Known vulnerabilities in rubygem-irb - page 2

Vendor: OpenAnolis
Software: rubygem-irb
Software CPE: cpe:2.3:o:openanolis:rubygem-irb:*:*:*:*:*:anolis_os:*:*
Website: https://openanolis.cn/
Total vulnerabilities: 31
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting rubygem-irb rubygem-irb is affected by 31 known vulnerabilities: 7 high, 22 medium, 2 low Critical High Medium Low

Vulnerabilities (31)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU62081 - Type conversion
CVE-2022-28739		 CWE-704 High
No
No
 1.0.0-109, 1.2.6-138.0.1, 1.3.5-141.0.1 12.04.2022 SB2022041215
SB2022041404
SB2022060704
and 28 more
#VU62080 - Double Free
CVE-2022-28738		 CWE-415 High
No
No
 1.3.5-141.0.1 12.04.2022 SB2022041215
SB2022041404
SB2022060704
and 13 more
#VU59824 - Incorrect Regular Expression
CVE-2021-41817		 CWE-185 Medium
No
No
 1.0.0-108, 1.2.6-138.0.1, 1.3.5-141.0.1 19.01.2022 SB2022011919
SB2022011920
SB2022020413
and 24 more
#VU58365 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-41819		 CWE-451 Medium
No
No
 1.0.0-108, 1.2.6-138.0.1, 1.3.5-141.0.1 25.11.2021 SB2021112503
SB2022011920
SB2022020413
and 21 more
#VU55666 - Insufficient Verification of Data Authenticity
CVE-2020-36327		 CWE-345 High
No
No
 1.0.0-108, 1.2.6-137 09.08.2021 SB2021080910
SB2021080913
SB2021092218
and 21 more
#VU55489 - Improper Certificate Validation
CVE-2021-32066		 CWE-295 Medium
No
No
 1.0.0-108, 1.2.6-137 02.08.2021 SB2021080209
SB2021080210
SB2021080913
and 28 more
#VU55488 - Exposure of sensitive information to an unauthorized actor
CVE-2021-31810		 CWE-200 Medium
No
No
 1.0.0-108, 1.2.6-137 02.08.2021 SB2021080209
SB2021080210
SB2021080913
and 27 more
#VU52796 - Command injection
CVE-2021-31799		 CWE-77 High
No
No
 1.0.0-108, 1.2.6-137 03.05.2021 SB2021050306
SB2021052413
SB2021052414
and 27 more
#VU52000 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2021-28965		 CWE-611 Medium
No
No
 1.2.6-136 08.04.2021 SB2021040816
SB2021041365
SB2021042119
and 24 more
#VU50511 - Improper input validation
CVE-2021-24105		 CWE-20 High
No
No
 1.0.0-108, 1.2.6-137 09.02.2021 SB2021020965
SB2021070316
SB2021082548
and 2 more
#VU47333 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-25613		 CWE-444 Medium
Available
No
 1.2.6-136 05.10.2020 SB2020100509
SB2020100703
SB2020111806
and 21 more


Showing elements 21 - 40 out of 31