Known vulnerabilities in ruby1.9.3 (Ubuntu package) 1.9.3.484-2ubuntu1.5

Vendor: Canonical Ltd.
Software: ruby1.9.3 (Ubuntu package)
Version: 1.9.3.484-2ubuntu1.5
Software CPE: cpe:2.3:o:canonical:ruby1.9.3:*:*:*:*:*:ubuntu:*:*
Website: https://www.ubuntu.com/
Total vulnerabilities: 27
Public exploits: 1
Known exploited (KEV): 0

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting ruby1.9.3 (Ubuntu package) version 1.9.3.484-2ubuntu1.5 ruby1.9.3 (Ubuntu package) 1.9.3.484-2ubuntu1.5 is affected by 27 vulnerabilities: 2 high, 2 medium, 23 low Critical High Medium Low

Vulnerabilities (27)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU15725 - Improper input validation
CVE-2018-16396		 CWE-20 Low
No
No
 1.9.3.484-2ubuntu1.13 06.11.2018 SB2018110603
SB2018112909
SB2018112910
and 14 more
#VU15724 - Improper input validation
CVE-2018-16395		 CWE-20 Low
No
No
 1.9.3.484-2ubuntu1.13 06.11.2018 SB2018110603
SB2018112909
SB2018112910
and 16 more
#VU11651 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-1000078		 CWE-79 Low
No
No
 1.9.3.484-2ubuntu1.8 10.04.2018 SB2018040507
SB2018061002
SB2018080117
and 13 more
#VU11650 - Deserialization of Untrusted Data
CVE-2018-1000074		 CWE-502 High
No
No
 1.9.3.484-2ubuntu1.8, 1.9.3.484-2ubuntu1.12 10.04.2018 SB2018040507
SB2018061002
SB2018080117
and 15 more
#VU11649 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2018-1000075		 CWE-835 Low
No
No
 1.9.3.484-2ubuntu1.8 10.04.2018 SB2018040507
SB2018061002
SB2018080117
and 13 more
#VU11648 - Improper Verification of Cryptographic Signature
CVE-2018-1000076		 CWE-347 Low
No
No
 1.9.3.484-2ubuntu1.8 10.04.2018 SB2018040507
SB2018061002
SB2018080117
and 13 more
#VU11647 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2018-1000073		 CWE-22 Low
No
No
 1.9.3.484-2ubuntu1.8 10.04.2018 SB2018021520
SB2018040507
SB2018061002
and 14 more
#VU11628 - Improper input validation
CVE-2018-1000077		 CWE-20 Low
No
No
 1.9.3.484-2ubuntu1.8 09.04.2018 SB2018021520
SB2018040507
SB2018061002
and 14 more
#VU11542 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2018-8780		 CWE-22 Low
No
No
 1.9.3.484-2ubuntu1.11 05.04.2018 SB2018033009
SB2018080117
SB2018103106
and 16 more
#VU11541 - Null Byte Interaction Error (Poison Null Byte)
CVE-2018-8779		 CWE-626 Low
No
No
 1.9.3.484-2ubuntu1.11 05.04.2018 SB2018033009
SB2018080117
SB2018103106
and 13 more
#VU11540 - Exposure of sensitive information to an unauthorized actor
CVE-2018-8778		 CWE-200 Low
No
No
 1.9.3.484-2ubuntu1.11 05.04.2018 SB2018033009
SB2018080117
SB2018103106
and 16 more
#VU11539 - Resource exhaustion
CVE-2018-8777		 CWE-400 Low
No
No
 1.9.3.484-2ubuntu1.12 05.04.2018 SB2018033009
SB2018080117
SB2018103106
and 17 more
#VU11538 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2018-6914		 CWE-22 Low
No
No
 1.9.3.484-2ubuntu1.11 05.04.2018 SB2018033009
SB2018080117
SB2018103106
and 13 more
#VU11537 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2017-17742		 CWE-113 Low
No
No
 1.9.3.484-2ubuntu1.12 05.04.2018 SB2018033009
SB2018080117
SB2018103106
and 18 more
#VU8815 - Deserialization of Untrusted Data
CVE-2017-0903		 CWE-502 High
No
No
 1.9.3.484-2ubuntu1.12 13.10.2017 SB2017101301
SB2017111201
SB2017121902
and 11 more
#VU8448 - Exposure of sensitive information to an unauthorized actor
CVE-2017-10784		 CWE-200 Low
No
No
 1.9.3.484-2ubuntu1.12 15.09.2017 SB2017091505
SB2017100602
SB2017091810
and 18 more
#VU8447 - Improper input validation
CVE-2017-0898		 CWE-20 Low
No
No
 1.9.3.484-2ubuntu1.12 15.09.2017 SB2017091505
SB2017100602
SB2017091810
and 17 more
#VU8123 - Exposure of sensitive information to an unauthorized actor
CVE-2017-14064		 CWE-200 Low
No
No
 1.9.3.484-2ubuntu1.12 06.09.2017 SB2017090606
SB2017091505
SB2017100602
and 17 more
#VU8058 - Improper Access Control
CVE-2017-0902		 CWE-284 Low
No
No
 1.9.3.484-2ubuntu1.12 31.08.2017 SB2017083105
SB2017090606
SB2017090607
and 18 more
#VU8057 - Improper input validation
CVE-2017-0901		 CWE-20 Medium
Public exploit available
No
 1.9.3.484-2ubuntu1.12 31.08.2017 SB2017083105
SB2017090606
SB2017090607
and 19 more


Showing elements 1 - 20 out of 27