Known vulnerabilities in ruby - page 2
Vendor:
Fedoraproject
Software:
ruby
Software CPE:
cpe:2.3:o:fedoraproject:ruby:*:*:*:*:*:fedora:*:*
Website:
https://getfedora.org/
Total vulnerabilities:
65
Public exploits:
3
Known exploited (KEV):
0
Breakdown by Severity Chart
3.4.10-32.fc43
4.0.6-38.fc44
4.0.6-38.fc45
4.0.6-38.fc46
4.0.6-36.fc44
4.0.6-36.fc45
3.4.10-31.fc43
3.4.7-26.fc42
3.3.10-21.fc41
2.7.2-135.fc32
2.7.2-135.fc33
2.6.6-125.fc31
2.5.5-108.fc28
2.5.5-101.fc29
2.4.5-90.fc27
2.5.3-94.fc28
2.5.3-99.fc29
2.4.4-89.fc27
2.4.4-88.fc27
2.4.4-88.fc26
2.5.1-92.fc28
2.4.3-87.fc26
2.4.3-87.fc27
2.4.3-86.fc26
2.4.3-86.fc27
2.4.2-84.fc26
2.4.2-84.fc27
2.3.4-64.fc25
2.3.4-63.fc24
2.3.4-63.fc25
2.3.3-62.fc24
2.3.3-62.fc25
2.2.4-47.fc22
2.2.4-47.fc23
2.2.2-11.fc22
2.1.6-27.fc21
2.1.4-24.fc21
3.3.8-19.fc40
3.3.8-19.fc41
3.0.5-155.fc35
3.1.3-172.fc36
3.1.3-172.fc37
3.0.4-153.fc34
3.0.4-153.fc35
3.1.2-164.fc36
3.0.2-149.fc34
2.7-3320210609104615.601d93de
2.7-3420210609104615.058368ca
2.7.3-136.fc32
2.7.3-136.fc33
3.0.1-148.fc34
3.2.5-183.fc39
3.3.5-14.fc40
3.3.5-14.fc41
3.3.5-14.fc42
3.3.4-11.fc40
3.2.4-182.fc38
3.2.4-182.fc39
3.3.1-7.fc40
3.1.4-175.fc36
3.1.4-175.fc37
3.2.2-180.fc38
Vulnerabilities (65)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU62080 - Double Free CVE-2022-28738 |
CWE-415 | High | 3.0.4-153.fc34, 3.0.4-153.fc35, 3.1.2-164.fc36 | 12.04.2022 |
SB2022041215 SB2022041404 SB2022060704 and 13 more |
||
| #VU55666 - Insufficient Verification of Data Authenticity CVE-2020-36327 |
CWE-345 | High | 3.0.2-149.fc34 | 09.08.2021 |
SB2021080910 SB2021080913 SB2021092218 and 21 more |
||
| #VU55489 - Improper Certificate Validation CVE-2021-32066 |
CWE-295 | Medium | 2.7-3320210609104615.601d93de, 2.7-3420210609104615.058368ca, 3.0.2-149.fc34 | 02.08.2021 |
SB2021080209 SB2021080210 SB2021080913 and 28 more |
||
| #VU55488 - Exposure of sensitive information to an unauthorized actor CVE-2021-31810 |
CWE-200 | Medium | 2.7-3320210609104615.601d93de, 2.7-3420210609104615.058368ca, 3.0.2-149.fc34 | 02.08.2021 |
SB2021080209 SB2021080210 SB2021080913 and 27 more |
||
| #VU52796 - Command injection CVE-2021-31799 |
CWE-77 | High | 2.7-3320210609104615.601d93de, 2.7-3420210609104615.058368ca, 3.0.2-149.fc34 | 03.05.2021 |
SB2021050306 SB2021052413 SB2021052414 and 27 more |
||
| #VU52000 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2021-28965 |
CWE-611 | Medium | 2.7.3-136.fc32, 2.7.3-136.fc33, 2.7-3320210609104615.601d93de, 2.7-3420210609104615.058368ca, 3.0.1-148.fc34 | 08.04.2021 |
SB2021040816 SB2021041365 SB2021042119 and 24 more |
||
| #VU47333 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2020-25613 |
