Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 6:39 a.m.•19 views

CVE-2019-17268

The omniauth-weibo-oauth2 gem 0.4.6 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party. Versions through 0.4.5, and 0.5.1 and later, are unaffected...

9.8CVSS6.9AI score0.02437EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/02/11 12:00 a.m.•15 views

omniauth-weibo-oauth2 gem for Ruby Code Execution Vulnerability

The omniauth-weibo-oauth2 gem for Ruby is a Ruby-based authentication package. A security vulnerability exists in the omniauth-weibo-oauth2 gem for Ruby version 0.4.6 deployed on RubyGems.org. An attacker can exploit the vulnerability to execute code...

9.8CVSS7.3AI score0.02437EPSS
SaveExploits0References1
Prion
Prion
•added 2020/02/07 2:15 p.m.•20 views

Buffer overflow

The omniauth-weibo-oauth2 gem 0.4.6 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party. Versions through 0.4.5, and 0.5.1 and later, are unaffected...

7.5CVSS9.5AI score0.02437EPSS
SaveExploits0References2Affected Software1
Mend
Mend
•added 2020/02/07 1:51 p.m.•0 views

CVE-2019-17268

The omniauth-weibo-oauth2 gem 0.4.6 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party. Versions through 0.4.5, and 0.5.1 and later, are unaffected...

9.8CVSS0.02437EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2020/02/07 12:00 a.m.•3 views

PT-2020-9886

Name of the Vulnerable Software and Affected Versions omniauth-weibo-oauth2 gem version 0.4.6 Description The issue concerns a code-execution backdoor inserted by a third party into the omniauth-weibo-oauth2 gem for Ruby. Recommendations For version 0.4.6, update to a version outside the affected...

9.8CVSS0.02437EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/02/07 12:00 a.m.•5 views

CVE-2019-17268: Improper Control of Generation of Code

The omniauth-weibo-oauth2 gem 0.4.6 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party. Versions through 0.4.5, and 0.5.1 and later, are unaffected...

9.8CVSS8.2AI score0.02437EPSS
SaveExploits0References2
Rows per page
Query Builder