Lucene search
+L

7 matches found

osv_ghsa
osv_ghsa
•added 2017/10/24 6:33 p.m.•118 views

GHSA-X457-CW4H-HQ5F JSON gem has Improper Input Validation vulnerability

The JSON gem before 1.5.5, 1.6.x before 1.6.8, and 1.7.x before 1.7.7 for Ruby allows remote attackers to cause a denial of service resource consumption or bypass the mass assignment protection mechanism via a crafted JSON document that triggers the creation of arbitrary Ruby symbols or certain...

7.5CVSS7.1AI score0.13911EPSS
SaveExploits0References22
Github Security Blog
Github Security Blog
•added 2017/10/24 6:33 p.m.•92 views

JSON gem has Improper Input Validation vulnerability

The JSON gem before 1.5.5, 1.6.x before 1.6.8, and 1.7.x before 1.7.7 for Ruby allows remote attackers to cause a denial of service resource consumption or bypass the mass assignment protection mechanism via a crafted JSON document that triggers the creation of arbitrary Ruby symbols or certain...

7.5CVSS7.1AI score0.13911EPSS
SaveExploits0References22Affected Software1
osv_dla
osv_dla
•added 2015/04/30 12:00 a.m.•50 views

DLA-215-1 libjson-ruby - security update

Bulletin has no description...

7.5CVSS6.9AI score0.13911EPSS
SaveExploits0
NVD
NVD
•added 2013/02/13 1:55 a.m.•46 views

CVE-2013-0269

The JSON gem before 1.5.5, 1.6.x before 1.6.8, and 1.7.x before 1.7.7 for Ruby allows remote attackers to cause a denial of service resource consumption or bypass the mass assignment protection mechanism via a crafted JSON document that triggers the creation of arbitrary Ruby symbols or certain...

7.5CVSS7.9AI score0.13911EPSS
SaveExploits0References23
Cvelist
Cvelist
•added 2013/02/13 1:00 a.m.•102 views

CVE-2013-0269

The JSON gem before 1.5.5, 1.6.x before 1.6.8, and 1.7.x before 1.7.7 for Ruby allows remote attackers to cause a denial of service resource consumption or bypass the mass assignment protection mechanism via a crafted JSON document that triggers the creation of arbitrary Ruby symbols or certain...

7.9AI score0.13911EPSS
SaveExploits0References23
RubySec
RubySec
•added 2013/02/12 12:00 a.m.•63 views

CVE-2013-0269 rubygem-json: Denial of Service and SQL Injection

The JSON gem before 1.5.5, 1.6.x before 1.6.8, and 1.7.x before 1.7.7 for Ruby allows remote attackers to cause a denial of service resource consumption or bypass the mass assignment protection mechanism via a crafted JSON document that triggers the creation of arbitrary Ruby symbols or certain...

7.5CVSS7.1AI score0.13911EPSS
SaveExploits0References1Affected Software1
UbuntuCve
UbuntuCve
•added 2013/02/12 12:00 a.m.•74 views

CVE-2013-0269

The JSON gem before 1.5.5, 1.6.x before 1.6.8, and 1.7.x before 1.7.7 for Ruby allows remote attackers to cause a denial of service resource consumption or bypass the mass assignment protection mechanism via a crafted JSON document that triggers the creation of arbitrary Ruby symbols or certain...

7.5CVSS7.1AI score0.13911EPSS
SaveExploits0References4
Rows per page
Query Builder