Lucene search
K

2168 matches found

Tenable Nessus
Tenable Nessus
added 2021/07/27 12:0 a.m.23 views

Photon OS 4.0: Rubygem PHSA-2021-4.0-0068

An update of the rubygem package has been released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-4.0-0068. The text itself is copyright C VMware, Inc...

4.3CVSS6.5AI score0.00259EPSS
Exploits0References2
Photon
Photon
added 2021/07/24 12:0 a.m.33 views

Moderate Photon OS Security Update - PHSA-2021-4.0-0068

Updates of 'rubygem-nokogiri' packages of Photon OS have been released...

4.3CVSS2.1AI score0.00259EPSS
Exploits0
Photon
Photon
added 2021/07/24 12:0 a.m.33 views

Moderate Photon OS Security Update - PHSA-2021-0068

Updates of 'rubygem-nokogiri' packages of Photon OS have been released...

4CVSS2.1AI score0.00259EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2021/07/22 12:0 a.m.31 views

Photon OS 4.0: Rubygem PHSA-2021-4.0-0060

An update of the rubygem package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-4.0-0060. The text itself is copyright C VMware, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

9.3CVSS7.9AI score0.25071EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2021/07/16 12:0 a.m.30 views

openSUSE 15 Security Update : rubygem-actionpack-5_1 (openSUSE-SU-2021:1759-1)

The remote SUSE Linux SUSE15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE-SU-2021:1759-1 advisory. - A possible information disclosure / unintended method execution vulnerability in Action Pack = 2.0.0 when using the redirectto or...

7.5CVSS7.3AI score0.01264EPSS
Exploits1References4
Photon
Photon
added 2021/07/13 12:0 a.m.46 views

Critical Photon OS Security Update - PHSA-2021-4.0-0060

Updates of 'python3-urllib3', 'rubygem-bundler', 'zeromq' packages of Photon OS have been released...

9.8CVSS7.8AI score0.00539EPSS
Exploits0
OpenVAS
OpenVAS
added 2021/07/13 12:0 a.m.22 views

openSUSE: Security Advisory for rubygem-actionpack-5_1 (openSUSE-SU-2021:1759-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.7AI score0.01264EPSS
Exploits1References2
Photon
Photon
added 2021/07/13 12:0 a.m.77 views

Critical Photon OS Security Update - PHSA-2021-0060

Updates of 'zeromq', 'python3-urllib3', 'rubygem-bundler' packages of Photon OS have been released...

9.3CVSS1.6AI score0.25071EPSS
Exploits1
Photon
Photon
added 2021/07/12 12:0 a.m.41 views

Low Photon OS Security Update - PHSA-2021-0413

Updates of 'kubernetes' packages of Photon OS have been released...

4.9CVSS5.8AI score0.00379EPSS
Exploits0
OSV
OSV
added 2021/07/11 9:10 a.m.3 views

OPENSUSE-SU-2021:1759-1 Security update for rubygem-actionpack-5_1

This update for rubygem-actionpack-51 fixes the following issues: - CVE-2021-22885: Fixed possible information disclosure / unintended method execution in Action Pack bsc1185715...

7.5CVSS7.3AI score0.01264EPSS
Exploits1References3
OPENSUSE Linux
OPENSUSE Linux
added 2021/07/11 12:0 a.m.20 views

Security update for rubygem-actionpack-5_1 (important)

openSUSE Security Update: Security update for rubygem-actionpack-51 Announcement ID: openSUSE-SU-2021:1759-1 Rating: important References: 1185715 Cross-References: CVE-2021-22885 CVSS scores: CVE-2021-22885 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2021-22885 SUSE: 7.5...

7.5CVSS6.3AI score0.01264EPSS
Exploits1References1
Oracle linux
Oracle linux
added 2021/07/07 12:0 a.m.89 views

ruby:2.6 security, bug fix, and enhancement update

ruby 2.6.7-107 - Upgrade to Ruby 2.6.7. Resolves: rhbz1952627 - Resolv::DNS: timeouts if multiple IPv6 name servers are given an address containing leading zero Resolves: rhbz1954968 - Fix: Rubygem-bundler: Don't use insecure tmp directory as home allows for execution of malicious code. Resolves:...

8.1CVSS2.7AI score0.05892EPSS
Exploits2
RedhatCVE
RedhatCVE
added 2021/07/06 7:16 p.m.67 views

CVE-2021-32740

A resource-consumption vulnerability was found in rubygem addressable, where its URI template implementation could allow an attacker's crafted template to consume resources, resulting in a denial of service. The highest threat from this vulnerability is to system availability. Mitigation Create...

7.5CVSS2.5AI score0.02533EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2021/06/29 4:24 p.m.0 views

rubygem-json: Unsafe object creation vulnerability in JSON

A flaw was found in rubygem-json. While parsing certain JSON documents, the json gem including the one bundled with Ruby can be coerced into creating arbitrary objects in the target system. This is the same issue as CVE-2013-0269...

7.5CVSS7.2AI score0.05892EPSS
Exploits0References5
Rockylinux
Rockylinux
added 2021/06/29 1:58 p.m.56 views

ruby:2.6 security, bug fix, and enhancement update

An update is available for rubygem-bson, rubygem-mysql2, ruby, rubygem-mongo, rubygem-pg, rubygem-abrt. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Ruby is a...

8.1CVSS8.4AI score0.05892EPSS
Exploits2
AlmaLinux
AlmaLinux
added 2021/06/29 1:58 p.m.72 views

Moderate: ruby:2.5 security, bug fix, and enhancement update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. The following packages have been upgraded to a later upstream version: ruby 2.5.9. BZ1952626 Security Fixes: ruby: NUL injection vulnerability of...

8.1CVSS8.1AI score0.05892EPSS
Exploits2References9
NVD
NVD
added 2021/06/24 12:15 a.m.14 views

CVE-2021-32823

In the bindata RubyGem before version 2.4.10 there is a potential denial-of-service vulnerability. In affected versions it is very slow for certain classes in BinData to be created. For example BinData::Bit100000, BinData::Bit100001, BinData::Bit100002, BinData::Bit. In combination with...

4.3CVSS0.00437EPSS
Exploits1References5
OSV
OSV
added 2021/06/24 12:15 a.m.12 views

CVE-2021-32823

In the bindata RubyGem before version 2.4.10 there is a potential denial-of-service vulnerability. In affected versions it is very slow for certain classes in BinData to be created. For example BinData::Bit100000, BinData::Bit100001, BinData::Bit100002, BinData::Bit. In combination with...

3.7CVSS4AI score
Exploits0References5
UbuntuCve
UbuntuCve
added 2021/06/24 12:15 a.m.20 views

CVE-2021-32823

In the bindata RubyGem before version 2.4.10 there is a potential denial-of-service vulnerability. In affected versions it is very slow for certain classes in BinData to be created. For example BinData::Bit100000, BinData::Bit100001, BinData::Bit100002, BinData::Bit. In combination with...

4.3CVSS5.8AI score0.00437EPSS
Exploits1References6
Prion
Prion
added 2021/06/24 12:15 a.m.14 views

Denial of service

In the bindata RubyGem before version 2.4.10 there is a potential denial-of-service vulnerability. In affected versions it is very slow for certain classes in BinData to be created. For example BinData::Bit100000, BinData::Bit100001, BinData::Bit100002, BinData::Bit. In combination with...

4.3CVSS4AI score0.00437EPSS
Exploits1References5Affected Software2
Rows per page
Query Builder