Lucene search
K

5 matches found

OSV
OSV
added 2024/05/28 3:47 p.m.20 views

GHSA-7R3J-QMR4-JFPJ Kaminari Insecure File Permissions Vulnerability

A moderate severity security vulnerability has been identified in the Kaminari pagination library for Ruby on Rails, concerning insecure file permissions. This advisory outlines the vulnerability, affected versions, and provides guidance for mitigation. Impact This vulnerability is of moderate...

6.6CVSS6.5AI score0.00132EPSS
Exploits0References4
GithubExploit
GithubExploit
added 2024/05/04 6:44 p.m.327 views

Exploit for Improper Access Control in Joomla Joomla\!

CVE-2023-23752 Joomla! v4.2.8 - Unauthenticated informa...

5.3CVSS6AI score0.94522EPSS
Exploits42
SUSE CVE
SUSE CVE
added 2023/02/15 5:47 a.m.2 views

SUSE CVE-2012-2125

RubyGems before 1.8.23 can redirect HTTPS connections to HTTP, which makes it easier for remote attackers to observe or modify a gem during installation via a man-in-the-middle attack...

5.8CVSS6.4AI score0.00638EPSS
Exploits0References3
Debian CVE
Debian CVE
added 2019/10/09 2:54 p.m.11 views

CVE-2019-17383

The netaddr gem before 2.0.4 for Ruby has misconfigured file permissions, such that a gem install may result in 0777 permissions in the target filesystem...

9.8CVSS9.5AI score0.00265EPSS
Exploits0
RubySec
RubySec
added 2018/10/17 12:0 a.m.18 views

Incorrect equality check in OpenSSL::X509::Name

The equality check of OpenSSL::X509::Name is not correctly in openssl extension library bundled with Ruby. An instance of OpenSSL::X509::Name contains entities such as CN, C and so on. Some two instances of OpenSSL::X509::Name are equal only when all entities are exactly equal. However, there is ...

9.8CVSS3.1AI score0.0421EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder