Most recent entries from all

EUVD-2026-104514

fkie_cve-2013-0162

The diff_pp function in lib/gauntlet_rubyparser.rb in the ruby_parser gem 3.1.1 and earlier for Ruby allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp.

GHSA-8mvw-22r7-w6fq — ruby_parser allows local users to overwrite arbitrary files via symlink attack on temporary file with predictable name

Affected: RubyGems: ruby_parser

The `diff_pp` function in `lib/gauntlet_rubyparser.rb` in the ruby_parser gem 3.1.1 and earlier for Ruby allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in `/tmp`.

gsd-2013-0162

RHSA-2013:0544 — Red Hat Security Advisory: Subscription Asset Manager 1.2 update

Katello: /etc/katello/secure/passphrase is world readable Katello: lack of authorization in proxies_controller.rb rubygem-rack: parsing Content-Disposition header DoS rubygem-ruby_parser: incorrect temporary file usage rubygem-rack: receiving excessively long lines triggers out-of-memory error rubygem-rack: Rack::Auth:: AbstractRequest DoS

UBUNTU-CVE-2013-0162

Affected: Ubuntu:16.04:LTS: ruby-parser, Ubuntu:18.04:LTS: ruby-parser, Ubuntu:20.04:LTS: ruby-parser