Skip to content
Fencer Intel

All · rubygems

Newest first, late arrivals on top. Also a feed.

  1. 7.5
    CVE-2018-1000075 RubyGems Infinite Loop vulnerability
    rubygemsmaven
    EPSS 4.7% chance of exploitation in 30 days, percentile 92%
  2. 7.8
    CVE-2018-1000074 RubyGems Deserialization of Untrusted Data vulnerability
    rubygemsmaven
    EPSS 2.9% chance of exploitation in 30 days, percentile 87%
  3. 7.5
    CVE-2018-1000073 RubyGems Link Following vulnerability
    rubygemsmaven
    EPSS 4.9% chance of exploitation in 30 days, percentile 92%
  4. 8.1
    CVE-2017-2667 hammer_cli_foreman Improper Certificate Validation vulnerability
    rubygems
  5. 5.9
    CVE-2018-1000119 rack-protection gem timing attack vulnerability when validating CSRF token
    rubygems
    EPSS 2.4% chance of exploitation in 30 days, percentile 84%
  6. 5.5
    CVE-2017-16229 Ox gem stack overflow in sax_parse
    rubygems
  7. 5.4
    CVE-2018-7261 radiant vulnerable to Cross-site Scripting
    rubygems
  8. 5.3
    CVE-2018-7212 Sinatra Path Traversal vulnerability
    rubygems
    EPSS 1.8% chance of exploitation in 30 days, percentile 79%
  9. 5.4
    CVE-2014-0014 ember-source Cross-site Scripting vulnerability
    rubygems
    EPSS 1.2% chance of exploitation in 30 days, percentile 68%
  10. 5.4
    CVE-2014-0013 Ember.js Cross-site Scripting vulnerability
    rubygems
  11. 5.5
    CVE-2017-10689 Tarball permission preservation in puppet
    rubygems
  12. 9.8
    CVE-2015-4412 bson is vulnerable to denial of service due to incorrect regex validation
    rubygems
    EPSS 4.7% chance of exploitation in 30 days, percentile 91%
  13. 7.8
    CVE-2014-1835 Echor Ruby Gem credentials can be stolen via process table monitoring
    rubygems
  14. 7.8
    CVE-2014-1834 Echor contains Command Injection
    rubygems
  15. 7.5
    CVE-2017-18076 Omniauth allows POST parameters to be stored in session
    rubygems
    EPSS 2.1% chance of exploitation in 30 days, percentile 82%
  16. 6.1
    CVE-2017-12097 delayed_job_web Cross-site Scripting vulnerability
    Ruby on Railsrubygems
    EPSS 1.0% chance of exploitation in 30 days, percentile 63%
  17. 6.1
    CVE-2017-12098 rails_admin ruby gem XSS
    rubygems
    EPSS 1.3% chance of exploitation in 30 days, percentile 70%
  18. 7.5
    CVE-2016-10707 Denial of Service in jquery
    npmnugetmavenrubygems
    EPSS 3.2% chance of exploitation in 30 days, percentile 88%
  19. 6.1
    CVE-2015-9251 Cross-Site Scripting (XSS) in jquery
    npmnugetrubygemsmaven
    EPSS 29.7% chance of exploitation in 30 days, percentile 98%
  20. 6.1
    CVE-2012-6708 Cross-Site Scripting in jquery
    npmmavennugetrubygems
    1 public exploit EPSS 8.6% chance of exploitation in 30 days, percentile 95%
  21. 7.8
    CVE-2014-5004 brbackup exposes database password to unauthorized users
    rubygems
  22. 5.5
    CVE-2014-5003 Ciborg gem for Ruby allows local users to write files and gain privileges via Symlink
    rubygems
  23. 7.8
    CVE-2014-5002 lynx doesn't properly sanitize user input and exposes database password to unauthorized users
    rubygems
  24. 7.8
    CVE-2014-5001 Kcapifony gem for Ruby places database user passwords on the command line
    rubygems
  25. 7.8
    CVE-2014-5000 lawn-login exposes database password to unauthorized users
    rubygems
  26. 7.8
    CVE-2014-4999 kajam allows local users to obtain sensitive information by listing the process
    rubygems
  27. 7.8
    CVE-2014-4998 lean-ruport allows local users to obtain sensitive information by listing the process
    rubygems
  28. 7.8
    CVE-2014-4997 point-cli allows local users to obtain sensitive information by listing the process
    rubygems
  29. 5.5
    CVE-2014-4996 VladTheEnterprising allows local users to write to arbitrary files via a symlink attack
    rubygems
  30. 7.0
    CVE-2014-4995 VladTheEnterprising allows local users to obtain sensitive information by reading MySQL root password from temporary file
    rubygems