https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T11:52:36.197958+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2018-01597 bdu:2018-01597 2026-10-03T11:52:36.400035+00:00 bdu:2018-01597 https://cve.radiocsirt.org/vuln/certfr-2022-avi-267 certfr-2022-avi-267 — De multiples vulnérabilités ont été découvertes dans Juniper Networks Junos Space. Elles permettent à un attaquant de p… 2026-10-03T11:52:36.400084+00:00 certfr-2022-avi-267 https://cve.radiocsirt.org/vuln/cnvd-2018-06395 cnvd-2018-06395 2026-10-03T11:52:36.400104+00:00 cnvd-2018-06395 https://cve.radiocsirt.org/vuln/euvd-2026-71065 EUVD-2026-71065 2026-10-03T11:52:36.400117+00:00 EUVD-2026-71065 https://cve.radiocsirt.org/vuln/fkie_cve-2018-1000078 fkie_cve-2018-1000078 2026-10-03T11:52:36.400128+00:00

RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contains a Cross Site Scripting (XSS) vulnerability in gem server display of homepage attribute that can result in XSS. This attack appear to be exploitable via the victim must browse to a malicious gem on a vulnerable gem server. This vulnerability appears to have been fixed in 2.7.6.

 https://cve.radiocsirt.org/vuln/ghsa-87qx-g5wg-mwmj GHSA-87qx-g5wg-mwmj — RubyGems Cross-site Scripting vulnerability 2026-10-03T11:52:36.400159+00:00

Affected: RubyGems: rubygems-update, Maven: org.jruby:jruby-stdlib

RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contains a Cross Site Scripting (XSS) vulnerability in gem server display of homepage attribute that can result in XSS. This attack requires the victim to browse to a malicious gem on a vulnerable gem server. This vulnerability is fixed in 2.7.6.

 https://cve.radiocsirt.org/vuln/gsd-2018-1000078 gsd-2018-1000078 2026-10-03T11:52:36.400187+00:00 gsd-2018-1000078 https://cve.radiocsirt.org/vuln/opensuse-su-2019:1771-1 openSUSE-SU-2019:1771-1 — Security update for ruby-bundled-gems-rpmhelper, ruby2.5 2026-10-03T11:52:36.400199+00:00

Security update for ruby-bundled-gems-rpmhelper, ruby2.5

 https://cve.radiocsirt.org/vuln/rhsa-2018:3729 RHSA-2018:3729 — Red Hat Security Advisory: rh-ruby23-ruby security, bug fix, and enhancement update 2026-10-03T11:52:36.400228+00:00

ruby: HTTP response splitting in WEBrick ruby: Unintentional file and directory creation with directory traversal in tempfile and tmpdir ruby: DoS by large request in WEBrick ruby: Buffer under-read in String#unpack ruby: Unintentional socket creation by poisoned NULL byte in UNIXServer and UNIXSocket ruby: Unintentional directory traversal by poisoned NULL byte in Dir ruby: OpenSSL::X509:: Name equality check does not work correctly ruby: Tainted flags are not propagated in Array#pack and String#unpack with some directives rubygems: Path traversal when writing to a symlinked basedir outside of the root rubygems: Unsafe Object Deserialization Vulnerability in gem owner allowing arbitrary code execution on specially crafted YAML rubygems: Infinite loop vulnerability due to negative size in tar header causes Denial of Service rubygems: Improper verification of signatures in tarball allows to install mis-signed gem rubygems: Missing URL validation on spec home attribute allows malicious gem to set an invalid homepage URL rubygems: XSS vulnerability in homepage attribute when displayed via gem server rubygems: Path traversal issue during gem installation allows to write to arbitrary filesystem locations

 https://cve.radiocsirt.org/vuln/suse-su-2019:1804-1 SUSE-SU-2019:1804-1 — Security update for ruby-bundled-gems-rpmhelper, ruby2.5 2026-10-03T11:52:36.400271+00:00

Security update for ruby-bundled-gems-rpmhelper, ruby2.5

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-1000078 UBUNTU-CVE-2018-1000078 2026-10-03T11:52:36.400299+00:00

Affected: Ubuntu:14.04:LTS: ruby1.9.1, Ubuntu:14.04:LTS: ruby2.0, Ubuntu:Pro:14.04:LTS: jruby, Ubuntu:16.04:LTS: ruby2.3, Ubuntu:16.04:LTS: jruby, Ubuntu:18.04:LTS: jruby

RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contains a Cross Site Scripting (XSS) vulnerability in gem server display of homepage attribute that can result in XSS. This attack appear to be exploitable via the victim must browse to a malicious gem on a vulnerable gem server. This vulnerability appears to have been fixed in 2.7.6.