Lucene search
+L

860 matches found

OSV
OSV
added 2017/09/19 5:29 p.m.33 views

CVE-2017-10784

The Basic authentication code in WEBrick library in Ruby before 2.2.8, 2.3.x before 2.3.5, and 2.4.x through 2.4.1 allows remote attackers to inject terminal emulator escape sequences into its log and possibly execute arbitrary commands via a crafted user name...

8.8CVSS9.6AI score
SaveExploits0References15
AlpineLinux
AlpineLinux
added 2017/09/19 5:00 p.m.87 views

CVE-2017-10784

The Basic authentication code in WEBrick library in Ruby before 2.2.8, 2.3.x before 2.3.5, and 2.4.x through 2.4.1 allows remote attackers to inject terminal emulator escape sequences into its log and possibly execute arbitrary commands via a crafted user name...

9.3CVSS8.3AI score0.16412EPSS
SaveExploits0
Debian
Debian
added 2017/09/05 8:17 p.m.56 views

[SECURITY] [DSA 3966-1] ruby2.3 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3966-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 05, 2017 https://www.debian.org/security/faq -...

9.8CVSS8.9AI score0.29442EPSS
SaveExploits9
NVD
NVD
added 2017/08/31 8:29 p.m.20 views

CVE-2017-0899

RubyGems version 2.6.12 and earlier is vulnerable to maliciously crafted gem specifications that include terminal escape characters. Printing the gem specification would execute terminal escape sequences...

9.8CVSS8.5AI score0.1081EPSS
SaveExploits1References13
OSV
OSV
added 2017/08/31 8:29 p.m.6 views

DEBIAN-CVE-2017-0899

RubyGems version 2.6.12 and earlier is vulnerable to maliciously crafted gem specifications that include terminal escape characters. Printing the gem specification would execute terminal escape sequences...

9.8CVSS9.2AI score0.1081EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
added 2017/08/31 12:00 a.m.49 views

CVE-2017-0899

RubyGems version 2.6.12 and earlier is vulnerable to maliciously crafted gem specifications that include terminal escape characters. Printing the gem specification would execute terminal escape sequences...

9.8CVSS6.9AI score0.1081EPSS
SaveExploits1References5
Mageia
Mageia
added 2017/06/29 9:40 p.m.20 views

Updated rxvt-unicode packages fix security vulnerability

The rxvt-unicode package has been patched to harden it against potential integer overflow issues when printing escape sequences...

2.5AI score
SaveExploits0References2
OSV
OSV
added 2017/06/29 9:40 p.m.8 views

MGASA-2017-0193 Updated rxvt-unicode packages fix security vulnerability

The rxvt-unicode package has been patched to harden it against potential integer overflow issues when printing escape sequences...

7.3AI score
SaveExploits0References3
OSV
OSV
added 2017/01/23 9:59 p.m.4 views

UBUNTU-CVE-2015-8971

Terminology 0.7.0 allows remote attackers to execute arbitrary commands via escape sequences that modify the window title and then are written to the terminal, a similar issue to CVE-2003-0063...

7.8CVSS7.4AI score0.01114EPSS
SaveExploits0References3
OSV
OSV
added 2017/01/23 9:59 p.m.16 views

DEBIAN-CVE-2015-8971

Terminology 0.7.0 allows remote attackers to execute arbitrary commands via escape sequences that modify the window title and then are written to the terminal, a similar issue to CVE-2003-0063...

7.8CVSS5.4AI score0.01114EPSS
SaveExploits0References1
OSV
OSV
added 2017/01/23 9:59 p.m.15 views

CVE-2015-8971

Terminology 0.7.0 allows remote attackers to execute arbitrary commands via escape sequences that modify the window title and then are written to the terminal, a similar issue to CVE-2003-0063...

7.8CVSS7.8AI score
SaveExploits0References11
NVD
NVD
added 2017/01/23 9:59 p.m.27 views

CVE-2015-8971

Terminology 0.7.0 allows remote attackers to execute arbitrary commands via escape sequences that modify the window title and then are written to the terminal, a similar issue to CVE-2003-0063...

7.8CVSS8AI score0.01114EPSS
SaveExploits0References6
Prion
Prion
added 2017/01/23 9:59 p.m.30 views

Code injection

Terminology 0.7.0 allows remote attackers to execute arbitrary commands via escape sequences that modify the window title and then are written to the terminal, a similar issue to CVE-2003-0063...

4.6CVSS7.7AI score0.03403EPSS
SaveExploits0References6Affected Software2
Cvelist
Cvelist
added 2017/01/23 9:00 p.m.37 views

CVE-2015-8971

Terminology 0.7.0 allows remote attackers to execute arbitrary commands via escape sequences that modify the window title and then are written to the terminal, a similar issue to CVE-2003-0063...

8.2AI score0.01114EPSS
SaveExploits0References6
Debian CVE
Debian CVE
added 2017/01/23 9:00 p.m.66 views

CVE-2015-8971

Terminology 0.7.0 allows remote attackers to execute arbitrary commands via escape sequences that modify the window title and then are written to the terminal, a similar issue to CVE-2003-0063...

7.8CVSS6.6AI score0.01114EPSS
SaveExploits0
OSV
OSV
added 2017/01/18 5:59 p.m.5 views

CVE-2016-9109

Artifex Software MuJS allows attackers to cause a denial of service crash via vectors related to incomplete escape sequences. NOTE: this vulnerability exists due to an incomplete fix for CVE-2016-7563...

7.5CVSS5.8AI score0.02192EPSS
SaveExploits1References5
NVD
NVD
added 2017/01/18 5:59 p.m.14 views

CVE-2016-9109

Artifex Software MuJS allows attackers to cause a denial of service crash via vectors related to incomplete escape sequences. NOTE: this vulnerability exists due to an incomplete fix for CVE-2016-7563...

7.5CVSS7.3AI score0.02192EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
added 2017/01/18 5:59 p.m.19 views

CVE-2016-9109

Artifex Software MuJS allows attackers to cause a denial of service crash via vectors related to incomplete escape sequences. NOTE: this vulnerability exists due to an incomplete fix for CVE-2016-7563...

7.5CVSS7.1AI score0.02192EPSS
SaveExploits1References2
OSV
OSV
added 2017/01/18 5:59 p.m.6 views

UBUNTU-CVE-2016-9109

Artifex Software MuJS allows attackers to cause a denial of service crash via vectors related to incomplete escape sequences. NOTE: this vulnerability exists due to an incomplete fix for CVE-2016-7563...

7.5CVSS7.1AI score0.02192EPSS
SaveExploits1References3
Debian CVE
Debian CVE
added 2017/01/18 5:00 p.m.31 views

CVE-2016-9109

Artifex Software MuJS allows attackers to cause a denial of service crash via vectors related to incomplete escape sequences. NOTE: this vulnerability exists due to an incomplete fix for CVE-2016-7563...

7.5CVSS7.5AI score0.02192EPSS
SaveExploits1
Rows per page
Query Builder