CWE-444 | Medium | 2.7.2-135.fc32, 2.7.2-135.fc33 | 05.10.2020 |
SB2020100509 SB2020100703 SB2020111806 and 21 more |
||
| #VU31886 - Exposure of sensitive information to an unauthorized actor CVE-2020-10933 |
CWE-200 | Low | 2.6.6-125.fc31 | 26.07.2020 |
SB2020050439 SB2020050208 SB2020040188 and 11 more |
||
| #VU32971 - Improper input validation CVE-2020-10663 |
CWE-20 | Medium | 2.6.6-125.fc31 | 28.04.2020 |
SB2020042868 SB2020050208 SB2020081273 and 24 more |
||
| #VU20194 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2019-8321 |
CWE-79 | Low | 2.5.5-101.fc29, 2.5.5-108.fc28 | 13.08.2019 |
SB2019081320 SB2019061706 SB2019072108 and 9 more |
||
| #VU20193 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2019-8320 |
CWE-22 | Low | 2.5.5-101.fc29, 2.5.5-108.fc28 | 13.08.2019 |
SB2019081320 SB2019061706 SB2019072108 and 8 more |
||
| #VU20192 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2019-8323 |
CWE-79 | Low | 2.5.5-101.fc29, 2.5.5-108.fc28 | 13.08.2019 |
SB2019081320 SB2019061706 SB2019072108 and 10 more |
||
| #VU20191 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2019-8322 |
CWE-79 | Low | 2.5.5-101.fc29, 2.5.5-108.fc28 | 13.08.2019 |
SB2019081320 SB2019061706 SB2019072108 and 10 more |
||
| #VU20190 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2019-8325 |
CWE-79 | Low | 2.5.5-101.fc29, 2.5.5-108.fc28 | 13.08.2019 |
SB2019081320 SB2019061706 SB2019072108 and 10 more |
||
| #VU20189 - Improper Control of Generation of Code ('Code Injection') CVE-2019-8324 |
CWE-94 | Medium | 2.5.5-101.fc29, 2.5.5-108.fc28 | 13.08.2019 |
SB2019081320 SB2019061706 SB2019072108 and 11 more |
||
| #VU15725 - Improper input validation CVE-2018-16396 |
CWE-20 | Low | 2.4.5-90.fc27, 2.5.3-94.fc28, 2.5.3-99.fc29 | 06.11.2018 |
SB2018110603 SB2018112909 SB2018112910 and 13 more |
||
| #VU15724 - Improper input validation CVE-2018-16395 |
CWE-20 | Low | 2.4.5-90.fc27, 2.5.3-94.fc28, 2.5.3-99.fc29 | 06.11.2018 |
SB2018110603 SB2018112909 SB2018112910 and 15 more |
||
| #VU11541 - Null Byte Interaction Error (Poison Null Byte) CVE-2018-8779 |
CWE-626 | Low | 2.4.4-88.fc26, 2.4.4-88.fc27, 2.4.4-89.fc27, 2.5.1-92.fc28 | 05.04.2018 |
SB2018033009 SB2018080117 SB2018103106 and 12 more |
||
| #VU11540 - Exposure of sensitive information to an unauthorized actor CVE-2018-8778 |
CWE-200 | Low | 2.4.4-88.fc26, 2.4.4-88.fc27, 2.4.4-89.fc27, 2.5.1-92.fc28 | 05.04.2018 |
SB2018033009 SB2018080117 SB2018103106 and 15 more |
||
| #VU11537 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') CVE-2017-17742 |
CWE-113 | Low | 2.4.4-88.fc26, 2.4.4-88.fc27, 2.4.4-89.fc27, 2.5.1-92.fc28 | 05.04.2018 |
SB2018033009 SB2018080117 SB2018103106 and 17 more |
Showing elements 21 - 40 out of 65