https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 20:31:54 +0000 https://cve.radiocsirt.org/vuln/brew-serveit-cve-2009-4492 <p><strong>Affected:</strong> Homebrew: serveit</p> <p>WEBrick 1.3.1 in Ruby 1.8.6 through patchlevel 383, 1.8.7 through patchlevel 248, 1.8.8dev, 1.9.1 through patchlevel 376, and 1.9.2dev writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window&#39;s title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator.</p> <p><strong>Affected:</strong> Homebrew: serveit</p> <p>WEBrick 1.3.1 in Ruby 1.8.6 through patchlevel 383, 1.8.7 through patchlevel 248, 1.8.8dev, 1.9.1 through patchlevel 376, and 1.9.2dev writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window&#39;s title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator.</p> https://cve.radiocsirt.org/vuln/brew-serveit-cve-2009-4492 https://cve.radiocsirt.org/vuln/euvd-2026-124820 EUVD-2026-124820 https://cve.radiocsirt.org/vuln/euvd-2026-124820 https://cve.radiocsirt.org/vuln/fkie_cve-2009-4492 <p>WEBrick 1.3.1 in Ruby 1.8.6 through patchlevel 383, 1.8.7 through patchlevel 248, 1.8.8dev, 1.9.1 through patchlevel 376, and 1.9.2dev writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window&#39;s title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator.</p> <p>WEBrick 1.3.1 in Ruby 1.8.6 through patchlevel 383, 1.8.7 through patchlevel 248, 1.8.8dev, 1.9.1 through patchlevel 376, and 1.9.2dev writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window&#39;s title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2009-4492 https://cve.radiocsirt.org/vuln/ghsa-6mq2-37j5-w6r6 <p><strong>Affected:</strong> RubyGems: webrick</p> <p>WEBrick 1.3.1 in Ruby 1.8.6 through patchlevel 383, 1.8.7 through patchlevel 248, 1.8.8dev, 1.9.1 through patchlevel 376, and 1.9.2dev writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window&#39;s title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator.</p> <p><strong>Affected:</strong> RubyGems: webrick</p> <p>WEBrick 1.3.1 in Ruby 1.8.6 through patchlevel 383, 1.8.7 through patchlevel 248, 1.8.8dev, 1.9.1 through patchlevel 376, and 1.9.2dev writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window&#39;s title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator.</p> https://cve.radiocsirt.org/vuln/ghsa-6mq2-37j5-w6r6 https://cve.radiocsirt.org/vuln/gsd-2009-4492 gsd-2009-4492 https://cve.radiocsirt.org/vuln/gsd-2009-4492 https://cve.radiocsirt.org/vuln/rhsa-2011:0908 <p>ruby WEBrick log escape sequence Ruby WEBrick javascript injection flaw ruby: memory corruption in BigDecimal on 64bit platforms Ruby: Untrusted codes able to modify arbitrary strings</p> <p>ruby WEBrick log escape sequence Ruby WEBrick javascript injection flaw ruby: memory corruption in BigDecimal on 64bit platforms Ruby: Untrusted codes able to modify arbitrary strings</p> https://cve.radiocsirt.org/vuln/rhsa-2011:0908