Lucene search
K

17 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2017-0282

Malware in sbrugna...

7.5CVSS6.1AI score0.01265EPSS
Exploits21References12
OSV
OSV
added 2025/05/17 12:0 a.m.1 views

OPENSUSE-SU-2025:15122-1 ruby3.4-rubygem-multi_xml-0.6.0-1.29 on GA media

These are all security issues fixed in the ruby3.4-rubygem-multixml-0.6.0-1.29 package on the GA media of openSUSE Tumbleweed...

7.5CVSS6.9AI score0.01265EPSS
Exploits21References2
OSV
OSV
added 2024/07/12 12:0 a.m.12 views

OPENSUSE-SU-2024:14173-1 ruby3.3-rubygem-multi_xml-0.6.0-1.27 on GA media

These are all security issues fixed in the ruby3.3-rubygem-multixml-0.6.0-1.27 package on the GA media of openSUSE Tumbleweed...

7.5CVSS6.2AI score0.01265EPSS
Exploits21References1
OSV
OSV
added 2024/06/15 12:0 a.m.11 views

OPENSUSE-SU-2024:13164-1 ruby3.2-rubygem-multi_xml-0.6.0-1.23 on GA media

These are all security issues fixed in the ruby3.2-rubygem-multixml-0.6.0-1.23 package on the GA media of openSUSE Tumbleweed...

7.5CVSS6.2AI score0.01265EPSS
Exploits21References1
SUSE CVE
SUSE CVE
added 2023/02/15 5:42 a.m.3 views

SUSE CVE-2013-0175

multixml gem 0.5.2 for Ruby, as used in Grape before 0.2.6 and possibly other products, does not properly restrict casts of string values, which allows remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service memory and CPU consumption involvin...

7.5CVSS8.5AI score0.01265EPSS
Exploits21References4
Github Security Blog
Github Security Blog
added 2017/10/24 6:33 p.m.53 views

Improper Input Validation in multi_xml

multixml gem 0.5.2 for Ruby, as used in Grape before 0.2.6 and possibly other products, does not properly restrict casts of string values, which allows remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service memory and CPU consumption involvin...

7.5CVSS5.8AI score0.01265EPSS
Exploits21References7Affected Software1
NVD
NVD
added 2013/04/25 11:55 p.m.27 views

CVE-2013-0175

multixml gem 0.5.2 for Ruby, as used in Grape before 0.2.6 and possibly other products, does not properly restrict casts of string values, which allows remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service memory and CPU consumption involvin...

7.5CVSS7.2AI score0.01265EPSS
Exploits21References5
ATTACKERKB
ATTACKERKB
added 2013/04/25 11:55 p.m.2 views

CVE-2013-0175

multixml gem 0.5.2 for Ruby, as used in Grape before 0.2.6 and possibly other products, does not properly restrict casts of string values, which allows remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service memory and CPU consumption involvin...

7.5CVSS6.1AI score0.91907EPSS
Exploits21References7
Prion
Prion
added 2013/04/25 11:55 p.m.26 views

Type confusion

multixml gem 0.5.2 for Ruby, as used in Grape before 0.2.6 and possibly other products, does not properly restrict casts of string values, which allows remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service memory and CPU consumption involvin...

7.5CVSS8AI score0.91907EPSS
Exploits21References5Affected Software2
CVE
CVE
added 2013/04/25 11:0 p.m.98 views

CVE-2013-0175

CVE-2013-0175 affects the multi_xml gem (v0.5.2) used by Grape prior to v0.2.6. The vulnerability stems from improper restriction of string casts, allowing remote object-injection and potential code execution, or DoS via nested XML entity refs, leveraging YAML type conversion or Symbol type conve...

7.5CVSS9.7AI score0.01265EPSS
Exploits21References5Affected Software1
Cvelist
Cvelist
added 2013/04/25 11:0 p.m.35 views

CVE-2013-0175

multixml gem 0.5.2 for Ruby, as used in Grape before 0.2.6 and possibly other products, does not properly restrict casts of string values, which allows remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service memory and CPU consumption involvin...

7.2AI score0.01265EPSS
Exploits21References5
OpenVAS
OpenVAS
added 2013/01/28 12:0 a.m.29 views

Fedora Update for rubygem-multi_xml FEDORA-2013-0839

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

7.5CVSS6.6AI score0.01265EPSS
Exploits21References2
OpenVAS
OpenVAS
added 2013/01/28 12:0 a.m.25 views

Fedora Update for rubygem-multi_xml FEDORA-2013-0808

Check for the Version of rubygem-multixml OpenVAS Vulnerability Test Fedora Update for rubygem-multixml FEDORA-2013-0808 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modi...

7.5CVSS0.01265EPSS
Exploits21References2
Tenable Nessus
Tenable Nessus
added 2013/01/28 12:0 a.m.28 views

Fedora 17 : rubygem-multi_xml-0.4.1-4.fc17 (2013-0839)

Fix for CVE-2013-0175. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

7.5CVSS5.4AI score0.01265EPSS
Exploits21References3
OpenVAS
OpenVAS
added 2013/01/28 12:0 a.m.25 views

Fedora Update for rubygem-multi_xml FEDORA-2013-0839

Check for the Version of rubygem-multixml OpenVAS Vulnerability Test Fedora Update for rubygem-multixml FEDORA-2013-0839 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modi...

7.5CVSS0.01265EPSS
Exploits21References2
OpenVAS
OpenVAS
added 2013/01/28 12:0 a.m.23 views

Fedora Update for rubygem-multi_xml FEDORA-2013-0808

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

7.5CVSS6.6AI score0.01265EPSS
Exploits21References2
Fedora
Fedora
added 2013/01/25 9:43 p.m.25 views

[SECURITY] Fedora 17 Update: rubygem-multi_xml-0.4.1-4.fc17

A gem to provide swappable XML backends utilizing LibXML, Nokogiri, Ox, or REXML...

7.5CVSS2.8AI score0.01265EPSS
Exploits21
Rows per page
Query Builder