Lucene search
K

5 matches found

Tenable Nessus
Tenable Nessus
added 2014/06/13 12:0 a.m.20 views

openSUSE Security Update : rubygem-rack-ssl (openSUSE-SU-2014:0515-1)

This rubygem-rack-ssl updated fixes the following security issue : - bnc869162: Fixed XSS in error page CVE-2014-2538. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2014-293. The te...

4.3CVSS8.4AI score0.00273EPSS
Exploits1References3
OpenVAS
OpenVAS
added 2014/04/03 12:0 a.m.23 views

Fedora Update for rubygem-rack-ssl FEDORA-2014-4118

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.3CVSS6.5AI score0.00273EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2014/04/03 12:0 a.m.19 views

Fedora 20 : rubygem-rack-ssl-1.3.2-9.fc20 (2014-4118)

Handle bad URIs gracefully CVE-2014-2538. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVE...

4.3CVSS8.2AI score0.00273EPSS
Exploits1References3
OpenVAS
OpenVAS
added 2014/04/03 12:0 a.m.19 views

Fedora Update for rubygem-rack-ssl FEDORA-2014-4118

Check for the Version of rubygem-rack-ssl OpenVAS Vulnerability Test Fedora Update for rubygem-rack-ssl FEDORA-2014-4118 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modi...

4.3CVSS6.4AI score0.00273EPSS
Exploits1References2
RubySec
RubySec
added 2013/07/09 12:0 a.m.14 views

CVE-2014-2538 rubygem rack-ssl: URL error display XSS

Cross-site scripting XSS vulnerability in lib/rack/ssl.rb in the rack-ssl gem before 1.4.0 for Ruby allows remote attackers to inject arbitrary web script or HTML via a URI, which might not be properly handled by third-party adapters such as JRuby-Rack...

4.3CVSS5.5AI score0.00273EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder