Lucene search
+L

4 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 6:39 a.m.•18 views

CVE-2019-17268

The omniauth-weibo-oauth2 gem 0.4.6 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party. Versions through 0.4.5, and 0.5.1 and later, are unaffected...

9.8CVSS6.9AI score0.02437EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/02/11 12:00 a.m.•15 views

omniauth-weibo-oauth2 gem for Ruby Code Execution Vulnerability

The omniauth-weibo-oauth2 gem for Ruby is a Ruby-based authentication package. A security vulnerability exists in the omniauth-weibo-oauth2 gem for Ruby version 0.4.6 deployed on RubyGems.org. An attacker can exploit the vulnerability to execute code...

9.8CVSS7.3AI score0.02437EPSS
SaveExploits0References1
Prion
Prion
•added 2020/02/07 2:15 p.m.•19 views

Buffer overflow

The omniauth-weibo-oauth2 gem 0.4.6 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party. Versions through 0.4.5, and 0.5.1 and later, are unaffected...

7.5CVSS9.5AI score0.02437EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/02/07 12:00 a.m.•4 views

CVE-2019-17268: Improper Control of Generation of Code

The omniauth-weibo-oauth2 gem 0.4.6 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party. Versions through 0.4.5, and 0.5.1 and later, are unaffected...

9.8CVSS8.2AI score0.02437EPSS
SaveExploits0References2
Rows per page
Query Builder