Lucene search
K

6 matches found

Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.7 views

MiracleLinux 4 : ruby-1.8.7.352-13.AXS4 (AXSA:2014-036:01)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2014-036:01 advisory. Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system...

6.8CVSS8.2AI score0.11958EPSS
Exploits3References2
SUSE CVE
SUSE CVE
added 2023/02/15 3:26 a.m.1 views

SUSE CVE-2022-28739

There is a buffer over-read in Ruby before 2.6.10, 2.7.x before 2.7.6, 3.x before 3.0.4, and 3.1.x before 3.1.2. It occurs in String-to-Float conversion, including KernelFloat and Stringtof...

6.2CVSS7.2AI score0.00306EPSS
Exploits0References18
Microsoft CVE
Microsoft CVE
added 2022/05/20 7:0 a.m.1 views

There is a buffer over-read in Ruby before 2.6.10 2.7.x before 2.7.6 3.x before 3.0.4 and 3.1.x before 3.1.2. It occurs in String-to-Float conversion including Kernel#Float and String#to_f.

...

7.5CVSS7.3AI score0.00306EPSS
Exploits0
AlpineLinux
AlpineLinux
added 2022/05/09 12:0 a.m.59 views

CVE-2022-28739

There is a buffer over-read in Ruby before 2.6.10, 2.7.x before 2.7.6, 3.x before 3.0.4, and 3.1.x before 3.1.2. It occurs in String-to-Float conversion, including KernelFloat and Stringtof...

7.5CVSS8.1AI score0.00306EPSS
Exploits0
Cvelist
Cvelist
added 2013/11/23 7:0 p.m.26 views

CVE-2013-4164

Heap-based buffer overflow in Ruby 1.8, 1.9 before 1.9.3-p484, 2.0 before 2.0.0-p353, 2.1 before 2.1.0 preview2, and trunk before revision 43780 allows context-dependent attackers to cause a denial of service segmentation fault and possibly execute arbitrary code via a string that is converted to...

5.8AI score0.11958EPSS
Exploits3References22
RubySec
RubySec
added 2013/11/22 12:0 a.m.35 views

CVE-2013-4164 ruby: heap overflow in floating point parsing

Heap-based buffer overflow in Ruby 1.8, 1.9 before 1.9.3-p484, 2.0 before 2.0.0-p353, 2.1 before 2.1.0 preview2, and trunk before revision 43780 allows context-dependent attackers to cause a denial of service segmentation fault and possibly execute arbitrary code via a string that is converted to...

6.8CVSS6.1AI score0.11958EPSS
Exploits3References1Affected Software1
Rows per page
Query Builder