Lucene search
K

183 matches found

NVD
NVD
added 2010/08/24 8:0 p.m.18 views

CVE-2010-3119

Google Chrome before 5.0.375.127 and webkitgtk before 1.2.6 do not properly support the Ruby language, which allows attackers to cause a denial of service memory corruption or possibly have unspecified other impact via unknown vectors...

10CVSS9.7AI score0.0142EPSS
Exploits0References8
UbuntuCve
UbuntuCve
added 2010/08/24 8:0 p.m.22 views

CVE-2010-3119

Google Chrome before 5.0.375.127 and webkitgtk before 1.2.6 do not properly support the Ruby language, which allows attackers to cause a denial of service memory corruption or possibly have unspecified other impact via unknown vectors...

10CVSS5.9AI score0.0142EPSS
Exploits0References1
Prion
Prion
added 2010/08/24 8:0 p.m.21 views

Memory corruption

Google Chrome before 5.0.375.127 and webkitgtk before 1.2.6 do not properly support the Ruby language, which allows attackers to cause a denial of service memory corruption or possibly have unspecified other impact via unknown vectors...

10CVSS7.4AI score0.0142EPSS
Exploits0References8Affected Software2
Debian CVE
Debian CVE
added 2010/08/24 7:0 p.m.26 views

CVE-2010-3119

Removed by vendor...

10CVSS6.6AI score0.0142EPSS
Exploits0
Cvelist
Cvelist
added 2010/08/24 7:0 p.m.32 views

CVE-2010-3119

Google Chrome before 5.0.375.127 and webkitgtk before 1.2.6 do not properly support the Ruby language, which allows attackers to cause a denial of service memory corruption or possibly have unspecified other impact via unknown vectors...

9.6AI score0.0142EPSS
Exploits0References8
OpenVAS
OpenVAS
added 2010/03/02 12:0 a.m.26 views

Fedora Update for ruby FEDORA-2010-0530

Check for the Version of ruby OpenVAS Vulnerability Test Fedora Update for ruby FEDORA-2010-0530 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

5CVSS6.3AI score0.16099EPSS
Exploits2References2
seebug.org
seebug.org
added 2009/07/09 12:0 a.m.52 views

Ruby on Rails http_authentication.rb Nil凭据绕过认证漏洞

BUGTRAQ ID: 35579 Ruby on Rails是一个新的Web应用程序框架,构建在Ruby语言之上。 Ruby on Rails的actionpack/lib/actioncontroller/httpauthentication.rb文件中的 validatedigestresponse函数在处理nil凭据时存在错误,如果没有找到用户返回的是nil,而正确的行为是返回 false。远程攻击者发送空的认证凭据就可以绕过HTTP认证获得非授权访问。 David Heinemeier Hansson Ruby on Rails 2.3.2 厂商补丁: David...

6.9AI score
Exploits0
OpenVAS
OpenVAS
added 2008/08/15 12:0 a.m.32 views

Debian Security Advisory DSA 1618-1 (ruby1.9)

The remote host is missing an update to ruby1.9 announced via advisory DSA 1618-1. OpenVAS Vulnerability Test $Id: deb16181.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1618-1 ruby1.9 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

10CVSS1.7AI score0.04456EPSS
Exploits1
seebug.org
seebug.org
added 2008/08/14 12:0 a.m.9 views

Ruby存在安全绕过和拒绝服务漏洞

BUGTRAQ ID: 30644 CNCAN ID:CNCAN-2008081415 Ruby是一种功能强大的面向对象的脚本语言。 Ruby的1.8.6-p287或1.8.7-p72之前版本存在多个安全漏洞,远程攻击者可以利用漏洞绕过某些安全限制、造成拒绝服务或执行欺骗攻击。 1 安全等级限制实现中存在多个错误,可导致在第4安全层调用untracevar、执行syslog操作、修改$PROGRAMNAME,或在1到3层调用不安全的方法。 2...

6.9AI score
Exploits0
Debian
Debian
added 2008/07/26 3:17 p.m.37 views

[SECURITY] [DSA 1618-1] New ruby1.9 packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1618-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 26, 2008 http://www.debian.org/security/faq -...

10CVSS7.8AI score0.04456EPSS
Exploits1
OSV
OSV
added 2008/07/26 12:0 a.m.29 views

DSA-1618-1 ruby1.9 - several vulnerabilities

Bulletin has no description...

10CVSS7AI score0.04456EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2008/07/23 12:0 a.m.38 views

Debian DSA-1612-1 : ruby1.8 - several vulnerabilities

Several vulnerabilities have been discovered in the interpreter for the Ruby language, which may lead to denial of service or the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-2662 Drew Yao discovered that multiple...

10CVSS7.7AI score0.04456EPSS
Exploits1References13
Debian
Debian
added 2008/07/21 5:29 p.m.36 views

[SECURITY] [DSA 1612-1] New ruby1.8 packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1612-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 21, 2008 http://www.debian.org/security/faq -...

10CVSS7.8AI score0.04456EPSS
Exploits1
OSV
OSV
added 2008/07/21 12:0 a.m.37 views

DSA-1612-1 ruby1.8 - several vulnerabilities

Bulletin has no description...

10CVSS7AI score0.04456EPSS
Exploits1
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2008/05/20 3:0 p.m.0 views

Denial of service vulnerability in Ruby CGI library (cgi.rb)

Overview cgi.rb, a standard library in Ruby, contains a denial of service vulnerability. This vulnerability is different from CVE-2006-5467. Impact A remote attacker could possibly conduct a DoS attack on a Ruby server by sending it a specially crafted request. Solution None...

5CVSS7.5AI score0.03589EPSS
Exploits1References16
OpenVAS
OpenVAS
added 2008/01/17 12:0 a.m.34 views

Debian Security Advisory DSA 1139-1 (ruby1.6)

The remote host is missing an update to ruby1.6 announced via advisory DSA 1139-1. It was discovered that the interpreter for the Ruby language does not properly maintain safe levels for aliasing, directory accesses and regular expressions, which might lead to a bypass of security restrictions...

6.4CVSS0.3AI score0.05739EPSS
Exploits0
OpenVAS
OpenVAS
added 2008/01/17 12:0 a.m.26 views

Debian Security Advisory DSA 1157-1 (ruby1.8)

The remote host is missing an update to ruby1.8 announced via advisory DSA 1157-1. Several vulnerabilities have been discovered in the interpreter for the Ruby language, which may lead to the bypass of security restrictions or denial of service. The Common Vulnerabilities and Exposures project...

7.5CVSS0.3AI score0.10192EPSS
Exploits1
OpenVAS
OpenVAS
added 2008/01/17 12:0 a.m.17 views

Debian: Security Advisory (DSA-1157)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.6AI score0.10192EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2006/12/16 12:0 a.m.36 views

Mandrake Linux Security Advisory : ruby (MDKSA-2006:134)

A number of flaws were discovered in the safe-level restrictions in the Ruby language. Because of these flaws, it would be possible for an attacker to create a carefully crafted malicious script that could allow them to bypass certain safe-level restrictions. Updated packages have been patched to...

6.4CVSS7.2AI score0.05739EPSS
Exploits0References1
OSV
OSV
added 2006/08/27 12:0 a.m.28 views

DSA-1157 ruby1.8

Bulletin has no description...

6.4CVSS6AI score0.10192EPSS
Exploits0
Rows per page
Query Builder