https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:09:37.669186+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2022-avi-267 certfr-2022-avi-267 — De multiples vulnérabilités ont été découvertes dans Juniper Networks Junos Space. Elles permettent à un attaquant de p… 2026-10-03T09:09:37.778743+00:00 certfr-2022-avi-267 https://cve.radiocsirt.org/vuln/cnvd-2017-30057 cnvd-2017-30057 2026-10-03T09:09:37.778788+00:00 cnvd-2017-30057 https://cve.radiocsirt.org/vuln/euvd-2026-184778 EUVD-2026-184778 2026-10-03T09:09:37.778804+00:00 EUVD-2026-184778 https://cve.radiocsirt.org/vuln/fkie_cve-2017-0903 fkie_cve-2017-0903 2026-10-03T09:09:37.778816+00:00

RubyGems versions between 2.0.0 and 2.6.13 are vulnerable to a possible remote code execution vulnerability. YAML deserialization of gem specifications can bypass class white lists. Specially crafted serialized objects can possibly be used to escalate to remote code execution.

 https://cve.radiocsirt.org/vuln/ghsa-mqwr-4qf2-2hcv GHSA-mqwr-4qf2-2hcv — RubyGems vulnerable to Deserialization of Untrusted Data 2026-10-03T09:09:37.778843+00:00

Affected: RubyGems: rubygems-update

RubyGems versions between 2.0.0 and 2.6.13 are vulnerable to a possible remote code execution vulnerability. YAML deserialization of gem specifications can bypass class white lists. Specially crafted serialized objects can possibly be used to escalate to remote code execution. The issue has been patched in 2.6.14.

 https://cve.radiocsirt.org/vuln/gsd-2017-0903 gsd-2017-0903 2026-10-03T09:09:37.778868+00:00 gsd-2017-0903 https://cve.radiocsirt.org/vuln/rhsa-2017:3485 RHSA-2017:3485 — Red Hat Security Advisory: rh-ruby24-ruby security, bug fix, and enhancement update 2026-10-03T09:09:37.778879+00:00

ruby: Buffer underrun vulnerability in Kernel.sprintf rubygems: Escape sequence in the "summary" field of gemspec rubygems: No size limit in summary length of gem spec rubygems: Arbitrary file overwrite due to incorrect validation of specification name rubygems: DNS hijacking vulnerability rubygems: Unsafe object deserialization through YAML formatted gem specifications ruby: Escape sequence injection vulnerability in the Basic authentication of WEBrick ruby: Arbitrary heap exposure during a JSON.generate call

 https://cve.radiocsirt.org/vuln/rhsa-2018:0378 RHSA-2018:0378 — Red Hat Security Advisory: ruby security update 2026-10-03T09:09:37.778914+00:00

ruby: Buffer underrun vulnerability in Kernel.sprintf rubygems: Escape sequence in the "summary" field of gemspec rubygems: No size limit in summary length of gem spec rubygems: Arbitrary file overwrite due to incorrect validation of specification name rubygems: DNS hijacking vulnerability rubygems: Unsafe object deserialization through YAML formatted gem specifications ruby: Escape sequence injection vulnerability in the Basic authentication of WEBrick ruby: Buffer underrun in OpenSSL ASN1 decode ruby: Arbitrary heap exposure during a JSON.generate call ruby: Command injection vulnerability in Net::FTP ruby: Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code execution

 https://cve.radiocsirt.org/vuln/suse-su-2020:1570-1 SUSE-SU-2020:1570-1 — Security update for ruby2.1 2026-10-03T09:09:37.778948+00:00

Security update for ruby2.1

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-0903 UBUNTU-CVE-2017-0903 2026-10-03T09:09:37.778987+00:00

Affected: Ubuntu:14.04:LTS: ruby2.0, Ubuntu:Pro:14.04:LTS: jruby, Ubuntu:16.04:LTS: ruby2.3, Ubuntu:16.04:LTS: jruby

RubyGems versions between 2.0.0 and 2.6.13 are vulnerable to a possible remote code execution vulnerability. YAML deserialization of gem specifications can bypass class white lists. Specially crafted serialized objects can possibly be used to escalate to remote code execution.