Lucene search
+L

16879 matches found

OSV
OSV
added 2026/06/30 12:0 a.m.14 views

ALSA-2026:33577 Important: ruby:4.0 security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fixes: ruby: net-imap: Net::IMAP: Denial of Service via crafted IMAP responses CVE-2026-42245 ruby/net-imap: ruby: Net::IMAP: IMAP Comman...

7.6CVSS5.8AI score0.00783EPSS
SaveExploits0References8
OSV
OSV
added 2026/06/30 12:0 a.m.8 views

ALSA-2026:33576 Important: ruby:3.3 security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fixes: ruby: net-imap: Net::IMAP: Denial of Service via crafted IMAP responses CVE-2026-42245 ruby/net-imap: ruby: Net::IMAP: IMAP Comman...

7.6CVSS5.8AI score0.00783EPSS
SaveExploits0References8
OSV
OSV
added 2026/06/30 12:0 a.m.11 views

ALSA-2026:33512 Important: ruby security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fixes: ruby/net-imap: ruby: Net::IMAP: IMAP Command Injection via Symbol Arguments CVE-2026-42258 net-imap: ruby: Net::IMAP: Information...

7.6CVSS5.8AI score0.00783EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2026/06/30 12:0 a.m.13 views

RHEL 10 : ruby (RHSA-2026:33565)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:33565 advisory. Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system...

7.6CVSS5.8AI score0.00783EPSS
SaveExploits0References8
Snyk
Snyk
added 2026/06/29 8:21 p.m.25 views

Use After Free

Overview Affected versions of this package are vulnerable to Use After Free in the clear function. An attacker can access or manipulate memory contents from another buffer by triggering the reuse of a memory page after it has been returned to the shared pool, leading to unintended disclosure or...

5.4CVSS5.9AI score0.00136EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2026/06/29 8:39 a.m.14 views

CVE-2026-57435

A flaw was found in Nokogiri, an XML and HTML library for Ruby. This use-after-free vulnerability occurs when replacing the value of an XML attribute. If a Ruby wrapper already points to the attribute's child node, the underlying native child node can be freed while the wrapper remains accessible...

7.5CVSS5.7AI score0.00368EPSS
SaveExploits0References4
Photon
Photon
added 2026/06/29 12:0 a.m.17 views

Critical Photon OS Security Update - PHSA-2026-5.0-0909

Updates of 'rubygem-concurrent-ruby' packages of Photon OS have been released...

9.8CVSS5.8AI score0.00413EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2026/06/29 12:0 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2026-57438

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, XInclude substitution performed by...

6.6CVSS6AI score0.00094EPSS
SaveExploits0References3
Photon
Photon
added 2026/06/29 12:0 a.m.11 views

Critical Photon OS Security Update - PHSA-2026-4.0-1046

Updates of 'rubygem-concurrent-ruby' packages of Photon OS have been released...

9.8CVSS5.9AI score0.0016EPSS
SaveExploits0
Photon
Photon
added 2026/06/29 12:0 a.m.18 views

Critical Photon OS Security Update - PHSA-2026-5.0-91-0909

Updates of 'rubygem-concurrent-ruby' packages of Photon OS have been released...

9.8CVSS5.5AI score0.0016EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/06/29 12:0 a.m.14 views

Linux Distros Unpatched Vulnerability : CVE-2026-57434

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri contains a bug when calling certain methods on...

7.5CVSS6AI score0.00358EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/06/29 12:0 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2026-57435

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri's CRuby native extension could leave a Ruby wrapper...

7.5CVSS6.1AI score0.00368EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/06/29 12:0 a.m.16 views

Linux Distros Unpatched Vulnerability : CVE-2026-57436

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri::XML::Documentroot= validated only that the new roo...

6.3CVSS6AI score0.00321EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/06/29 12:0 a.m.17 views

Linux Distros Unpatched Vulnerability : CVE-2026-57235

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri::XML::NodeSet and its alias slice checked the...

8.2CVSS6AI score0.00341EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/06/29 12:0 a.m.14 views

Linux Distros Unpatched Vulnerability : CVE-2026-57234

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, the NONET parse option, which Nokogiri turns on by default f...

4.3CVSS6.2AI score0.01118EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/06/29 12:0 a.m.14 views

Linux Distros Unpatched Vulnerability : CVE-2026-47242

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to 0.6.5 and 0.5.15, when Net::IMAPid is called with a hash...

5.8CVSS5.6AI score0.00131EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2026/06/28 2:31 p.m.15 views

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: libsolv: libsolv-0.7.39-3.hum1 aarch64, x8664 libsolv-demo-0.7.39-3.hum1 aarch64, x8664 libsolv-devel-0.7.39-3.hum1 aarch64, x8664 libsolv-tools-0.7.39-3.hum1 aarch64, x8664...

6.5CVSS5.8AI score0.00409EPSS
SaveExploits0References3
Microsoft CVE
Microsoft CVE
added 2026/06/27 8:17 a.m.24 views

Nokogiri: XML::Schema on JRuby allows network requests when NONET is set, bypassing CVE-2020-26247

...

4.3CVSS7.1AI score0.01118EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2026/06/27 8:10 a.m.25 views

concurrent-ruby: `ReentrantReadWriteLock` read-count overflow grants a write lock without exclusivity

...

5.5CVSS5.8AI score0.00106EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2026/06/27 8:9 a.m.17 views

concurrent-ruby: ReadWriteLock allows wrong-thread write release and stray read-release counter corruption

...

9.8CVSS5.8AI score0.0016EPSS
SaveExploits0
Rows per page
Query Builder