4008 matches found
Best Way GEM Engine - Multiple Vulnerabilities
Best Way GEM Engine - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/40145/info GEM Engine is prone to multiple vulnerabilities including multiple denial-of-service issues and a buffer-overflow issue. An attacker can exploit these issues to cause applications using the engine ...
Fedora Core 11 FEDORA-2009-8684 (kernel)
The remote host is missing an update to kernel announced via advisory FEDORA-2009-8684. OpenVAS Vulnerability Test $Id: fcore20098684.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-8684 kernel Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...
Ruby on Rails HTTP Digest Authentication Bypass
The remote web server appears to use a version of Ruby on Rails that contains a vulnerability in its HTTP Digest authentication support. Specifically, the 'authenticateorrequestwithhttpdigest' function in 'lib/actioncontroller/httpauthentication.rb' of the 'actionpack' gem does not treat a 'nil'...
Yoxel <= 1.23beta (itpm_estimate.php a) Remote Code Execution Vuln
No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl Yoxel = 1.23beta PHP code Injection Vulnerability Script: "Yoxel is a hidden gem. This Open Sour...
CVE-2007-0469
The extractfiles function in installer.rb in RubyGems before 0.9.1 does not check whether files exist before overwriting them, which allows user-assisted remote attackers to overwrite arbitrary files, cause a denial of service, or execute arbitrary code via crafted GEM packages...
CVE-2007-0469
The extractfiles function in installer.rb in RubyGems before 0.9.1 does not check whether files exist before overwriting them, which allows user-assisted remote attackers to overwrite arbitrary files, cause a denial of service, or execute arbitrary code via crafted GEM packages...
Code injection
The extractfiles function in installer.rb in RubyGems before 0.9.1 does not check whether files exist before overwriting them, which allows user-assisted remote attackers to overwrite arbitrary files, cause a denial of service, or execute arbitrary code via crafted GEM packages...
CVE-2007-0469: Undefined Security Weakness
The extractfiles function in installer.rb in RubyGems before 0.9.1 does not check whether files exist before overwriting them, which allows user-assisted remote attackers to overwrite arbitrary files, cause a denial of service, or execute arbitrary code via crafted GEM packages...