https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T06:05:15.274363+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2006-avi-562 certa-2006-avi-562 — Deux vulnérabilités dans Ruby permettent à un utilisateur distant malintentionné de provoquer un déni de service. 2026-10-03T06:05:15.382462+00:00 certa-2006-avi-562 https://cve.radiocsirt.org/vuln/euvd-2026-143636 EUVD-2026-143636 2026-10-03T06:05:15.382505+00:00 EUVD-2026-143636 https://cve.radiocsirt.org/vuln/fkie_cve-2006-5467 fkie_cve-2006-5467 2026-10-03T06:05:15.382541+00:00

The cgi.rb CGI library for Ruby 1.8 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an HTTP request with a multipart MIME body that contains an invalid boundary specifier, as demonstrated using a specifier that begins with a "-" instead of "--" and contains an inconsistent ID.

 https://cve.radiocsirt.org/vuln/ghsa-cgqx-jwj4-2jc4 GHSA-cgqx-jwj4-2jc4 2026-10-03T06:05:15.382615+00:00

The cgi.rb CGI library for Ruby 1.8 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an HTTP request with a multipart MIME body that contains an invalid boundary specifier, as demonstrated using a specifier that begins with a "-" instead of "--" and contains an inconsistent ID.

 https://cve.radiocsirt.org/vuln/gsd-2006-5467 gsd-2006-5467 2026-10-03T06:05:15.382635+00:00 gsd-2006-5467 https://cve.radiocsirt.org/vuln/jvndb-2006-000753 jvndb-2006-000753 2026-10-03T06:05:15.382646+00:00

The cig.rb class in Ruby cannot handle HTTP requests with MIME multipart data set with an invalid boundry, which could trigger an infinate loop and result in consuming a large amount of CPU respurces.

 https://cve.radiocsirt.org/vuln/rhsa-2006:0729 RHSA-2006:0729 — Red Hat Security Advisory: ruby security update 2026-10-03T06:05:15.382663+00:00

Ruby CGI multipart parsing DoS