19504 matches found
rexml: DoS vulnerability in REXML
A vulnerability was found in REXML RubyGems. This package is vulnerable to denial of service DoS when parsing a deep XML structure with the same local name attribute. This vulnerability only affects tree parser API like REXML::Document.new, other parser APIs such as stream parser API and SAX2...
rexml: rubygem-rexml: DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>
A vulnerability was found in REXML, an XML toolkit used for Ruby. When parsing an untrusted XML with many specific characters, the REXML gem may take a long time, leading to a denial of service condition. Some of these special characters include the whitespace character, '', and ''...
Decidim cross-site scripting vulnerabilities
Decidim is an open source participatory democracy framework from Decidim, written in Ruby on Rails. A cross-site scripting vulnerability exists in Decidim version 0.27.6 and earlier versions, which stems from a possible cross-site scripting attack on QuillJS, the WYSIWYG editor used...
RHSA-2013:0698 Red Hat Security Advisory: rubygem-actionpack and ruby193-rubygem-actionpack security update
Bulletin has no description...
RHSA-2013:0701 Red Hat Security Advisory: ruby193-ruby, rubygem-json and rubygem-rdoc security update
Bulletin has no description...
RHSA-2013:0612 Red Hat Security Advisory: ruby security update
Bulletin has no description...
RHSA-2013:0611 Red Hat Security Advisory: ruby security update
Bulletin has no description...
RHSA-2013:0153 Red Hat Security Advisory: Ruby on Rails security update
Bulletin has no description...
RHSA-2013:0129 Red Hat Security Advisory: ruby security and bug fix update
Bulletin has no description...
RHSA-2012:0070 Red Hat Security Advisory: ruby security update
Bulletin has no description...
RHSA-2012:0069 Red Hat Security Advisory: ruby security update
Bulletin has no description...
RHSA-2011:1581 Red Hat Security Advisory: ruby security, bug fix, and enhancement update
Bulletin has no description...
RHSA-2011:0910 Red Hat Security Advisory: ruby security update
Bulletin has no description...
RHSA-2011:0909 Red Hat Security Advisory: ruby security update
Bulletin has no description...
RHSA-2011:0908 Red Hat Security Advisory: ruby security update
Bulletin has no description...
RHSA-2009:1140 Red Hat Security Advisory: ruby security update
Bulletin has no description...
RHSA-2008:0981 Red Hat Security Advisory: ruby security update
Bulletin has no description...
RHSA-2008:0897 Red Hat Security Advisory: ruby security update
Bulletin has no description...