https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T21:31:47.640503+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2017-02342 bdu:2017-02342 2026-10-02T21:31:47.675077+00:00 bdu:2017-02342 https://cve.radiocsirt.org/vuln/bell-cve-2017-10784 Withdrawn: BELL-CVE-2017-10784 — CVE-2017-10784 does not affect BellSoft software 2026-10-02T21:31:47.675116+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/brew-serveit-cve-2017-10784 BREW-serveit-CVE-2017-10784 — WEBrick RCE Vulnerability 2026-10-02T21:31:47.675135+00:00

Affected: Homebrew: serveit

The Basic authentication code in WEBrick library in Ruby before 2.2.8, 2.3.x before 2.3.5, and 2.4.x through 2.4.1 allows remote attackers to inject terminal emulator escape sequences into its log and possibly execute arbitrary commands via a crafted user name.

 https://cve.radiocsirt.org/vuln/certfr-2018-avi-524 certfr-2018-avi-524 — De multiples vulnérabilités ont été découvertes dans les produits Apple. Certaines d'entre elles permettent à un attaqu… 2026-10-02T21:31:47.675165+00:00 certfr-2018-avi-524 https://cve.radiocsirt.org/vuln/cleanstart-2026-mz31215 CLEANSTART-2026-MZ31215 — Security fix for CVE-2017-10784 applied in: ruby 2.4.2-r0 2026-10-02T21:31:47.675181+00:00

Affected: CleanStart: ruby

Security vulnerability affects the ruby package. This issue is resolved in later releases. See references for vulnerability details.

 https://cve.radiocsirt.org/vuln/cnvd-2017-34706 cnvd-2017-34706 2026-10-02T21:31:47.675201+00:00 cnvd-2017-34706 https://cve.radiocsirt.org/vuln/euvd-2026-76346 EUVD-2026-76346 2026-10-02T21:31:47.675228+00:00 EUVD-2026-76346 https://cve.radiocsirt.org/vuln/fkie_cve-2017-10784 fkie_cve-2017-10784 2026-10-02T21:31:47.675240+00:00

The Basic authentication code in WEBrick library in Ruby before 2.2.8, 2.3.x before 2.3.5, and 2.4.x through 2.4.1 allows remote attackers to inject terminal emulator escape sequences into its log and possibly execute arbitrary commands via a crafted user name.

 https://cve.radiocsirt.org/vuln/ghsa-369m-2gv6-mw28 GHSA-369m-2gv6-mw28 — WEBrick RCE Vulnerability 2026-10-02T21:31:47.675262+00:00

Affected: RubyGems: webrick

The Basic authentication code in WEBrick library in Ruby before 2.2.8, 2.3.x before 2.3.5, and 2.4.x through 2.4.1 allows remote attackers to inject terminal emulator escape sequences into its log and possibly execute arbitrary commands via a crafted user name.

 https://cve.radiocsirt.org/vuln/gsd-2017-10784 gsd-2017-10784 2026-10-02T21:31:47.675281+00:00 gsd-2017-10784 https://cve.radiocsirt.org/vuln/rhsa-2017:3485 RHSA-2017:3485 — Red Hat Security Advisory: rh-ruby24-ruby security, bug fix, and enhancement update 2026-10-02T21:31:47.675292+00:00

ruby: Buffer underrun vulnerability in Kernel.sprintf rubygems: Escape sequence in the "summary" field of gemspec rubygems: No size limit in summary length of gem spec rubygems: Arbitrary file overwrite due to incorrect validation of specification name rubygems: DNS hijacking vulnerability rubygems: Unsafe object deserialization through YAML formatted gem specifications ruby: Escape sequence injection vulnerability in the Basic authentication of WEBrick ruby: Arbitrary heap exposure during a JSON.generate call

 https://cve.radiocsirt.org/vuln/rhsa-2018:0378 RHSA-2018:0378 — Red Hat Security Advisory: ruby security update 2026-10-02T21:31:47.675326+00:00

ruby: Buffer underrun vulnerability in Kernel.sprintf rubygems: Escape sequence in the "summary" field of gemspec rubygems: No size limit in summary length of gem spec rubygems: Arbitrary file overwrite due to incorrect validation of specification name rubygems: DNS hijacking vulnerability rubygems: Unsafe object deserialization through YAML formatted gem specifications ruby: Escape sequence injection vulnerability in the Basic authentication of WEBrick ruby: Buffer underrun in OpenSSL ASN1 decode ruby: Arbitrary heap exposure during a JSON.generate call ruby: Command injection vulnerability in Net::FTP ruby: Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code execution

 https://cve.radiocsirt.org/vuln/suse-su-2020:1570-1 SUSE-SU-2020:1570-1 — Security update for ruby2.1 2026-10-02T21:31:47.675360+00:00

Security update for ruby2.1

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-10784 UBUNTU-CVE-2017-10784 2026-10-02T21:31:47.675401+00:00

Affected: Ubuntu:14.04:LTS: ruby1.9.1, Ubuntu:14.04:LTS: ruby2.0, Ubuntu:16.04:LTS: ruby2.3

The Basic authentication code in WEBrick library in Ruby before 2.2.8, 2.3.x before 2.3.5, and 2.4.x through 2.4.1 allows remote attackers to inject terminal emulator escape sequences into its log and possibly execute arbitrary commands via a crafted user name.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1423 WID-SEC-W-2026-1423 — Ruby: Mehrere Schwachstellen 2026-10-02T21:31:47.675423+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Ruby ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen, einen Denial of Service Angriff durchzuführen oder Sicherheitsmechanismen zu umgehen.