Lucene search
K

14158 matches found

OSV
OSV
added 2023/10/30 9:15 p.m.15 views

CVE-2023-5349

A memory leak flaw was found in ruby-magick, an interface between Ruby and ImageMagick. This issue can lead to a denial of service DOS by memory exhaustion...

3.3CVSS6.9AI score0.00032EPSS
Exploits1References7
NVD
NVD
added 2023/10/30 9:15 p.m.12 views

CVE-2023-5349

A memory leak flaw was found in ruby-magick, an interface between Ruby and ImageMagick. This issue can lead to a denial of service DOS by memory exhaustion...

5.3CVSS5AI score0.00032EPSS
Exploits1References7
OSV
OSV
added 2023/10/30 9:15 p.m.1 views

DEBIAN-CVE-2023-5349

A memory leak flaw was found in ruby-magick, an interface between Ruby and ImageMagick. This issue can lead to a denial of service DOS by memory exhaustion...

3.3CVSS5.1AI score0.00032EPSS
Exploits1References1
AlpineLinux
AlpineLinux
added 2023/10/30 9:15 p.m.16 views

CVE-2023-5349

A memory leak flaw was found in ruby-magick, an interface between Ruby and ImageMagick. This issue can lead to a denial of service DOS by memory exhaustion...

5.3CVSS6.8AI score0.00032EPSS
Exploits1
OSV
OSV
added 2023/10/30 9:15 p.m.0 views

UBUNTU-CVE-2023-5349

A memory leak flaw was found in ruby-magick, an interface between Ruby and ImageMagick. This issue can lead to a denial of service DOS by memory exhaustion...

5.3CVSS5.9AI score0.00032EPSS
Exploits1References5
Prion
Prion
added 2023/10/30 9:15 p.m.16 views

Memory corruption

A memory leak flaw was found in ruby-magick, an interface between Ruby and ImageMagick. This issue can lead to a denial of service DOS by memory exhaustion...

1.9CVSS3.6AI score0.00032EPSS
Exploits1References5Affected Software2
CVE
CVE
added 2023/10/30 8:27 p.m.110 views

CVE-2023-5349

CVE-2023-5349 concerns a memory-leak flaw in ruby-magick (ruby-rmagick), the Ruby binding for ImageMagick. The issue can cause denial of service via memory exhaustion. Affected packages include ruby-rmagick in Debian (fixed in 2.16.0-7+deb11u1 per DLA-4433-1), Fedora rubygem-rmagick (fixes in FED...

5.3CVSS4.3AI score0.00032EPSS
Exploits1References7Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/30 8:27 p.m.14 views

CVE-2023-5349 Draw while calling getdrawinfo()

A memory leak flaw was found in ruby-magick, an interface between Ruby and ImageMagick. This issue can lead to a denial of service DOS by memory exhaustion...

5.3CVSS5.1AI score0.00032EPSS
Exploits1References5
Debian CVE
Debian CVE
added 2023/10/30 8:27 p.m.33 views

CVE-2023-5349

A memory leak flaw was found in ruby-magick, an interface between Ruby and ImageMagick. This issue can lead to a denial of service DOS by memory exhaustion...

5.3CVSS4.5AI score0.00032EPSS
Exploits1
Cvelist
Cvelist
added 2023/10/30 8:27 p.m.16 views

CVE-2023-5349 Draw while calling getdrawinfo()

A memory leak flaw was found in ruby-magick, an interface between Ruby and ImageMagick. This issue can lead to a denial of service DOS by memory exhaustion...

5.3CVSS5.3AI score0.00032EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2023/10/30 8:27 p.m.36 views

CVE-2023-5349

A memory leak flaw was found in ruby-magick, an interface between Ruby and ImageMagick. This issue can lead to a denial of service DOS by memory exhaustion...

5.3CVSS6.8AI score0.00032EPSS
Exploits1References5
RubySec
RubySec
added 2023/10/30 12:0 a.m.15 views

memory leak flaw was found in ruby-magick

A memory leak flaw was found in ruby-magick, an interface between Ruby and ImageMagick. This issue can lead to a denial of service DOS by memory exhaustion...

5.3CVSS7.1AI score0.00032EPSS
Exploits1References1Affected Software1
Gentoo Linux
Gentoo Linux
added 2023/10/30 12:0 a.m.36 views

Rack: Multiple Vulnerabilities

Background Rack is a modular Ruby web server interface. Description Multiple vulnerabilities have been discovered in Rack. Please review the CVE identifiers referenced below for details. Impact A possible denial of service vulnerability was found in the multipart parsing component of Rack. A...

10CVSS7.4AI score0.02323EPSS
Exploits0
BDU FSTEC
BDU FSTEC
added 2023/10/26 12:0 a.m.1 views

The vulnerability of the Active Record component of the Ruby on Rails software framework lies in its ability to allow SQL code to be inserted through comments, enabling attackers to execute arbitrary code.

The vulnerability of the Active Record component of the Ruby on Rails software framework lies in the ability to inject SQL code through comments. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9CVSS6.8AI score0.05757EPSS
Exploits1References6Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/10/26 12:0 a.m.1 views

The vulnerability of the Ruby on Rails software platform lies in the redirection of URLs to an unreliable website, allowing attackers to redirect users to arbitrary URL addresses.

The vulnerability of the Ruby on Rails software platform is related to the redirection of URLs to unreliable websites. Exploiting this vulnerability allows a malicious actor to redirect users to arbitrary URL addresses when using unvalidated external data in the redirectto handler...

6.4CVSS6.5AI score0.01398EPSS
Exploits0References7Affected Software2
Tenable Nessus
Tenable Nessus
added 2023/10/25 12:0 a.m.40 views

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : ruby2.5 (SUSE-SU-2023:4176-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4176-1 advisory. - The cgi gem before 0.1.0.2, 0.2.x before 0.2.2, and 0.3.x before 0.3.5 for Ruby allows HTTP...

8.8CVSS8AI score0.011EPSS
Exploits2References13
OpenVAS
OpenVAS
added 2023/10/23 12:0 a.m.14 views

Debian: Security Advisory (DLA-3625-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS4AI score0.00032EPSS
Exploits1References4
OpenVAS
OpenVAS
added 2023/10/23 12:0 a.m.25 views

Debian: Security Advisory (DSA-5530-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7AI score0.03121EPSS
Exploits0References4
Veracode
Veracode
added 2023/10/22 6:56 p.m.20 views

Denial Of Service (DoS)

ruby-rmagick is vulnerable to Denial of Service DoS. A memory leak allows a remote attackers to create an interface between Ruby and ImageMagick, that could lead to a Deny of Service DOS by memory exhaustion...

5.3CVSS6.4AI score0.00032EPSS
Exploits1References6Affected Software1
Debian
Debian
added 2023/10/22 12:35 p.m.39 views

[SECURITY] [DSA 5530-1] ruby-rack security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5530-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 22, 2023 https://www.debian.org/security/faq -...

10CVSS7.2AI score0.03121EPSS
Exploits0
Rows per page
Query Builder