Lucene search
K

20 matches found

Microsoft CVE
Microsoft CVE
added 2025/10/12 1:1 a.m.3 views

There is an OS command injection vulnerability in Ruby Rake < 12.3.3 in Rake::FileList when supplying a filename that begins with the pipe character `|`.

...

6.9CVSS7AI score0.00547EPSS
Exploits1
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2020-0305

Malware in sbrugna...

6.9CVSS6.6AI score0.00547EPSS
Exploits1References20
SUSE CVE
SUSE CVE
added 2023/02/15 4:1 a.m.1 views

SUSE CVE-2020-8130

There is an OS command injection vulnerability in Ruby Rake 12.3.3 in Rake::FileList when supplying a filename that begins with the pipe character |...

5CVSS7.7AI score0.00547EPSS
Exploits1References7
Tenable Nessus
Tenable Nessus
added 2022/09/09 12:0 a.m.21 views

SUSE SLES12 Security Update : rubygem-rake (SUSE-SU-2022:3212-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:3212-1 advisory. - There is an OS command injection vulnerability in Ruby Rake 12.3.3 in Rake::FileList when supplying a filename that begins with the pipe...

6.9CVSS6.9AI score0.00547EPSS
Exploits1References4
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.12 views

Mageia: Security Advisory (MGASA-2020-0121)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.9CVSS6.7AI score0.00547EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2021/11/16 3:43 p.m.2 views

rake: OS Command Injection via egrep in Rake::FileList

There is an OS command injection vulnerability in Ruby Rake 12.3.3 in Rake::FileList when supplying a filename that begins with the pipe character |...

6.9CVSS7.2AI score0.00547EPSS
Exploits1References5
Tenable Nessus
Tenable Nessus
added 2020/07/02 12:0 a.m.24 views

Amazon Linux AMI : rubygem-rake (ALAS-2020-1384)

It is, therefore, affected by a vulnerability as referenced in the ALAS-2020-1384 advisory. There is an OS command injection vulnerability in Ruby Rake 12.3.3 in Rake::FileList when supplying a filename that begins with the pipe character |. CVE-2020-8130 Tenable has extracted the preceding...

6.9CVSS6.8AI score0.00547EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2020/07/02 12:0 a.m.26 views

Amazon Linux AMI : rubygem24-rake (ALAS-2020-1385)

The version of rubygem24-rake installed on the remote host is prior to 12.0.0-1.49. It is, therefore, affected by a vulnerability as referenced in the ALAS-2020-1385 advisory. There is an OS command injection vulnerability in Ruby Rake 12.3.3 in Rake::FileList when supplying a filename that begin...

6.9CVSS6.9AI score0.00547EPSS
Exploits1References3
Amazon
Amazon
added 2020/06/26 12:0 a.m.26 views

Medium: rubygem24-rake

Issue Overview: There is an OS command injection vulnerability in Ruby Rake 12.3.3 in Rake::FileList when supplying a filename that begins with the pipe character |. CVE-2020-8130 Affected Packages: rubygem24-rake Issue Correction: Run yum update rubygem24-rake or yum update --advisory...

6.9CVSS7.2AI score0.00547EPSS
Exploits1
OSV
OSV
added 2020/03/06 4:13 p.m.7 views

MGASA-2020-0121 Updated ruby-rake packages fix security vulnerability

Updated ruby-rake package fixes security vulnerability: There is an OS command injection vulnerability in Rake 12.3.3 in Rake::FileList when supplying a filename that begins with the pipe character CVE-2020-8130...

6.9CVSS6.8AI score0.00547EPSS
Exploits1References3
Mageia
Mageia
added 2020/03/06 4:13 p.m.30 views

Updated ruby-rake packages fix security vulnerability

Updated ruby-rake package fixes security vulnerability: There is an OS command injection vulnerability in Rake 12.3.3 in Rake::FileList when supplying a filename that begins with the pipe character CVE-2020-8130...

6.9CVSS2.8AI score0.00547EPSS
Exploits1References2
OSV
OSV
added 2020/02/28 4:54 p.m.22 views

GHSA-JPPV-GW3R-W3Q8 OS Command Injection in Rake

There is an OS command injection vulnerability in Ruby Rake before 12.3.3 in Rake::FileList when supplying a filename that begins with the pipe character |...

6.4CVSS6.8AI score0.00547EPSS
Exploits1References11
CNVD
CNVD
added 2020/02/25 12:0 a.m.1 views

Ruby Rake OS Command Injection Vulnerability

Rake is a software task management and formation automation tool. An operating system command injection vulnerability exists in Ruby Rake versions prior to Rake 12.3.3:: FileList. The vulnerability arises from a network system or product not properly filtering special characters, commands, etc...

6.9CVSS7AI score0.00547EPSS
Exploits1References1
OSV
OSV
added 2020/02/24 3:15 p.m.1 views

DEBIAN-CVE-2020-8130

There is an OS command injection vulnerability in Ruby Rake 12.3.3 in Rake::FileList when supplying a filename that begins with the pipe character |...

6.4CVSS6.7AI score0.00547EPSS
Exploits1References1
NVD
NVD
added 2020/02/24 3:15 p.m.13 views

CVE-2020-8130

There is an OS command injection vulnerability in Ruby Rake 12.3.3 in Rake::FileList when supplying a filename that begins with the pipe character |...

6.9CVSS6.7AI score0.00547EPSS
Exploits1References6
OSV
OSV
added 2020/02/24 3:15 p.m.20 views

CVE-2020-8130

There is an OS command injection vulnerability in Ruby Rake 12.3.3 in Rake::FileList when supplying a filename that begins with the pipe character |...

6.4CVSS6.5AI score
Exploits0References6
OSV
OSV
added 2020/02/24 3:15 p.m.0 views

UBUNTU-CVE-2020-8130

There is an OS command injection vulnerability in Ruby Rake 12.3.3 in Rake::FileList when supplying a filename that begins with the pipe character |...

6.4CVSS6.7AI score0.00547EPSS
Exploits1References4
Prion
Prion
added 2020/02/24 3:15 p.m.10 views

Command injection

There is an OS command injection vulnerability in Ruby Rake 12.3.3 in Rake::FileList when supplying a filename that begins with the pipe character |...

6.9CVSS6.6AI score0.00547EPSS
Exploits1References6Affected Software5
Cvelist
Cvelist
added 2020/02/24 2:41 p.m.13 views

CVE-2020-8130

There is an OS command injection vulnerability in Ruby Rake 12.3.3 in Rake::FileList when supplying a filename that begins with the pipe character |...

6.7AI score0.00547EPSS
Exploits1References6
CVE
CVE
added 2020/02/24 2:41 p.m.379 views

CVE-2020-8130

CVE-2020-8130 is an OS command injection in Ruby Rake prior to 12.3.3, affecting the Rake::FileList handling of filenames starting with the pipe character |. Root cause: unsafe processing of external input in FileList leads to command execution. Impact: potential arbitrary OS commands if such fil...

6.9CVSS6.6AI score0.00547EPSS
Exploits1References6Affected Software1
Rows per page
Query Builder