Lucene search
K

18 matches found

OSV
OSV
added 2025/03/12 10:30 p.m.1 views

MAL-2025-191906 Malicious code in tonetext (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c46725ad6c88079cce4f7fa4a29175fec7f78ea83344da99d0f02ac4f020fcf3 When imported, the code embedded into the exception class downloads a remote file, and runs it by importing, and attempts to cover tracks by overwriting itself...

7.2AI score
Exploits0References1
NVD
NVD
added 2024/05/21 3:15 p.m.17 views

CVE-2021-47269

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: ep0: fix NULL pointer exception There is no validation of the index from dwc3wIndextodep and we might be referring a non-existing ep and trigger a NULL pointer exception. In certain configurations we might use fewer ep...

5.5CVSS6.4AI score0.00009EPSS
Exploits0References8
Veracode
Veracode
added 2020/04/10 12:59 a.m.58 views

Access Control Bypass

ruby is vulnerable to access control bypass. A flaw was found in the method for translating an exception message into a string in the Exception class. A remote attacker could use this flaw to bypass safe level 4 restrictions, allowing untrusted tainted code to modify arbitrary, trusted untainted...

5CVSS3.1AI score0.02121EPSS
Exploits2References23Affected Software1
Github Security Blog
Github Security Blog
added 2020/03/30 8:9 p.m.59 views

Exceptions displayed in non-debug configurations in Symfony

Description ----------- When ErrorHandler renders an exception HTML page, it uses un-escaped properties from the related Exception class to render the stacktrace. The security issue comes from the fact that the stacktraces were also displayed in non-debug environments. Resolution ---------- The...

5.5CVSS0.3AI score0.00267EPSS
Exploits0References8Affected Software2
Veracode
Veracode
added 2019/05/02 4:53 a.m.29 views

Authorization Bypass

ruby is vulnerable to authorization bypass. A flaw was found in the method for translating an exception message into a string in the Ruby Exception class. A remote attacker could use this flaw to bypass safe level 4 restrictions, allowing untrusted tainted code to modify arbitrary, trusted...

5CVSS6.1AI score0.02189EPSS
Exploits1References22Affected Software35
Tenable Nessus
Tenable Nessus
added 2013/09/04 12:0 a.m.28 views

Amazon Linux AMI : ruby (ALAS-2013-173)

It was discovered that Ruby's REXML library did not properly restrict XML entity expansion. An attacker could use this flaw to cause a denial of service by tricking a Ruby application using REXML to read text nodes from specially crafted XML content, which will result in REXML consuming large...

5CVSS8.3AI score0.25732EPSS
Exploits2References4
Tenable Nessus
Tenable Nessus
added 2013/07/12 12:0 a.m.25 views

Oracle Linux 4 : ruby (ELSA-2011-0908)

From Red Hat Security Advisory 2011:0908 : Updated ruby packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores,...

7.5CVSS6.3AI score0.18181EPSS
Exploits4References5
OpenVAS
OpenVAS
added 2013/03/12 12:0 a.m.28 views

CentOS Update for ruby CESA-2013:0612 centos6

Check for the Version of ruby OpenVAS Vulnerability Test CentOS Update for ruby CESA-2013:0612 centos6 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

5CVSS6.9AI score0.25732EPSS
Exploits2References2
Cent OS
Cent OS
added 2013/03/09 12:47 a.m.70 views

ruby security update

CentOS Errata and Security Advisory CESA-2013:0612 Updated ruby packages that fix two security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores...

5CVSS7.3AI score0.25732EPSS
Exploits2References7
Tenable Nessus
Tenable Nessus
added 2013/03/08 12:0 a.m.25 views

Scientific Linux Security Update : ruby on SL6.x i386/x86_64 (20130307)

It was discovered that Ruby's REXML library did not properly restrict XML entity expansion. An attacker could use this flaw to cause a denial of service by tricking a Ruby application using REXML to read text nodes from specially crafted XML content, which will result in REXML consuming large...

5CVSS8.3AI score0.25732EPSS
Exploits2References4
RedHat Linux
RedHat Linux
added 2013/03/07 6:53 p.m.43 views

Moderate: Red Hat Security Advisory: ruby security update

Updated ruby packages that fix two security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are availab...

5CVSS7.3AI score0.25732EPSS
Exploits2References4
OpenVAS
OpenVAS
added 2013/01/21 12:0 a.m.30 views

CentOS Update for ruby CESA-2013:0129 centos5

Check for the Version of ruby OpenVAS Vulnerability Test CentOS Update for ruby CESA-2013:0129 centos5 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

5CVSS6.5AI score0.02121EPSS
Exploits3References2
Tenable Nessus
Tenable Nessus
added 2012/08/01 12:0 a.m.31 views

Scientific Linux Security Update : ruby on SL4.x i386/x86_64

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to do system management tasks. A flaw was found in the way large amounts of memory were allocated on 64-bit systems when using the BigDecimal class. A context-dependent attacker coul...

7.5CVSS6.3AI score0.18181EPSS
Exploits4References5
OpenVAS
OpenVAS
added 2012/06/06 12:0 a.m.37 views

RedHat Update for ruby RHSA-2011:0910-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

6.8CVSS6.8AI score0.02121EPSS
Exploits2References2
Tenable Nessus
Tenable Nessus
added 2011/08/15 12:0 a.m.35 views

CentOS 4 : ruby (CESA-2011:0908)

Updated ruby packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

7.5CVSS6.3AI score0.18181EPSS
Exploits4References6
OpenVAS
OpenVAS
added 2011/07/08 12:0 a.m.25 views

RedHat Update for ruby RHSA-2011:0908-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

7.5CVSS7.2AI score0.18181EPSS
Exploits4References2
RedHat Linux
RedHat Linux
added 2011/06/28 5:30 p.m.32 views

Moderate: Red Hat Security Advisory: ruby security update

Updated ruby packages that fix three security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

6.8CVSS6.7AI score0.02121EPSS
Exploits2References6
Tenable Nessus
Tenable Nessus
added 2009/11/05 12:0 a.m.13 views

Fedora 10 : rt3-3.8.2-11.fc10 (2009-10426)

Tue Oct 13 2009 Ralf Corsepius - 3.8.2-11 - Update rt-3.8.2-rh-bz526870.diff. - Mon Oct 12 2009 Ralf Corsepius - 3.8.2-10 - Add rt-3.8.2-rh-bz526870.diff BZ 526870. - Wed Jun 24 2009 Ralf Corsepius - 3.8.2-9 - Add R: perlData::ICal, R: perlData::ICal::Entry::Event BZ 507965. - Fri Jun 19 2009...

5.5AI score
Exploits0References2
Rows per page
Query Builder