Lucene search
K

14179 matches found

OSV
OSV
added 2024/10/07 11:29 a.m.4 views

USN-7057-1 ruby-webrick vulnerability

It was discovered that WEBrick incorrectly handled having both a Content- Length header and a Transfer-Encoding header. A remote attacker could possibly use this issue to perform a HTTP request smuggling attack...

6.8AI score0.00395EPSS
Exploits0References2
GithubExploit
GithubExploit
added 2024/10/07 9:24 a.m.944 views

Exploit for Improper Verification of Cryptographic Signature in Onelogin Ruby-Saml

Ruby-SAML / GitLab Authentication Bypass CVE-2024-45409 expl...

10CVSS9.8AI score0.10684EPSS
Exploits2
OSV
OSV
added 2024/10/04 6:58 a.m.19 views

RHSA-2023:7025 Red Hat Security Advisory: ruby:2.5 security update

Bulletin has no description...

8.8CVSS7.5AI score0.0387EPSS
Exploits1References24
OSV
OSV
added 2024/10/04 6:58 a.m.15 views

RHSA-2022:6450 Red Hat Security Advisory: ruby:3.0 security, bug fix, and enhancement update

Bulletin has no description...

7.7CVSS7.9AI score0.0387EPSS
Exploits2References24
OSV
OSV
added 2024/10/04 6:58 a.m.21 views

RHSA-2022:6447 Red Hat Security Advisory: ruby:2.7 security, bug fix, and enhancement update

Bulletin has no description...

7.5CVSS7.9AI score0.0387EPSS
Exploits2References18
OSV
OSV
added 2024/10/04 6:58 a.m.36 views

RHSA-2022:5338 Red Hat Security Advisory: ruby:2.6 security, bug fix, and enhancement update

Bulletin has no description...

6.2CVSS7.8AI score0.0387EPSS
Exploits0References9
BDU FSTEC
BDU FSTEC
added 2024/10/04 12:0 a.m.3 views

The vulnerability of HTTP servers for Ruby/Rack applications developed with Puma allows attackers to access confidential information.

The vulnerability of HTTP servers for Ruby/Rack applications developed by Puma relates to the exposure of confidential information to unauthorized individuals. Exploiting this vulnerability could allow a malicious actor to gain access to confidential information...

8CVSS6.5AI score0.02092EPSS
Exploits0References7Affected Software5
BDU FSTEC
BDU FSTEC
added 2024/10/04 12:0 a.m.2 views

The vulnerability of HTTP servers for Ruby/Rack applications developed with Puma allows attackers to execute arbitrary code.

The vulnerability of HTTP servers for Ruby/Rack applications developed with Puma is related to improper handling of HTTP requests. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

5.4CVSS6.7AI score0.00659EPSS
Exploits0References9Affected Software5
BDU FSTEC
BDU FSTEC
added 2024/10/04 12:0 a.m.2 views

The vulnerability of HTTP servers for Ruby/Rack applications developed with Puma allows attackers to access confidential information.

The vulnerability of HTTP servers for Ruby/Rack applications developed with Puma involves the proxy server sending a response back to another unknown client. Exploiting this vulnerability allows an attacker operating remotely to gain access to confidential information...

3.7CVSS6.2AI score0.01119EPSS
Exploits0References5Affected Software4
BDU FSTEC
BDU FSTEC
added 2024/10/04 12:0 a.m.4 views

The vulnerability of HTTP servers for Ruby/Rack applications developed with Puma, which allows attackers to induce a service failure.

The vulnerability of HTTP servers for Ruby/Rack applications related to HTTP request processing flaws. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

9.4CVSS6.5AI score0.0214EPSS
Exploits0References10Affected Software5
OpenVAS
OpenVAS
added 2024/10/02 12:0 a.m.10 views

Ubuntu: Security Advisory (USN-7050-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6CVSS5.3AI score0.00818EPSS
Exploits0References2
OSV
OSV
added 2024/10/01 2:48 p.m.20 views

RHSA-2022:6856 Red Hat Security Advisory: rh-ruby27-ruby security, bug fix, and enhancement update

Bulletin has no description...

7.5CVSS7.9AI score0.04766EPSS
Exploits3References22
OSV
OSV
added 2024/10/01 2:47 p.m.19 views

RHSA-2022:6855 Red Hat Security Advisory: rh-ruby30-ruby security, bug fix, and enhancement update

Bulletin has no description...

7.7CVSS8AI score0.04766EPSS
Exploits3References28
OSV
OSV
added 2024/10/01 2:47 p.m.23 views

RHSA-2022:6585 Red Hat Security Advisory: ruby security, bug fix, and enhancement update

Bulletin has no description...

7.7CVSS8.3AI score0.0387EPSS
Exploits0References14
Rockylinux
Rockylinux
added 2024/09/30 2:31 p.m.27 views

ruby:3.3 security update

An update is available for rubygem-pg, module.rubygem-mysql2, rubygem-mysql2, module.rubygem-pg. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Ruby is an...

7.5CVSS6.5AI score0.01379EPSS
Exploits0
OSV
OSV
added 2024/09/30 2:31 p.m.17 views

RLSA-2024:6785 Moderate: ruby:3.3 security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fixes: rexml: DoS vulnerability in REXML CVE-2024-39908 rexml: rubygem-rexml: DoS when parsing an XML having many specific characters suc...

5.9CVSS6.7AI score0.01379EPSS
Exploits0References5
Rockylinux
Rockylinux
added 2024/09/30 2:30 p.m.29 views

ruby:3.3 security update

An update is available for ruby, rubygem-abrt, module.rubygem-pg, rubygem-mysql2, module.ruby, rubygem-pg, module.rubygem-abrt, module.rubygem-mysql2. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

7.5CVSS7.6AI score0.01379EPSS
Exploits0
OSV
OSV
added 2024/09/30 2:30 p.m.36 views

RLSA-2024:6784 Moderate: ruby:3.3 security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fixes: rexml: DoS vulnerability in REXML CVE-2024-39908 rexml: rubygem-rexml: DoS when parsing an XML having many specific characters suc...

7.5CVSS6.7AI score0.01379EPSS
Exploits0References5
OpenVAS
OpenVAS
added 2024/09/30 12:0 a.m.11 views

Debian: Security Advisory (DLA-3900-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS7.1AI score0.0129EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2024/09/30 12:0 a.m.16 views

Debian: Security Advisory (DLA-3901-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.1AI score0.01686EPSS
Exploits0References2
Rows per page
Query Builder