CVE-2019-19464

The CBC Gem application before 9.24.1 for Android and before 9.26.0 for iOS has Unencrypted Analytics...

CVE-2019-19464

The CBC Gem application before 9.24.1 for Android and before 9.26.0 for iOS has Unencrypted Analytics...

Code injection

The CBC Gem application before 9.24.1 for Android and before 9.26.0 for iOS has Unencrypted Analytics...

CVE-2019-19464

The CBC Gem application before 9.24.1 for Android and before 9.26.0 for iOS has Unencrypted Analytics...

CVE-2019-19464

The CBC Gem mobile app is affected: Android versions prior to 9.24.1 and iOS versions prior to 9.26.0 expose Analytics data in unencrypted form. This enables potential leakage of user habits and sensitive information via analytics collection. Connected sources (CNVD-2020-00509, RH: CVE-2019-19464...

CVE-2014-0084

Ruby gem openshift-origin-node before 2014-02-14 does not contain a cronjob timeout which could result in a denial of service in cron.daily and cron.weekly...

CVE-2014-0083

The Ruby net-ldap gem before 0.11 uses a weak salt when generating SSHA passwords...

CVE-2014-0084

CVE-2014-0084 affects the Ruby gem openshift-origin-node prior to 2014-02-14, which does not enforce a cronjob timeout, potentially enabling a denial-of-service in cron.daily and cron.weekly. Public records in OSV/RH advisories reference the same issue (GHSA-756M-3QF2-HP58) and describe an improp...

CVE-2014-0083

Summary: CVE-2014-0083 concerns the Ruby net-ldap gem prior to 0.11, which uses a weak salt when generating SSHA passwords. Affected component: Ruby net-ldap (library for LDAP in Ruby). Root cause: weak or insufficiently random SSHA salt used during password hashing. Impact (as stated): password ...

Linux kernel resource management error vulnerability (CNVD-2019-41705)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A resource management error vulnerability exists in the 'v3dsubmitclioctl' function in the drivers/gpu/drm/v3d/v3dgem.c file in versions of Linux kernel prior to 5.3.1...

CVE-2019-18978

CVE-2019-18978 (rack-cors) affects the Rack CORS Middleware for Ruby, prior to v1.0.4. The issue is improper canonicalization of pathnames, allowing directory traversal ("../") to access private resources. In public disclosures, Debian/Ubuntu advisories and OSS security plugins reference this vul...

GHSA-CFF7-6H4Q-Q5PJ JSON-jwt Gem lacked element count during splitting of JWE string

The json-jwt gem before 1.11.0 for Ruby lacks an element count during the splitting of a JWE string...

json-jwt improper input validation due to lack of element count when splitting string

The json-jwt gem before 1.11.0 for Ruby lacks an element count during the splitting of a JWE string...

CVE-2019-18848

The json-jwt gem before 1.11.0 for Ruby lacks an element count during the splitting of a JWE string...

CVE-2019-18848

The json-jwt gem before 1.11.0 for Ruby lacks an element count during the splitting of a JWE string...

CVE-2019-18848

The json-jwt gem before 1.11.0 for Ruby lacks an element count during the splitting of a JWE string...

Design/Logic Flaw

The json-jwt gem before 1.11.0 for Ruby lacks an element count during the splitting of a JWE string...

UBUNTU-CVE-2019-18848

The json-jwt gem before 1.11.0 for Ruby lacks an element count during the splitting of a JWE string...

CVE-2019-18848

The json-jwt gem before 1.11.0 for Ruby lacks an element count during the splitting of a JWE string...

CVE-2019-18848

CVE-2019-18848 affects the rubygem-json-jwt library for Ruby, where versions prior to 1.11.0 fail to enforce an element count when splitting a JWE string. This is documented across multiple advisories (Debian DLA-2390-1, openSUSE/SUSE advisories) indicating the issue and references to upgrading t...