Lucene search
K

65 matches found

Tenable Nessus
Tenable Nessus
added 2020/10/21 12:0 a.m.103 views

EulerOS Virtualization 3.0.2.2 : ruby (EulerOS-SA-2020-2219)

According to the versions of the ruby packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 mishandles path checking within File.fnmatch...

8.1CVSS7AI score0.01157EPSS
Exploits3References5
Veracode
Veracode
added 2020/10/04 4:48 a.m.156 views

Directory Traversal

ruby is vulnerable to directory traversal. It mishandles path checking within File.fnmatch functions...

6.5CVSS3.5AI score0.00321EPSS
Exploits0References9Affected Software3
Microsoft CVE
Microsoft CVE
added 2020/09/25 7:0 a.m.1 views

Ruby through 2.4.7 2.5.x through 2.5.6 and 2.6.x through 2.6.4 mishandles path checking within File.fnmatch functions.

...

6.5CVSS7AI score0.00321EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2020/05/01 12:0 a.m.59 views

EulerOS Virtualization for ARM 64 3.0.2.0 : ruby (EulerOS-SA-2020-1529)

According to the versions of the ruby packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - An out-of-bounds memory write issue was found in the Linux Kernel, version 3.13 through 5.4, in the way the Linux kernel...

8.1CVSS7.4AI score0.08946EPSS
Exploits2References6
OpenVAS
OpenVAS
added 2020/04/30 12:0 a.m.101 views

Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2020-1529)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.1CVSS7.3AI score0.08946EPSS
Exploits2References2
CNVD
CNVD
added 2020/03/31 12:0 a.m.1 views

Laminar Research X-Plane OS Command Injection Vulnerability

Laminar Research X-Plane is a flight simulator from the American company Laminar Research. An operating system command injection vulnerability exists in Laminar Research X-Plane version 11.41 and prior versions, which stems from the program failing to perform proper path checking. The vulnerabili...

10CVSS8AI score0.00453EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2020/03/23 12:0 a.m.111 views

EulerOS 2.0 SP5 : ruby (EulerOS-SA-2020-1324)

According to the versions of the ruby packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 mishandles path checking within File.fnmatch functions.CVE-2019-15845 - Ruby...

8.1CVSS7.5AI score0.08946EPSS
Exploits2References4
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.157 views

Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2020-1051)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.1CVSS7.3AI score0.01157EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.48 views

Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2020-1031)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.1CVSS7.3AI score0.01157EPSS
Exploits1References2
NVD
NVD
added 2019/11/26 5:15 p.m.20 views

CVE-2019-15845

Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 mishandles path checking within File.fnmatch functions...

6.5CVSS7.1AI score0.00321EPSS
Exploits0References9
OSV
OSV
added 2019/11/26 5:15 p.m.1 views

ALPINE-CVE-2019-15845

Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 mishandles path checking within File.fnmatch functions...

6.5CVSS7AI score0.00321EPSS
Exploits0References1
OSV
OSV
added 2019/11/26 5:15 p.m.27 views

CVE-2019-15845

Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 mishandles path checking within File.fnmatch functions...

6.5CVSS8.1AI score
Exploits0References9
Debian CVE
Debian CVE
added 2019/11/26 4:45 p.m.147 views

CVE-2019-15845

Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 mishandles path checking within File.fnmatch functions...

6.5CVSS6.4AI score0.00321EPSS
Exploits0
AlpineLinux
AlpineLinux
added 2019/11/26 4:45 p.m.35 views

CVE-2019-15845

Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 mishandles path checking within File.fnmatch functions...

6.5CVSS7.5AI score0.00321EPSS
Exploits0
Cvelist
Cvelist
added 2019/11/26 4:45 p.m.26 views

CVE-2019-15845

Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 mishandles path checking within File.fnmatch functions...

7.3AI score0.00321EPSS
Exploits0References9
OSV
OSV
added 2019/11/20 12:0 a.m.0 views

UBUNTU-CVE-2019-15845

Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 mishandles path checking within File.fnmatch functions...

6.5CVSS6.6AI score0.00321EPSS
Exploits0References5
UbuntuCve
UbuntuCve
added 2019/11/20 12:0 a.m.143 views

CVE-2019-15845

Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 mishandles path checking within File.fnmatch functions...

6.5CVSS6.6AI score0.00321EPSS
Exploits0References4
CNVD
CNVD
added 2019/10/15 12:0 a.m.2 views

Intel Active System Console Elevation of Privilege Vulnerability

Intel Active System Console is an active system console application from Intel Corporation USA. A security vulnerability exists in the installer in versions prior to Intel Active System Console 8.0 Build 24, which stems from the program not performing sufficient path checking. An attacker could...

7.8CVSS6.8AI score0.00058EPSS
Exploits0References1
OSV
OSV
added 2019/10/11 6:15 p.m.1 views

CVE-2019-11120

Insufficient path checking in the installer for IntelR Active System Console before version 8.0 Build 24 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS5.8AI score
Exploits0References1
Cvelist
Cvelist
added 2019/10/11 5:56 p.m.11 views

CVE-2019-11120

Insufficient path checking in the installer for IntelR Active System Console before version 8.0 Build 24 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8AI score0.00058EPSS
Exploits0References1
Rows per page
Query Builder