https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T23:20:12.815586+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2019-04156 bdu:2019-04156 2026-10-02T23:20:13.085196+00:00 bdu:2019-04156 https://cve.radiocsirt.org/vuln/bell-cve-2017-17742 Withdrawn: BELL-CVE-2017-17742 — CVE-2017-17742 does not affect BellSoft software 2026-10-02T23:20:13.085242+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certfr-2018-avi-524 certfr-2018-avi-524 — De multiples vulnérabilités ont été découvertes dans les produits Apple. Certaines d'entre elles permettent à un attaqu… 2026-10-02T23:20:13.085278+00:00 certfr-2018-avi-524 https://cve.radiocsirt.org/vuln/cleanstart-2026-un39292 CLEANSTART-2026-UN39292 — Security fix for CVE-2017-17742 applied in: ruby 2.5.1-r0 2026-10-02T23:20:13.085313+00:00

Affected: CleanStart: ruby

Security vulnerability affects the ruby package. This issue is resolved in later releases. See references for vulnerability details.

 https://cve.radiocsirt.org/vuln/cnvd-2018-08933 cnvd-2018-08933 2026-10-02T23:20:13.085373+00:00 cnvd-2018-08933 https://cve.radiocsirt.org/vuln/euvd-2026-79752 EUVD-2026-79752 2026-10-02T23:20:13.085413+00:00 EUVD-2026-79752 https://cve.radiocsirt.org/vuln/fkie_cve-2017-17742 fkie_cve-2017-17742 2026-10-02T23:20:13.085447+00:00

Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0-preview1 allows an HTTP Response Splitting attack. An attacker can inject a crafted key and value into an HTTP response for the HTTP server of WEBrick.

 https://cve.radiocsirt.org/vuln/ghsa-7p4c-jf2w-hc3w GHSA-7p4c-jf2w-hc3w 2026-10-02T23:20:13.085502+00:00

Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0-preview1 allows an HTTP Response Splitting attack. An attacker can inject a crafted key and value into an HTTP response for the HTTP server of WEBrick.

 https://cve.radiocsirt.org/vuln/gsd-2017-17742 gsd-2017-17742 2026-10-02T23:20:13.085549+00:00 gsd-2017-17742 https://cve.radiocsirt.org/vuln/opensuse-su-2019:1771-1 openSUSE-SU-2019:1771-1 — Security update for ruby-bundled-gems-rpmhelper, ruby2.5 2026-10-02T23:20:13.085575+00:00

Security update for ruby-bundled-gems-rpmhelper, ruby2.5

 https://cve.radiocsirt.org/vuln/rhsa-2018:3729 RHSA-2018:3729 — Red Hat Security Advisory: rh-ruby23-ruby security, bug fix, and enhancement update 2026-10-02T23:20:13.085621+00:00

ruby: HTTP response splitting in WEBrick ruby: Unintentional file and directory creation with directory traversal in tempfile and tmpdir ruby: DoS by large request in WEBrick ruby: Buffer under-read in String#unpack ruby: Unintentional socket creation by poisoned NULL byte in UNIXServer and UNIXSocket ruby: Unintentional directory traversal by poisoned NULL byte in Dir ruby: OpenSSL::X509:: Name equality check does not work correctly ruby: Tainted flags are not propagated in Array#pack and String#unpack with some directives rubygems: Path traversal when writing to a symlinked basedir outside of the root rubygems: Unsafe Object Deserialization Vulnerability in gem owner allowing arbitrary code execution on specially crafted YAML rubygems: Infinite loop vulnerability due to negative size in tar header causes Denial of Service rubygems: Improper verification of signatures in tarball allows to install mis-signed gem rubygems: Missing URL validation on spec home attribute allows malicious gem to set an invalid homepage URL rubygems: XSS vulnerability in homepage attribute when displayed via gem server rubygems: Path traversal issue during gem installation allows to write to arbitrary filesystem locations

 https://cve.radiocsirt.org/vuln/suse-su-2019:1804-1 SUSE-SU-2019:1804-1 — Security update for ruby-bundled-gems-rpmhelper, ruby2.5 2026-10-02T23:20:13.085697+00:00

Security update for ruby-bundled-gems-rpmhelper, ruby2.5

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-17742 UBUNTU-CVE-2017-17742 2026-10-02T23:20:13.085747+00:00

Affected: Ubuntu:14.04:LTS: ruby1.9.1, Ubuntu:14.04:LTS: ruby2.0, Ubuntu:Pro:14.04:LTS: jruby, Ubuntu:16.04:LTS: ruby2.3, Ubuntu:16.04:LTS: jruby, Ubuntu:18.04:LTS: jruby, Ubuntu:20.04:LTS: jruby, Ubuntu:24.04:LTS: jruby, Ubuntu:25.10: jruby, Ubuntu:26.04:LTS: jruby

Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0-preview1 allows an HTTP Response Splitting attack. An attacker can inject a crafted key and value into an HTTP response for the HTTP server of WEBrick.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1111 WID-SEC-W-2023-1111 — Ruby: Mehrere Schwachstellen 2026-10-02T23:20:13.085795+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Ruby ausnutzen, um Daten zu manipulieren, vertrauliche Daten einzusehen oder einen Denial of Service Angriff durchzuführen.