Lucene search
K

4 matches found

CNVD
CNVD
added 2015/01/06 12:0 a.m.1 views

raven-ruby 'okjson_spec.rb' denial of service vulnerability

Sentry is a Python real-time logging platform built on Django. raven-ruby is a Ruby client for Sentry. A denial of service vulnerability exists in raven-ruby 'okjsonspec.rb', which can be exploited by an attacker to crash an affected application and deny service to legitimate users...

5CVSS6.8AI score0.00734EPSS
Exploits0References1
RubySec
RubySec
added 2014/12/08 12:0 a.m.18 views

sentry-raven Gem for Ruby contains a flaw that can result in a denial of service

Sentry raven-ruby contains a flaw in the lib/raven/okjson.rb script that is triggered when large numeric values are stored as an exponent or in scientific notation. With a specially crafted request, an attacker can cause the software to consume excessive resources resulting in a denial of service...

5CVSS6.5AI score0.00734EPSS
Exploits0References1Affected Software1
securityvulns
securityvulns
added 2013/02/04 12:0 a.m.95 views

[SECURITY] [DSA 2613-1] rails security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2613-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst January 29, 2013 http://www.debian.org/security/faq -...

7.5CVSS1.1AI score0.91761EPSS
Exploits7
OSV
OSV
added 2013/01/29 12:0 a.m.18 views

DSA-2613-1 rails - insufficient input validation

Bulletin has no description...

7.5CVSS6.3AI score0.91761EPSS
Exploits7
Rows per page
Query Builder