RU
Vendor
Rubygems
35
CVEs
0
On KEV
0
New 30D
Products
RU9.8
Rubygems
Rubygems
25 CVEs0 on KEV0 new
RU9.8
Rubygems.org
Rubygems
4 CVEs0 on KEV0 new
MG–
Mail Gem
Rubygems
2 CVEs0 on KEV0 new
CW–
Command Wrap
Rubygems
1 CVEs0 on KEV0 new
FA–
Fastreader
Rubygems
1 CVEs0 on KEV0 new
JG–
Json Gem
Rubygems
1 CVEs0 on KEV0 new
MM–
Mini Magick
Rubygems
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-21654 | RU Rubygems.org Rubygems | 9.8 | Jan 12 | Rubygems.org is the Ruby community's gem hosting service |
| CVE-2023-40165 | RU Rubygems.org Rubygems | 7.5 | Aug 17 | rubygems.org is the Ruby community's primary gem (library) hosting service |
| CVE-2022-36073 | RU Rubygems Rubygems | 8.8 | Sep 7 | RubyGems.org is the Ruby community gem host |
| CVE-2022-29218 | RU Rubygems.org Rubygems | 7.5 | May 13 | RubyGems is a package registry used to supply software for the Ruby language ecosystem |
| CVE-2022-29176 | RU Rubygems.org Rubygems | 7.5 | May 5 | Rubygems is a package registry used to supply software for the Ruby language ecosystem |
| CVE-2019-8323 | RU Rubygems Rubygems | 7.5 | Jun 17 | An issue was discovered in RubyGems 2.6 and later through 3.0.2 |
| CVE-2019-8322 | RU Rubygems Rubygems | 7.5 | Jun 17 | An issue was discovered in RubyGems 2.6 and later through 3.0.2 |
| CVE-2019-8321 | RU Rubygems Rubygems | 7.5 | Jun 17 | An issue was discovered in RubyGems 2.6 and later through 3.0.2 |
| CVE-2019-8325 | RU Rubygems Rubygems | 7.5 | Jun 17 | An issue was discovered in RubyGems 2.6 and later through 3.0.2 |
| CVE-2019-8324 | RU Rubygems Rubygems | 8.8 | Jun 17 | An issue was discovered in RubyGems 2.6 and later through 3.0.2 |
| CVE-2019-8320 | RU Rubygems Rubygems | 7.4 | Jun 6 | A Directory Traversal issue was discovered in RubyGems 2.7.6 and later through 3.0.2 |
| CVE-2018-1000079 | RU Rubygems Rubygems | 5.5 | Mar 13 | RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk… |
| CVE-2018-1000078 | RU Rubygems Rubygems | 6.1 | Mar 13 | RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk… |
| CVE-2018-1000077 | RU Rubygems Rubygems | 5.3 | Mar 13 | RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk… |
| CVE-2018-1000076 | RU Rubygems Rubygems | 9.8 | Mar 13 | RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk… |
| CVE-2018-1000075 | RU Rubygems Rubygems | 7.5 | Mar 13 | RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk… |
| CVE-2018-1000074 | RU Rubygems Rubygems | 7.8 | Mar 13 | RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk… |
| CVE-2018-1000073 | RU Rubygems Rubygems | 7.5 | Mar 13 | RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk… |
| CVE-2017-0903 | RU Rubygems Rubygems | 9.8 | Oct 11 | RubyGems versions between 2.0.0 and 2.6.13 are vulnerable to a possible remote code execution vulnerability |
| CVE-2017-0902 | RU Rubygems Rubygems | 8.1 | Aug 31 | RubyGems version 2.6.12 and earlier is vulnerable to a DNS hijacking vulnerability that allows a MITM attacker to force the RubyGems client to download and install gems from a… |
| CVE-2017-0901 | RU Rubygems Rubygems | 7.5 | Aug 31 | RubyGems version 2.6.12 and earlier fails to validate specification names, allowing a maliciously crafted gem to potentially overwrite any file on the filesystem |
| CVE-2017-0900 | RU Rubygems Rubygems | 7.5 | Aug 31 | RubyGems version 2.6.12 and earlier is vulnerable to maliciously crafted gem specifications to cause a denial of service attack against RubyGems clients who have issued a `query`… |
| CVE-2017-0899 | RU Rubygems Rubygems | 9.8 | Aug 31 | RubyGems version 2.6.12 and earlier is vulnerable to maliciously crafted gem specifications that include terminal escape characters |
| CVE-2015-4020 | RU Rubygems Rubygems | – | Aug 25 | RubyGems 2.0.x before 2.0.17, 2.2.x before 2.2.5, and 2.4.x before 2.4.8 does not validate the hostname when fetching gems or making API requests, which allows remote attackers to… |
| CVE-2015-3900 | RU Rubygems Rubygems | – | Jun 24 | RubyGems 2.0.x before 2.0.16, 2.2.x before 2.2.4, and 2.4.x before 2.4.7 does not validate the hostname when fetching gems or making API requests, which allows remote attackers to… |
| CVE-2013-4363 | RU Rubygems Rubygems | – | Oct 17 | Algorithmic complexity vulnerability in Gem::Version::ANCHORED_VERSION_PATTERN in lib/rubygems/version.rb in RubyGems before 1.8.23.2, 1.8.24 through 1.8.26, 2.0.x before 2.0.10,… |
| CVE-2013-4287 | RU Rubygems Rubygems | – | Oct 17 | Algorithmic complexity vulnerability in Gem::Version::VERSION_PATTERN in lib/rubygems/version.rb in RubyGems before 1.8.23.1, 1.8.24 through 1.8.25, 2.0.x before 2.0.8, and 2.1.x… |
| CVE-2012-2126 | RU Rubygems Rubygems | – | Oct 1 | RubyGems before 1.8.23 does not verify an SSL certificate, which allows remote attackers to modify a gem during installation via a man-in-the-middle attack |
| CVE-2012-2125 | RU Rubygems Rubygems | – | Oct 1 | RubyGems before 1.8.23 can redirect HTTPS connections to HTTP, which makes it easier for remote attackers to observe or modify a gem during installation via a man-in-the-middle… |
| CVE-2013-2616 | MM Mini Magick Rubygems | – | Mar 20 | lib/mini_magick.rb in the MiniMagick Gem 1.3.1 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL |
| CVE-2013-2615 | FA Fastreader Rubygems | – | Mar 20 | lib/entry_controller.rb in the fastreader Gem 1.0.8 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL |
| CVE-2013-1875 | CW Command Wrap Rubygems | – | Mar 20 | command_wrap.rb in the command_wrap Gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL or filename |
| CVE-2013-0269 | JG Json Gem Rubygems | – | Feb 13 | The JSON gem before 1.5.5, 1.6.x before 1.6.8, and 1.7.x before 1.7.7 for Ruby allows remote attackers to cause a denial of service (resource consumption) or bypass the mass… |
| CVE-2012-2140 | MG Mail Gem Rubygems | – | Jul 18 | The Mail gem before 2.4.3 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a (1) sendmail or (2) exim delivery |
| CVE-2012-2139 | MG Mail Gem Rubygems | – | Jul 18 | Directory traversal vulnerability in lib/mail/network/delivery_methods/file_delivery.rb in the Mail gem before 2.4.4 for Ruby allows remote attackers to read arbitrary files via a… |