Known vulnerabilities in rubygem-io-console - page 2

Vendor: openEuler
Software: rubygem-io-console
Software CPE: cpe:2.3:o:openeuler:rubygem-io-console:*:*:*:*:*:openeuler:*:*
Website: https://www.openeuler.org/
Total vulnerabilities: 38
Public exploits: 2
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting rubygem-io-console rubygem-io-console is affected by 38 known vulnerabilities: 6 high, 29 medium, 3 low Critical High Medium Low

Vulnerabilities (38)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU95148 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
CVE-2024-41946		 CWE-776 Medium
No
No
 0.5.7-137 01.08.2024 SB2024080145
SB2024082374
SB2024091607
and 22 more
#VU94361 - Improper input validation
CVE-2024-35176		 CWE-20 Medium
Available
No
 0.5.7-136 16.07.2024 SB2024071615
SB2024071914
SB2024072112
and 19 more
#VU88970 - Out-of-bounds read
CVE-2024-27282		 CWE-125 Medium
No
No
 0.4.6-124, 0.5.7-133 24.04.2024 SB2024042420
SB2024042421
SB2024042450
and 21 more
#VU87693 - Out-of-bounds read
CVE-2024-27280		 CWE-125 Medium
No
No
 0.4.6-122 21.03.2024 SB2024032138
SB2024041295
SB2024042421
and 22 more
#VU87692 - Improper input validation
CVE-2024-27281		 CWE-20 High
No
No
 0.4.6-122 21.03.2024 SB2024032137
SB2024041295
SB2024042421
and 18 more
#VU77803 - Incorrect Regular Expression
CVE-2023-36617		 CWE-185 Medium
No
No
 0.4.6-120 29.06.2023 SB2023062931
SB2023071289
SB2023101967
and 13 more
#VU74007 - Incorrect Regular Expression
CVE-2023-28756		 CWE-185 Medium
No
No
 0.4.6-119 24.03.2023 SB2023033146
SB2023050430
SB2023051746
and 33 more
#VU74004 - Incorrect Regular Expression
CVE-2023-28755		 CWE-185 Medium
No
No
 0.4.6-119, 0.4.6-120 24.03.2023 SB2023033146
SB2023042108
SB2023050430
and 41 more
#VU69506 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2021-33621		 CWE-113 Medium
No
No
 0.4.6-118 22.11.2022 SB2022112239
SB2022112439
SB2023011730
and 31 more
#VU62081 - Type conversion
CVE-2022-28739		 CWE-704 High
No
No
 0.4.6-116 12.04.2022 SB2022041215
SB2022041404
SB2022060704
and 28 more
#VU62080 - Double Free
CVE-2022-28738		 CWE-415 High
No
No
 0.4.6-116 12.04.2022 SB2022041215
SB2022041404
SB2022060704
and 13 more
#VU58365 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-41819		 CWE-451 Medium
No
No
 0.4.6-115 25.11.2021 SB2021112503
SB2022011920
SB2022020413
and 21 more
#VU55489 - Improper Certificate Validation
CVE-2021-32066		 CWE-295 Medium
No
No
 0.4.6-114 02.08.2021 SB2021080209
SB2021080210
SB2021080913
and 28 more
#VU55488 - Exposure of sensitive information to an unauthorized actor
CVE-2021-31810		 CWE-200 Medium
No
No
 0.4.6-114 02.08.2021 SB2021080209
SB2021080210
SB2021080913
and 27 more
#VU52796 - Command injection
CVE-2021-31799		 CWE-77 High
No
No
 0.4.6-114 03.05.2021 SB2021050306
SB2021052413
SB2021052414
and 27 more
#VU52000 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2021-28965		 CWE-611 Medium
No
No
 0.4.6-113 08.04.2021 SB2021040816
SB2021041365
SB2021042119
and 24 more
#VU47333 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-25613		 CWE-444 Medium
Available
No
 0.4.6-2 05.10.2020 SB2020100509
SB2020100703
SB2020111806
and 21 more
#VU31886 - Exposure of sensitive information to an unauthorized actor
CVE-2020-10933		 CWE-200 Low
No
No
 0.4.6-105 26.07.2020 SB2020050439
SB2020050208
SB2020040188
and 11 more


Showing elements 21 - 40 out of 38