Most recent entries from all

Withdrawn: BELL-CVE-2017-0900 — CVE-2017-0900 does not affect BellSoft software

2026-10-03T09:09:42.640078+00:00

Withdrawn by the publisher.

certfr-2022-avi-267 — De multiples vulnérabilités ont été découvertes dans Juniper Networks Junos Space. Elles permettent à un attaquant de p…

2026-10-03T09:09:42.640122+00:00

certfr-2022-avi-267

CLEANSTART-2026-RN88749 — Security fix for CVE-2017-0900 applied in: ruby 2.4.2-r0

2026-10-03T09:09:42.640142+00:00

Affected: CleanStart: ruby

Security vulnerability affects the ruby package. This issue is resolved in later releases. See references for vulnerability details.

cnvd-2017-30734

2026-10-03T09:09:42.640172+00:00

cnvd-2017-30734

EUVD-2026-71876

2026-10-03T09:09:42.640186+00:00

EUVD-2026-71876

fkie_cve-2017-0900

2026-10-03T09:09:42.640198+00:00

RubyGems version 2.6.12 and earlier is vulnerable to maliciously crafted gem specifications to cause a denial of service attack against RubyGems clients who have issued a `query` command.

GHSA-p7f2-rr42-m9xm — RubyGems Improper Input Validation vulnerability

2026-10-03T09:09:42.640219+00:00

Affected: RubyGems: rubygems-update

RubyGems versions 2.6.12 and earlier are vulnerable to maliciously crafted gem specifications that cause a denial of service attack against RubyGems clients who have issued a `query` command.

gsd-2017-0900

2026-10-03T09:09:42.640239+00:00

gsd-2017-0900

RHSA-2017:3485 — Red Hat Security Advisory: rh-ruby24-ruby security, bug fix, and enhancement update

2026-10-03T09:09:42.640251+00:00

ruby: Buffer underrun vulnerability in Kernel.sprintf rubygems: Escape sequence in the "summary" field of gemspec rubygems: No size limit in summary length of gem spec rubygems: Arbitrary file overwrite due to incorrect validation of specification name rubygems: DNS hijacking vulnerability rubygems: Unsafe object deserialization through YAML formatted gem specifications ruby: Escape sequence injection vulnerability in the Basic authentication of WEBrick ruby: Arbitrary heap exposure during a JSON.generate call

RHSA-2018:0378 — Red Hat Security Advisory: ruby security update

2026-10-03T09:09:42.640284+00:00

ruby: Buffer underrun vulnerability in Kernel.sprintf rubygems: Escape sequence in the "summary" field of gemspec rubygems: No size limit in summary length of gem spec rubygems: Arbitrary file overwrite due to incorrect validation of specification name rubygems: DNS hijacking vulnerability rubygems: Unsafe object deserialization through YAML formatted gem specifications ruby: Escape sequence injection vulnerability in the Basic authentication of WEBrick ruby: Buffer underrun in OpenSSL ASN1 decode ruby: Arbitrary heap exposure during a JSON.generate call ruby: Command injection vulnerability in Net::FTP ruby: Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code execution

SUSE-SU-2020:1570-1 — Security update for ruby2.1

2026-10-03T09:09:42.640317+00:00

Security update for ruby2.1

UBUNTU-CVE-2017-0900

2026-10-03T09:09:42.640352+00:00

Affected: Ubuntu:14.04:LTS: ruby1.9.1, Ubuntu:Pro:14.04:LTS: jruby, Ubuntu:16.04:LTS: ruby2.3, Ubuntu:16.04:LTS: jruby, Ubuntu:18.04:LTS: jruby, Ubuntu:20.04:LTS: jruby, Ubuntu:24.04:LTS: jruby, Ubuntu:25.10: jruby, Ubuntu:26.04:LTS: jruby

RubyGems version 2.6.12 and earlier is vulnerable to maliciously crafted gem specifications to cause a denial of service attack against RubyGems clients who have issued a `query` command.

WID-SEC-W-2026-1421 — Ruby: Mehrere Schwachstellen

2026-10-03T09:09:42.640382+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Ruby ausnutzen, um falsche Informationen darzustellen, Systemdateien zu manipulieren oder beliebigen Programmcode zur Ausführung bringen.