Lucene search
+L

19514 matches found

Positive Technologies
Positive Technologies
•added 2024/10/15 12:00 a.m.•17 views

PT-2024-7931

Name of the Vulnerable Software and Affected Versions Action Mailer versions 3.0.0 through 6.1.7.8 Action Mailer versions 7.0.0 through 7.0.8.4 Action Mailer versions 7.1.0 through 7.1.4.0 Action Mailer versions 7.2.0 through 7.2.1.0 Description The issue is related to the block format helper in...

9.8CVSS6.3AI score0.02997EPSS
SaveExploits5References86
Positive Technologies
Positive Technologies
•added 2024/10/15 12:00 a.m.•20 views

PT-2024-7928

Name of the Vulnerable Software and Affected Versions Action Pack versions 3.1.0 through 6.1.7.8 Action Pack versions 7.0.0 through 7.0.8.4 Action Pack versions 7.1.0 through 7.1.4.0 Action Pack versions 7.2.0 through 7.2.1.0 Description The issue is related to a possible ReDoS vulnerability in t...

9.8CVSS6.3AI score0.02997EPSS
SaveExploits5References81
GitLab Advisory Database
GitLab Advisory Database
•added 2024/10/15 12:00 a.m.•44 views

Possible ReDoS vulnerability in block_format in Action Mailer

There is a possible ReDoS vulnerability in the blockformat helper in Action Mailer. This vulnerability has been assigned the CVE identifier CVE-2024-47889. Impact ------ Carefully crafted text can cause the blockformat helper to take an unexpected amount of time, possibly resulting in a DoS...

8.7CVSS5.6AI score0.00937EPSS
SaveExploits0References5Affected Software1
GitLab Advisory Database
GitLab Advisory Database
•added 2024/10/15 12:00 a.m.•44 views

Possible ReDoS vulnerability in plain_text_for_blockquote_node in Action Text

There is a possible ReDoS vulnerability in the plaintextforblockquotenode helper in Action Text. This vulnerability has been assigned the CVE identifier CVE-2024-47888. Impact ------ Carefully crafted text can cause the plaintextforblockquotenode helper to take an unexpected amount of time,...

8.7CVSS5.6AI score0.00984EPSS
SaveExploits0References5Affected Software1
osv_oesa
osv_oesa
•added 2024/10/12 11:07 a.m.•19 views

OESA-2024-2247 ruby security update

Ruby is a fast and easy interpreted scripting language for object-oriented programming. It has many functions for processing text Files and perform system management tasks such as Perl. Security Fixes: An issue was discovered in the WEBrick toolkit through 1.8.1 for Ruby. It allows HTTP request...

7.5CVSS6.6AI score0.00393EPSS
SaveExploits0References2
osv_oesa
osv_oesa
•added 2024/10/12 11:07 a.m.•20 views

OESA-2024-2226 rubygem-webrick security update

WEBrick is an HTTP server toolkit that can be configured as an HTTPS server, a proxy server, and a virtual-host server. Security Fixes: An issue was discovered in the WEBrick toolkit through 1.8.1 for Ruby. It allows HTTP request smuggling by providing both a Content-Length header and a...

7.5CVSS6.7AI score0.00393EPSS
SaveExploits0References2
osv_rhsa
osv_rhsa
•added 2024/10/10 5:02 p.m.•33 views

RHSA-2024:4499 Red Hat Security Advisory: ruby security update

Bulletin has no description...

6.6CVSS6.1AI score0.02364EPSS
SaveExploits1References29
osv_rhsa
osv_rhsa
•added 2024/10/10 5:02 p.m.•33 views

RHSA-2024:1576 Red Hat Security Advisory: ruby:3.1 security, bug fix, and enhancement update

Bulletin has no description...

8.8CVSS6.7AI score0.02637EPSS
SaveExploits1References22
osv_rhsa
osv_rhsa
•added 2024/10/10 5:02 p.m.•34 views

RHSA-2024:1431 Red Hat Security Advisory: ruby:3.1 security, bug fix, and enhancement update

Bulletin has no description...

8.8CVSS6.7AI score0.02637EPSS
SaveExploits1References22
OpenVAS
OpenVAS
•added 2024/10/09 12:00 a.m.•28 views

Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2024-2542)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.3CVSS6.1AI score0.00494EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2024/10/09 12:00 a.m.•38 views

Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2024-2517)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.3CVSS6.1AI score0.00494EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2024/10/09 12:00 a.m.•20 views

Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2024-2594)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.6CVSS6.5AI score0.02064EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2024/10/09 12:00 a.m.•34 views

Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2024-2568)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.6CVSS6.5AI score0.02064EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2024/10/09 12:00 a.m.•46 views

EulerOS 2.0 SP11 : ruby (EulerOS-SA-2024-2594)

According to the versions of the ruby packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Rubygems.org is the Ruby community's gem hosting service. A Gem publisher can cause a Remote DoS when publishing a Gem. This is due to how Ruby read...

6.6CVSS6.4AI score0.02064EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
•added 2024/10/09 12:00 a.m.•34 views

EulerOS 2.0 SP12 : ruby (EulerOS-SA-2024-2517)

According to the versions of the ruby packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Rubygems.org is the Ruby community's gem hosting service. A Gem publisher can cause a Remote DoS when publishing a Gem. This is due to how Ruby read...

4.3CVSS6AI score0.00494EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2024/10/09 12:00 a.m.•44 views

EulerOS 2.0 SP11 : ruby (EulerOS-SA-2024-2568)

According to the versions of the ruby packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Rubygems.org is the Ruby community's gem hosting service. A Gem publisher can cause a Remote DoS when publishing a Gem. This is due to how Ruby read...

6.6CVSS6.4AI score0.02064EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
•added 2024/10/09 12:00 a.m.•30 views

EulerOS 2.0 SP12 : ruby (EulerOS-SA-2024-2542)

According to the versions of the ruby packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Rubygems.org is the Ruby community's gem hosting service. A Gem publisher can cause a Remote DoS when publishing a Gem. This is due to how Ruby read...

4.3CVSS6AI score0.00494EPSS
SaveExploits0References2
osv_usn
osv_usn
•added 2024/10/08 4:35 p.m.•15 views

USN-7057-2 ruby-webrick vulnerability

USN-7057-1 fixed a vulnerability in WEBrick. This update provides the corresponding updates for Ubuntu 22.04 LTS. Original advisory details: It was discovered that WEBrick incorrectly handled having both a Content- Length header and a Transfer-Encoding header. A remote attacker could possibly use...

6.8AI score0.00393EPSS
SaveExploits0References2
Ubuntu
Ubuntu
•added 2024/10/08 4:35 p.m.•20 views

USN-7057-2: WEBrick vulnerability

USN-7057-1 fixed a vulnerability in WEBrick. This update provides the corresponding updates for Ubuntu 22.04 LTS. Original advisory details: It was discovered that WEBrick incorrectly handled having both a Content- Length header and a Transfer-Encoding header. A remote attacker could possibly use...

6.8AI score0.00393EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2024/10/08 12:00 a.m.•14 views

Ubuntu: Security Advisory (USN-7057-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.8AI score0.00393EPSS
SaveExploits0References2
Rows per page
Query Builder