Lucene search
K

17 matches found

Tenable Nessus
Tenable Nessus
added 2025/09/20 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2025-58767

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - REXML is an XML toolkit for Ruby. The REXML gems from 3.3.3 to 3.4.1 has a DoS vulnerability when parsing XML containing multiple XML declarations. If you need ...

5.3CVSS6.9AI score0.00084EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2025/07/23 12:0 a.m.3 views

Ruby REXML < 3.3.6 DoS vulnerability

The version of the REXML Ruby library installed on the remote host is prior to 3.3.6. It is, therefore, affected by a DoS vulnerability. The vulnerability lies when it parses an XML that has many deep elements that have same local name attributes. If you need to parse untrusted XMLs with tree...

5.9CVSS6.6AI score0.01167EPSS
Exploits0References2
Microsoft CVE
Microsoft CVE
added 2024/10/15 7:0 a.m.2 views

Denial of service in REXML

...

4.3CVSS7.2AI score0.08032EPSS
Exploits0
BDU FSTEC
BDU FSTEC
added 2024/09/24 12:0 a.m.1 views

The vulnerability of the XML tools for Ruby REXML, related to uncontrolled resource consumption, allows a attacker to cause a service failure.

The vulnerability of the XML tools for Ruby REXML is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...

7.8CVSS6.3AI score0.00679EPSS
Exploits0References6Affected Software4
BDU FSTEC
BDU FSTEC
added 2024/09/24 12:0 a.m.1 views

The vulnerability of the XML tools for Ruby REXML, related to uncontrolled resource consumption, allows a attacker to cause a service failure.

The vulnerability of the XML tools for Ruby REXML is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...

7.8CVSS6.4AI score0.00239EPSS
Exploits0References5Affected Software4
RedHat Linux
RedHat Linux
added 2024/09/18 9:15 p.m.0 views

rexml: DoS vulnerability in REXML

An uncontrolled resource consumption vulnerability was found in REXML. When parsing an untrusted XML with many specific characters such as , it can lead to a denial of service...

4.3CVSS7.3AI score0.08032EPSS
Exploits0References6
SUSE CVE
SUSE CVE
added 2024/08/06 2:0 a.m.3 views

SUSE CVE-2024-41123

REXML is an XML toolkit for Ruby. The REXML gem before 3.3.2 has some DoS vulnerabilities when it parses an XML that has many specific characters such as whitespace character, and . The REXML gem 3.3.3 or later include the patches to fix these vulnerabilities...

5.3CVSS7.4AI score0.00239EPSS
Exploits0References10
OSV
OSV
added 2024/08/01 3:15 p.m.3 views

DEBIAN-CVE-2024-41123

REXML is an XML toolkit for Ruby. The REXML gem before 3.3.2 has some DoS vulnerabilities when it parses an XML that has many specific characters such as whitespace character, and . The REXML gem 3.3.3 or later include the patches to fix these vulnerabilities...

7.5CVSS6.2AI score0.00239EPSS
Exploits0References1
OSV
OSV
added 2021/07/10 11:3 a.m.1 views

OESA-2021-1259 ruby security update

Security Fixes: The REXML gem before 3.2.5 in Ruby before 2.6.7, 2.7.x before 2.7.3, and 3.x before 3.0.1 does not properly address XML round-trip issues. An incorrect document can be produced after parsing and serializing.CVE-2021-28965...

7.5CVSS7AI score0.00576EPSS
Exploits0References2
RedHat Linux
RedHat Linux
added 2021/06/29 4:12 p.m.0 views

ruby: XML round-trip vulnerability in REXML

A flaw was found in the way the Ruby REXML library parsed XML documents. Parsing a specially crafted XML document using REXML and writing parsed data back to a new XML document results in creating a document with a different structure. This issue could affect the integrity of processed data in...

7.5CVSS7.3AI score0.00576EPSS
Exploits0References4
CNNVD
CNNVD
added 2021/04/06 12:0 a.m.3 views

Ruby 路径遍历漏洞

Ruby is a cross-platform, object-oriented, dynamically typed programming language from the individual developer, Yukihiro Matsumoto. A path traversal vulnerability exists in REXML in Ruby 2.5.9, which stems from the fact that parsing and serializing a carefully crafted XML document may create an...

7.5CVSS7.2AI score0.00247EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2013/07/09 5:35 p.m.59 views

Important: Red Hat Security Advisory: Fuse ESB Enterprise 7.1.0 update

Fuse ESB Enterprise 7.1.0 roll up patch 1, which fixes multiple security issues and various bugs, is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores,...

7.5CVSS6.8AI score0.25732EPSS
Exploits6References8
Cent OS
Cent OS
added 2013/03/08 12:25 a.m.67 views

ruby security update

CentOS Errata and Security Advisory CESA-2013:0611 Updated ruby packages that fix one security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score...

5CVSS7.3AI score0.25732EPSS
Exploits0References7
OpenVAS
OpenVAS
added 2013/03/08 12:0 a.m.25 views

RedHat Update for ruby RHSA-2013:0612-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

5CVSS7.7AI score0.25732EPSS
Exploits2References2
OpenVAS
OpenVAS
added 2013/03/08 12:0 a.m.28 views

RedHat Update for ruby RHSA-2013:0611-01

Check for the Version of ruby OpenVAS Vulnerability Test RedHat Update for ruby RHSA-2013:0611-01 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

5CVSS6.2AI score0.25732EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2013/03/08 12:0 a.m.37 views

RHEL 6 : ruby (RHSA-2013:0612)

Updated ruby packages that fix two security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are availab...

5CVSS8.2AI score0.25732EPSS
Exploits2References6
RedHat Linux
RedHat Linux
added 2013/03/07 6:50 p.m.33 views

Moderate: Red Hat Security Advisory: ruby security update

Updated ruby packages that fix one security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

5CVSS7.2AI score0.25732EPSS
Exploits0References2
Rows per page
Query Builder