CVE-2019-1736

Cisco UCS C-Series Rack Servers are affected by a UEFI Secure Boot bypass vulnerability (CVE-2019-1736) arising from improper validation of server firmware upgrade images. An authenticated, physical attacker could install a firmware version that disables UEFI Secure Boot, bypasses signature valid...

SUSE-SU-2020:2678-1 Security update for rubygem-rack

This update for rubygem-rack to version 1.6.13 fixes the following issues: - CVE-2020-8184: Fixed an issue where percent-encoded cookies could have been used to overwrite existing prefixed cookie names bsc1173351. - CVE-2020-8161: Fixed a directory traversal bsc1172037. - CVE-2019-16782: Fixed an...

The vulnerability of HTTP servers for Ruby/Rack applications developed with Puma arises from incorrect handling of characters such as CR, LF, /r, and /n before data is inserted into HTTP headers. This allows attackers to perform cross-site scripting attacks.

The vulnerability of HTTP servers for Ruby/Rack applications developed with Puma is related to the improper elimination of characters CR, LF, /r, and /n before data is entered into the HTTP headers. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

The vulnerability of HTTP servers for Ruby/Rack applications, Puma, relates to deficiencies in HTTP request processing, allowing attackers to influence the integrity of information.

The vulnerability of HTTP servers for Ruby/Rack applications developed with Puma is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to influence the integrity of information...

MGASA-2020-0306 Updated ruby-rack packages fix security vulnerability

A reliance on cookies without validation/integrity check security vulnerability exists in rack 2.2.3 that makes it is possible for an attacker to forge a secure or host-only cookie prefix CVE-2020-8184...

Updated ruby-rack packages fix security vulnerability

A reliance on cookies without validation/integrity check security vulnerability exists in rack 2.2.3 that makes it is possible for an attacker to forge a secure or host-only cookie prefix CVE-2020-8184...

Debian: Security Advisory (DLA-2275-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-2275-1 : ruby-rack security update

The following CVEs were reported against src:ruby-rack. CVE-2020-8161 A directory traversal vulnerability exists in rack 2.2.0 that allows an attacker perform directory traversal vulnerability in the Rack::Directory app that is bundled with Rack which could result in information disclosure...

[SECURITY] [DLA 2275-1] ruby-rack security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2275-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta July 10, 2020 https://wiki.debian.org/LTS - -----------------------------------------------------------------------...

DLA-2275-1 ruby-rack - security update

Bulletin has no description...

GHSA-5F9H-9PJV-V6J7 Directory traversal in Rack::Directory app bundled with Rack

A directory traversal vulnerability exists in rack 2.2.0 that allows an attacker perform directory traversal vulnerability in the Rack::Directory app that is bundled with Rack which could result in information disclosure...

Directory traversal in Rack::Directory app bundled with Rack

A directory traversal vulnerability exists in rack 2.2.0 that allows an attacker perform directory traversal vulnerability in the Rack::Directory app that is bundled with Rack which could result in information disclosure...

CVE-2020-8161

A directory traversal vulnerability exists in rack 2.2.0 that allows an attacker perform directory traversal vulnerability in the Rack::Directory app that is bundled with Rack which could result in information disclosure...

CVE-2020-8161

A directory traversal vulnerability exists in rack 2.2.0 that allows an attacker perform directory traversal vulnerability in the Rack::Directory app that is bundled with Rack which could result in information disclosure...

DEBIAN-CVE-2020-8161

A directory traversal vulnerability exists in rack 2.2.0 that allows an attacker perform directory traversal vulnerability in the Rack::Directory app that is bundled with Rack which could result in information disclosure...

CVE-2020-8161

A directory traversal vulnerability exists in rack 2.2.0 that allows an attacker perform directory traversal vulnerability in the Rack::Directory app that is bundled with Rack which could result in information disclosure...

Directory traversal

A directory traversal vulnerability exists in rack 2.2.0 that allows an attacker perform directory traversal vulnerability in the Rack::Directory app that is bundled with Rack which could result in information disclosure...

UBUNTU-CVE-2020-8161

A directory traversal vulnerability exists in rack 2.2.0 that allows an attacker perform directory traversal vulnerability in the Rack::Directory app that is bundled with Rack which could result in information disclosure...

CVE-2020-8161

Summary of risk : CVE-2020-8161 is a directory-traversal vulnerability in Rack (

CVE-2020-8161

A directory traversal vulnerability exists in rack 2.2.0 that allows an attacker perform directory traversal vulnerability in the Rack::Directory app that is bundled with Rack which could result in information disclosure...