Lucene search
+L

809 matches found

Positive Technologies
Positive Technologies
added 2025/07/09 12:0 a.m.10 views

PT-2025-28807 · Mruby +1 · Mruby +1

Name of the Vulnerable Software and Affected Versions: mruby versions up to 3.4.0-rc2 Description: A heap-based buffer overflow issue was found in the function scope new of the file mrbgems/mruby-compiler/core/codegen.c of the component nregs Handler. This issue can be exploited locally...

4.8CVSS7.7AI score0.00219EPSS
SaveExploits1References19
CNNVD
CNNVD
added 2025/07/08 12:0 a.m.8 views

mruby 安全漏洞

mruby is a lightweight implementation of the Ruby language. A security vulnerability exists in mruby 3.4.0-rc2 and earlier versions, which stems from a heap buffer overflow in the scopenew function...

5.5CVSS4.6AI score0.00219EPSS
SaveExploits1References1
RubySec
RubySec
added 2025/07/08 12:0 a.m.7 views

Heap-based buffer overflow vulnerability in mruby 3.4.0

A vulnerability, which was classified as problematic, was found in mruby up to 3.4.0. Affected is the function scopenew of the file mrbgems/mruby-compiler/core/codegen.c of the component nregs Handler. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. T...

5.5CVSS4.5AI score0.00219EPSS
SaveExploits1References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/22 11:30 p.m.5 views

CVE-2022-1286

heap-buffer-overflow in mrbvmexec in mruby/mruby in GitHub repository mruby/mruby prior to 3.2. Possible arbitrary code execution if being exploited...

9.8CVSS7.6AI score0.01109EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 11:28 p.m.4 views

CVE-2022-0890

NULL Pointer Dereference in GitHub repository mruby/mruby prior to 3.2...

7.1CVSS6.7AI score0.00827EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:18 p.m.10 views

CVE-2022-1934

Use After Free in GitHub repository mruby/mruby prior to 3.2...

7.8CVSS6.8AI score0.00398EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:2 p.m.8 views

CVE-2022-0631

Heap-based Buffer Overflow in Homebrew mruby prior to 3.2...

9.8CVSS6.7AI score0.00922EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 6:54 p.m.6 views

CVE-2021-46020

An untrusted pointer dereference in mrbvmexec of mruby v3.0.0 can lead to a segmentation fault or application crash...

7.5CVSS6.7AI score0.01037EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/05/22 4:46 p.m.8 views

CVE-2020-6838

In mruby 2.1.0, there is a use-after-free in hashvaluesat in mrbgems/mruby-hash-ext/src/hash-ext.c...

9.8CVSS6.8AI score0.01489EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:46 p.m.15 views

CVE-2020-6839

In mruby 2.1.0, there is a stack-based buffer overflow in mrbstrlentodbl in string.c...

9.8CVSS7.3AI score0.01355EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 3:41 p.m.8 views

CVE-2020-6840

In mruby 2.1.0, there is a use-after-free in hashslice in mrbgems/mruby-hash-ext/src/hash-ext.c...

9.8CVSS6.8AI score0.01505EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 3:34 p.m.7 views

CVE-2020-36401

mruby 2.1.2 has a double free in mrbdefaultallocf called from mrbfree and objfree...

7.8CVSS6.9AI score0.00991EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/05/22 7:40 a.m.8 views

CVE-2018-10199

In versions of mruby up to and including 1.4.0, a use-after-free vulnerability exists in src/io.c::Fileinitilializecopy. An attacker that can cause Ruby code to be run can possibly use this to execute arbitrary code...

9.8CVSS7.7AI score0.02344EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2022-1201

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NULL Pointer Dereference in mrbvmexec with super in GitHub repository mruby/mruby prior to 3.2. This vulnerability is capable of making the mruby interpreter...

7.1CVSS6.8AI score0.00363EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2022-0240

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mruby is vulnerable to NULL Pointer Dereference CVE-2022-0240 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL...

7.5CVSS6.7AI score0.00963EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2022-0481

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NULL Pointer Dereference in Homebrew mruby prior to 3.2. CVE-2022-0481 Note that Nessus relies on the presence of the package as reported by the vendor...

7.8CVSS6.5AI score0.00918EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2021-4110

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mruby is vulnerable to NULL Pointer Dereference CVE-2021-4110 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL...

9.1CVSS7.2AI score0.01621EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
added 2025/02/06 4:25 a.m.10 views

CVE-2021-4110

mruby is vulnerable to NULL Pointer Dereference...

9.1CVSS6.6AI score0.01621EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/02/05 11:8 p.m.11 views

CVE-2022-1071

User after free in mrbvmexec in GitHub repository mruby/mruby prior to 3.2...

8.2CVSS6.8AI score0.00906EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/02/05 10:59 p.m.8 views

CVE-2022-1106

use after free in mrbvmexec in GitHub repository mruby/mruby prior to 3.2...

9.1CVSS6.8AI score0.01031EPSS
SaveExploits1References1
Rows per page
Query Builder