Поиск уязвимостей
Количество 51
Количество 51
BDU:2022-03067
Уязвимость методов алгоритма преобразования строки в число с плавающей запятой Kernel#Float и String#to_f интерпретатора языка программирования Ruby, позволяющая нарушителю вызвать отказ в обслуживании
RLSA-2022:5779
Moderate: ruby:2.5 security update
ELSA-2022-5779
ELSA-2022-5779: ruby:2.5 security update (MODERATE)
CVE-2022-28738
A double free was found in the Regexp compiler in Ruby 3.x before 3.0.4 and 3.1.x before 3.1.2. If a victim attempts to create a Regexp from untrusted user input, an attacker may be able to write to unexpected memory locations.
CVE-2022-28738
A double free was found in the Regexp compiler in Ruby 3.x before 3.0.4 and 3.1.x before 3.1.2. If a victim attempts to create a Regexp from untrusted user input, an attacker may be able to write to unexpected memory locations.
CVE-2022-28738
A double free was found in the Regexp compiler in Ruby 3.x before 3.0.4 and 3.1.x before 3.1.2. If a victim attempts to create a Regexp from untrusted user input, an attacker may be able to write to unexpected memory locations.
CVE-2022-28738
A double free was found in the Regexp compiler in Ruby 3.x before 3.0. ...
ALT-PU-2021-3482
ALT-PU-2021-3482: package `ruby` update to version 2.7.5-alt1
RLSA-2023:7025
Moderate: ruby:2.5 security update
ELSA-2023-7025
ELSA-2023-7025: ruby:2.5 security update (MODERATE)
ROS-20240918-01
Множественные уязвимости ruby
RLSA-2022:0543
Important: ruby:2.6 security update
ELSA-2022-0543
ELSA-2022-0543: ruby:2.6 security update (IMPORTANT)
GHSA-8pqg-8p79-j5j8
A double free was found in the Regexp compiler in Ruby 3.x before 3.0.4 and 3.1.x before 3.1.2. If a victim attempts to create a Regexp from untrusted user input, an attacker may be able to write to unexpected memory locations.
BDU:2022-03068
Уязвимость реализации класса Regexp интерпретатора языка программирования Ruby, позволяющая нарушителю вызвать отказ в обслуживании
CVE-2021-41819
CGI::Cookie.parse in Ruby through 2.6.8 mishandles security prefixes in cookie names. This also affects the CGI gem through 0.3.0 for Ruby.
CVE-2021-41819
CGI::Cookie.parse in Ruby through 2.6.8 mishandles security prefixes in cookie names. This also affects the CGI gem through 0.3.0 for Ruby.
CVE-2021-41819
CGI::Cookie.parse in Ruby through 2.6.8 mishandles security prefixes in cookie names. This also affects the CGI gem through 0.3.0 for Ruby.
CVE-2021-41819
CGI::Cookie.parse in Ruby through 2.6.8 mishandles security prefixes in cookie names. This also affects the CGI gem through 0.3.0 for Ruby.
CVE-2021-41819
CGI::Cookie.parse in Ruby through 2.6.8 mishandles security prefixes i ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2022-03067 Уязвимость методов алгоритма преобразования строки в число с плавающей запятой Kernel#Float и String#to_f интерпретатора языка программирования Ruby, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 4% Низкий | больше 4 лет назад |
 | RLSA-2022:5779 Moderate: ruby:2.5 security update | больше 4 лет назад | ||
| ELSA-2022-5779 ELSA-2022-5779: ruby:2.5 security update (MODERATE) | больше 4 лет назад | ||
 | CVE-2022-28738 A double free was found in the Regexp compiler in Ruby 3.x before 3.0.4 and 3.1.x before 3.1.2. If a victim attempts to create a Regexp from untrusted user input, an attacker may be able to write to unexpected memory locations. | CVSS3: 9.8 | 3% Низкий | больше 4 лет назад |
 | CVE-2022-28738 A double free was found in the Regexp compiler in Ruby 3.x before 3.0.4 and 3.1.x before 3.1.2. If a victim attempts to create a Regexp from untrusted user input, an attacker may be able to write to unexpected memory locations. | CVSS3: 7.7 | 3% Низкий | больше 4 лет назад |
 | CVE-2022-28738 A double free was found in the Regexp compiler in Ruby 3.x before 3.0.4 and 3.1.x before 3.1.2. If a victim attempts to create a Regexp from untrusted user input, an attacker may be able to write to unexpected memory locations. | CVSS3: 9.8 | 3% Низкий | больше 4 лет назад |
| CVE-2022-28738 A double free was found in the Regexp compiler in Ruby 3.x before 3.0. ... | CVSS3: 9.8 | 3% Низкий | больше 4 лет назад |
| ALT-PU-2021-3482 ALT-PU-2021-3482: package `ruby` update to version 2.7.5-alt1 | CVSS3: 7.5 | почти 5 лет назад | |
| RLSA-2023:7025 Moderate: ruby:2.5 security update | 7 месяцев назад | ||
| ELSA-2023-7025 ELSA-2023-7025: ruby:2.5 security update (MODERATE) | почти 3 года назад | ||
 | ROS-20240918-01 Множественные уязвимости ruby | CVSS3: 9.8 | около 2 лет назад | |
| RLSA-2022:0543 Important: ruby:2.6 security update | больше 4 лет назад | ||
| ELSA-2022-0543 ELSA-2022-0543: ruby:2.6 security update (IMPORTANT) | больше 4 лет назад | ||
| GHSA-8pqg-8p79-j5j8 A double free was found in the Regexp compiler in Ruby 3.x before 3.0.4 and 3.1.x before 3.1.2. If a victim attempts to create a Regexp from untrusted user input, an attacker may be able to write to unexpected memory locations. | CVSS3: 9.8 | 3% Низкий | больше 4 лет назад |
| BDU:2022-03068 Уязвимость реализации класса Regexp интерпретатора языка программирования Ruby, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 6.2 | 3% Низкий | больше 4 лет назад |
| CVE-2021-41819 CGI::Cookie.parse in Ruby through 2.6.8 mishandles security prefixes in cookie names. This also affects the CGI gem through 0.3.0 for Ruby. | CVSS3: 7.5 | 3% Низкий | почти 5 лет назад |
| CVE-2021-41819 CGI::Cookie.parse in Ruby through 2.6.8 mishandles security prefixes in cookie names. This also affects the CGI gem through 0.3.0 for Ruby. | CVSS3: 7.5 | 3% Низкий | почти 5 лет назад |
| CVE-2021-41819 CGI::Cookie.parse in Ruby through 2.6.8 mishandles security prefixes in cookie names. This also affects the CGI gem through 0.3.0 for Ruby. | CVSS3: 7.5 | 3% Низкий | почти 5 лет назад |
 | CVE-2021-41819 CGI::Cookie.parse in Ruby through 2.6.8 mishandles security prefixes in cookie names. This also affects the CGI gem through 0.3.0 for Ruby. | CVSS3: 7.5 | 3% Низкий | почти 5 лет назад |
| CVE-2021-41819 CGI::Cookie.parse in Ruby through 2.6.8 mishandles security prefixes i ... | CVSS3: 7.5 | 3% Низкий | почти 5 лет назад |
Уязвимостей на страницу