YM
Vendor
Yukihiro Matsumoto
1 product with CVEs on record
8
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2006-6303
RU
Ruby
Yukihiro Matsumoto
–
4%
Dec 6The read_multipart function in cgi.rb in Ruby before 1.8.5-p2 does not properly detect boundaries in MIME multipart content, which allows remote attackers to cause a denial of…
CVE-2006-5467
RU
Ruby
Yukihiro Matsumoto
–
5%
Oct 27The cgi.rb CGI library for Ruby 1.8 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an HTTP request with a multipart MIME body that…
CVE-2006-3694
RU
Ruby
Yukihiro Matsumoto
–
6%
Jul 21Multiple unspecified vulnerabilities in Ruby before 1.8.5 allow remote attackers to bypass "safe level" checks via unspecified vectors involving (1) the alias function and (2)…
CVE-2006-1931
RU
Ruby
Yukihiro Matsumoto
–
10%
Apr 20The HTTP/XMLRPC server in Ruby before 1.8.2 uses blocking sockets, which allows attackers to cause a denial of service (blocked connections) via a large amount of data
CVE-2005-2337
RU
Ruby
Yukihiro Matsumoto
–
3%
Oct 7Ruby 1.6.x up to 1.6.8, 1.8.x up to 1.8.2, and 1.9.0 development up to 2005-09-01 allows attackers to bypass safe level and taint flag protections and execute disallowed code when…
CVE-2005-1992
RU
Ruby
Yukihiro Matsumoto
–
7%
Jun 20The XMLRPC server in utils.rb for the ruby library (libruby) 1.8 sets an invalid default value that prevents "security protection" using handlers, which allows remote attackers to…
CVE-2004-0983
RU
Ruby
Yukihiro Matsumoto
–
2%
Mar 1The CGI module in Ruby 1.6 before 1.6.8, and 1.8 before 1.8.2, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a certain HTTP request
CVE-2004-0755
RU
Ruby
Yukihiro Matsumoto
–
0%
Oct 20The FileStore capability in CGI::Session for Ruby before 1.8.1, and possibly PStore, creates files with insecure permissions, which can allow local users to steal session…