Browse CVEs

MEDIUM 5.0 CVE-2006-6303 The read_multipart function in cgi.rb in Ruby before 1.8.5-p2 does not properly detect boundaries in MIME multipart content, which allows remote atta… Ruby Patch available Fix from $1,6002006-12-06 MEDIUM 5.0 CVE-2006-5467 The cgi.rb CGI library for Ruby 1.8 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an HTTP request with… Ruby Patch available Fix from $1,6002006-10-27 MEDIUM 6.4 CVE-2006-3694EPSS 6% Multiple unspecified vulnerabilities in Ruby before 1.8.5 allow remote attackers to bypass "safe level" checks via unspecified vectors involving (1) … Ruby Patch available Fix from $1,6002006-07-21 MEDIUM 5.0 CVE-2006-1931EPSS 10% The HTTP/XMLRPC server in Ruby before 1.8.2 uses blocking sockets, which allows attackers to cause a denial of service (blocked connections) via a la… Ruby Patch available Fix from $1,6002006-04-20 HIGH 7.5 CVE-2005-2337 Ruby 1.6.x up to 1.6.8, 1.8.x up to 1.8.2, and 1.9.0 development up to 2005-09-01 allows attackers to bypass safe level and taint flag protections an… Ruby Patch available Fix from $1,9502005-10-07 HIGH 7.5 CVE-2005-1992EPSS 7% The XMLRPC server in utils.rb for the ruby library (libruby) 1.8 sets an invalid default value that prevents "security protection" using handlers, wh… Ruby Patch available Fix from $1,9502005-06-20 MEDIUM 5.0 CVE-2004-0983 The CGI module in Ruby 1.6 before 1.6.8, and 1.8 before 1.8.2, allows remote attackers to cause a denial of service (infinite loop and CPU consumptio… Ruby Patch available Fix from $1,6002005-03-01