Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 08:12:11 +0000 certa-2011-avi-101 — Deux vulnérabilités dans Ruby ont été corrigées. La première permet de contourner la politique de sécurité et la second… https://cve.radiocsirt.org/vuln/certa-2011-avi-101 certa-2011-avi-101 https://cve.radiocsirt.org/vuln/certa-2011-avi-101 EUVD-2026-114399 https://cve.radiocsirt.org/vuln/euvd-2026-114399 EUVD-2026-114399 https://cve.radiocsirt.org/vuln/euvd-2026-114399 fkie_cve-2011-1004 https://cve.radiocsirt.org/vuln/fkie_cve-2011-1004 <p>The FileUtils.remove_entry_secure method in Ruby 1.8.6 through 1.8.6-420, 1.8.7 through 1.8.7-330, 1.8.8dev, 1.9.1 through 1.9.1-430, 1.9.2 through 1.9.2-136, and 1.9.3dev allows local users to delete arbitrary files via a symlink attack.</p> <p>The FileUtils.remove_entry_secure method in Ruby 1.8.6 through 1.8.6-420, 1.8.7 through 1.8.7-330, 1.8.8dev, 1.9.1 through 1.9.1-430, 1.9.2 through 1.9.2-136, and 1.9.3dev allows local users to delete arbitrary files via a symlink attack.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2011-1004 GHSA-45wv-gc6w-fq7m https://cve.radiocsirt.org/vuln/ghsa-45wv-gc6w-fq7m <p>The FileUtils.remove_entry_secure method in Ruby 1.8.6 through 1.8.6-420, 1.8.7 through 1.8.7-330, 1.8.8dev, 1.9.1 through 1.9.1-430, 1.9.2 through 1.9.2-136, and 1.9.3dev allows local users to delete arbitrary files via a symlink attack.</p> <p>The FileUtils.remove_entry_secure method in Ruby 1.8.6 through 1.8.6-420, 1.8.7 through 1.8.7-330, 1.8.8dev, 1.9.1 through 1.9.1-430, 1.9.2 through 1.9.2-136, and 1.9.3dev allows local users to delete arbitrary files via a symlink attack.</p> https://cve.radiocsirt.org/vuln/ghsa-45wv-gc6w-fq7m gsd-2011-1004 https://cve.radiocsirt.org/vuln/gsd-2011-1004 gsd-2011-1004 https://cve.radiocsirt.org/vuln/gsd-2011-1004 RHSA-2011:0909 — Red Hat Security Advisory: ruby security update https://cve.radiocsirt.org/vuln/rhsa-2011:0909 <p>ruby WEBrick log escape sequence Ruby WEBrick javascript injection flaw ruby: memory corruption in BigDecimal on 64bit platforms Ruby: Symlink race condition by removing directory trees in fileutils module Ruby: Untrusted codes able to modify arbitrary strings</p> <p>ruby WEBrick log escape sequence Ruby WEBrick javascript injection flaw ruby: memory corruption in BigDecimal on 64bit platforms Ruby: Symlink race condition by removing directory trees in fileutils module Ruby: Untrusted codes able to modify arbitrary strings</p> https://cve.radiocsirt.org/vuln/rhsa-2011:0909