RU
Product
Ruby
8
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Ruby to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2006-6303 | – | Dec 6 | The read_multipart function in cgi.rb in Ruby before 1.8.5-p2 does not properly detect boundaries in MIME multipart content, which allows remote attackers to cause a denial of… Affected: 1.8; 1.8.1; 1.8.2; 1.8.2_pre1; 1.8.2_pre2; 1.8.3; +2 more |
| CVE-2006-5467 | – | Oct 27 | The cgi.rb CGI library for Ruby 1.8 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an HTTP request with a multipart MIME body that… Affected: 1.8 |
| CVE-2006-3694 | – | Jul 21 | Multiple unspecified vulnerabilities in Ruby before 1.8.5 allow remote attackers to bypass "safe level" checks via unspecified vectors involving (1) the alias function and (2)… Affected: 1.8.2; 1.8.3; 1.8.4 |
| CVE-2006-1931 | – | Apr 20 | The HTTP/XMLRPC server in Ruby before 1.8.2 uses blocking sockets, which allows attackers to cause a denial of service (blocked connections) via a large amount of data Affected: 1.6; 1.6.1; 1.6.2; 1.6.3; 1.6.4; 1.6.5; +4 more |
| CVE-2005-2337 | – | Oct 7 | Ruby 1.6.x up to 1.6.8, 1.8.x up to 1.8.2, and 1.9.0 development up to 2005-09-01 allows attackers to bypass safe level and taint flag protections and execute disallowed code when… Affected: 1.6; 1.6.1; 1.6.2; 1.6.3; 1.6.4; 1.6.5; +6 more |
| CVE-2005-1992 | – | Jun 20 | The XMLRPC server in utils.rb for the ruby library (libruby) 1.8 sets an invalid default value that prevents "security protection" using handlers, which allows remote attackers to… Affected: 1.8 |
| CVE-2004-0983 | – | Mar 1 | The CGI module in Ruby 1.6 before 1.6.8, and 1.8 before 1.8.2, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a certain HTTP request Affected: 1.6; 1.6.7; 1.8; 1.8.1; 1.8.2_pre1; 1.8.2_pre2 |
| CVE-2004-0755 | – | Oct 20 | The FileStore capability in CGI::Session for Ruby before 1.8.1, and possibly PStore, creates files with insecure permissions, which can allow local users to steal session… Affected: 1.6; 1.8 |
Showing 8