Lucene search
K

219 matches found

OSV
OSV
added 2019/06/06 3:51 p.m.4 views

SUSE-SU-2019:1440-1 Security update for rubygem-rack

This update for rubygem-rack fixes the following issues: Security issued fixed: - CVE-2018-16471: Fixed a cross-site scripting vulnerability via 'scheme' method bsc1116600...

6.1CVSS6AI score0.00829EPSS
Exploits0References5
OpenVAS
OpenVAS
added 2019/05/07 12:0 a.m.74 views

Fedora Update for rubygem-rack FEDORA-2018-e8ff8b7f8e

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS6.7AI score0.00177EPSS
Exploits0References2
Veracode
Veracode
added 2019/05/02 4:44 a.m.39 views

Cross-Site Request Forgery (CSRF)

OpenShift Enterprise is a cloud computing Platform-as-a-Service PaaS solution from Red Hat, and is designed for on-premise or private cloud deployments. A flaw was found in the handling of paths provided to ruby193-rubygem-rack. A remote attacker could use this flaw to conduct a directory travers...

7.5CVSS5.5AI score0.16071EPSS
Exploits0References9Affected Software4
Tenable Nessus
Tenable Nessus
added 2019/01/03 12:0 a.m.49 views

Fedora 29 : 1:rubygem-rack (2018-e8ff8b7f8e)

Buffer size in multipart parser allows for denial of service CVE-2018-16470. - Cross-site scripting XSS via scheme method on Rack::Request CVE-2018-16471. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has...

7.5CVSS6.4AI score0.00829EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2018/12/04 12:0 a.m.22 views

Fedora Update for rubygem-rack FEDORA-2018-5743ef02a1

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.1CVSS6.5AI score0.00829EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2018/11/28 12:0 a.m.33 views

Fedora 27 : 1:rubygem-rack (2018-5743ef02a1)

Cross-site scripting XSS via scheme method on Rack::Request CVE-2018-16471. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

6.1CVSS6.6AI score0.00829EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2018/01/31 12:0 a.m.16 views

Fedora Update for rubygem-rack-protection FEDORA-2018-306856c244

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2018/01/31 12:0 a.m.13 views

Fedora 26 : rubygem-rack-protection (2018-306856c244)

Fix timing attack in authenticitytoken.rb rhbz1534027. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

5.4AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2017/07/27 12:0 a.m.19 views

Fedora 25 : rubygem-rack-cors (2017-c22a8af4e9)

Security fix for CVE-2017-11173, new upstream version Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

8.8CVSS7.8AI score0.0175EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2017/07/25 12:0 a.m.19 views

Fedora Update for rubygem-rack-cors FEDORA-2017-c22a8af4e9

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.8AI score0.0175EPSS
Exploits0References2
OSV
OSV
added 2015/12/15 8:27 p.m.5 views

SUSE-SU-2015:2274-1 Security update for rubygem-rack

rubygem-rack was updated to fix one security issue. This security issue was fixed: - CVE-2015-3225: Crafted requests could have caused a SystemStackError leading to Denial of Service bsc934797...

5CVSS6.3AI score0.13251EPSS
Exploits0References3
OSV
OSV
added 2015/12/03 2:46 p.m.4 views

SUSE-SU-2015:2190-1 Security update for rubygem-rack-1_4

rubygem-rack-14 was updated to fix one security issue. This security issue was fixed: - CVE-2015-3225: Crafted requests could have caused a SystemStackError leading to Denial of Service bsc934797...

5CVSS6.3AI score0.13251EPSS
Exploits0References3
OSV
OSV
added 2015/09/04 7:36 a.m.5 views

SUSE-SU-2015:1522-1 Security update for rubygem-rack-1_4

rubygem-rack-14 was updated to fix one security issue. This security issue was fixed: - CVE-2015-3225: Crafted requests could have caused a SystemStackError leading to Denial of Service. bsc934797...

5CVSS6.3AI score0.13251EPSS
Exploits0References3
OSV
OSV
added 2015/09/01 2:35 p.m.6 views

SUSE-SU-2015:1888-1 Security update for rubygem-rack

rubygem-rack was updated to fix one security issue. This security issue was fixed: - CVE-2015-3225: Crafted requests could have caused a SystemStackError leading to Denial of Service bsc934797...

5CVSS6.3AI score0.13251EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2015/08/28 12:0 a.m.20 views

Fedora Update for rubygem-rack FEDORA-2015-12979

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5CVSS6.5AI score0.13251EPSS
Exploits0References2
Fedora
Fedora
added 2015/08/27 11:52 p.m.31 views

[SECURITY] Fedora 21 Update: rubygem-rack-1.5.2-5.fc21

Rack provides a common API for connecting web frameworks, web servers and layers of software in between...

5CVSS4.1AI score0.13251EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2015/08/20 12:0 a.m.28 views

Fedora 22 : rubygem-rack-1.6.1-2.fc22 (2015-12978)

Fix for CVE-2015-3225: Potential Denial of Service Vulnerability in Rack - Related rhbzCVE-2015-3225 New rubygem-rack-1.6.1-1.fc22 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...

5CVSS6.7AI score0.13251EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2015/08/20 12:0 a.m.21 views

Fedora Update for rubygem-rack FEDORA-2015-12978

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5CVSS6.5AI score0.13251EPSS
Exploits0References2
Fedora
Fedora
added 2015/08/19 8:9 a.m.26 views

[SECURITY] Fedora 22 Update: rubygem-rack-1.6.1-2.fc22

Rack provides a common API for connecting web frameworks, web servers and layers of software in between...

5CVSS4.1AI score0.13251EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2015/07/20 12:0 a.m.17 views

openSUSE Security Update : rubygem-rack (openSUSE-2015-498)

rubygem-rack was updated to fix one security issue. This security issue was fixed : - CVE-2015-3225: Potential Denial of Service Vulnerability in Rack bsc934797. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUS...

5CVSS6.7AI score0.13251EPSS
Exploits0References2
Rows per page
Query Builder