.02886EPSS
Exploits1References7
Vulnrichment
Vulnrichment
added 2022/05/20 12:0 a.m.7 views

CVE-2022-29181 Improper Handling of Unexpected Data Type in Nokogiri

Nokogiri is an open source XML and HTML library for Ruby. Nokogiri prior to version 1.13.6 does not type-check all inputs into the XML and HTML4 SAX parsers, allowing specially crafted untrusted inputs to cause illegal memory access errors segfault or reads from unrelated memory. Version 1.13.6...

8.2CVSS8.3AI score0.02886EPSS
Exploits1References5
CVE
CVE
added 2022/05/20 12:0 a.m.211 views

CVE-2022-29181

CVE-2022-29181 affects Nokogiri on Ruby prior to 1.13.6, where the XML/HTML4 SAX parsers do not type-check all inputs. This can allow specially crafted untrusted inputs to cause illegal memory access (segfault) or reads from unrelated memory. The issue is resolved in 1.13.6, with a workaround to ...

8.2CVSS8AI score0.02886EPSS
Exploits1References9Affected Software1
Rows per page
Query Builder