17319 matches found
Exploit for Command Injection in Rubyonrails Rails
CVE-2019-5420 A vulnerability can allow an attacker to guess t...
Exploit for Command Injection in Rubyonrails Rails
CVE-2019-5420 A vulnerability can allow an attacker to guess t...
MGASA-2021-0417 Updated ruby-addressable packages fix security vulnerability
A security flaw was found on rubygem-addressable that a crafted template may cause a Denial of Service CVE-2021-32740...
Updated ruby-addressable packages fix security vulnerability
A security flaw was found on rubygem-addressable that a crafted template may cause a Denial of Service CVE-2021-32740...
GHSA-GGXM-PGC9-G7FP Arbitrary Code Execution in Rdoc
In RDoc 3.11 through 6.x before 6.3.1, as distributed with Ruby through 3.0.1, it is possible to execute arbitrary code via | and tags in a filename...
Arbitrary Code Execution in Rdoc
In RDoc 3.11 through 6.x before 6.3.1, as distributed with Ruby through 3.0.1, it is possible to execute arbitrary code via | and tags in a filename...
Ruby: XSS exploit of RDoc documentation generated by rdoc
Vulnerability description not provided...
The vulnerability in the implementation of the Net::IMAP class in the Ruby interpreter allows a attacker to execute a “man-in-the-middle” attack.
The vulnerability in the implementation of the Net::IMAP class in the Ruby interpreter is related to errors in the process of verifying the authenticity of certificates when processing the STARTTLS command. Exploiting this vulnerability could allow a remote attacker to execute a “man-in-the-middl...
Vulnerability fixed in Ruby on Rails
A vulnerability has been fixed in Ruby on Rails. The vulnerability allows a malicious person to use an Open Redirect attack to send the visitor with a custom link to a malicious website. send. Ruby on Rails has released updates to fix the vulnerability. fix. For more information, see:...
GitLab has an unspecified vulnerability (CNVD-2021-66915)
GitLab is a self-hosted, Git version control system project repository application developed in Ruby on Rails by GitLab, Inc. The application can be used to access a project's file content, commit history, bug list, etc. A security vulnerability exists in Gitlab, which stems from the product's la...
GitLab has an unspecified vulnerability (CNVD-2021-66916)
GitLab is a self-hosted, Git version control system project repository application developed in Ruby on Rails by GitLab, Inc. The application can be used to access a project's file content, commit history, bug list, etc. A security vulnerability exists in GitLab versions prior to 14.0.2, 13.12.6,...
Important Photon OS Security Update - PHSA-2021-0084
Updates of 'ruby' packages of Photon OS have been released...
Important Photon OS Security Update - PHSA-2021-4.0-0084
Updates of 'ruby' packages of Photon OS have been released...
Ruby on Rails 输入验证错误漏洞
Ruby on Rails is a set of open source web application frameworks based on the Ruby language by the American Rails team. Ruby on Rails suffers from an Input Validation Error vulnerability that stems from a flaw found in rubygem-actionpack, which, via a specially crafted X-Forwarded-Host header, in...
[SECURITY] Fedora 33 Update: hivex-1.3.21-1.fc33
Hive files are the undocumented binary files that Windows uses to store the Windows Registry on disk. Hivex is a library that can read and write to these files. 'hivexsh' is a shell you can use to interactively navigate a hive binary file. 'hivexregedit' in perl-hivex lets you export and merge to...
[SECURITY] Fedora 34 Update: hivex-1.3.21-1.fc34
Hive files are the undocumented binary files that Windows uses to store the Windows Registry on disk. Hivex is a library that can read and write to these files. 'hivexsh' is a shell you can use to interactively navigate a hive binary file. 'hivexregedit' in perl-hivex lets you export and merge to...
Fedora: Security Advisory for hivex (FEDORA-2021-372d83d54e)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory for hivex (FEDORA-2021-775b170f95)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...