https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 02:34:45 +0000 https://cve.radiocsirt.org/vuln/brew-braid-cve-2013-0269 <p><strong>Affected:</strong> Homebrew: braid</p> <p>The JSON gem before 1.5.5, 1.6.x before 1.6.8, and 1.7.x before 1.7.7 for Ruby allows remote attackers to cause a denial of service (resource consumption) or bypass the mass assignment protection mechanism via a crafted JSON document that triggers the creation of arbitrary Ruby symbols or certain internal objects, as demonstrated by conducting a SQL injection attack against Ruby on Rails, aka &#34;Unsafe Object Creation Vulnerability.&#34;</p> <p><strong>Affected:</strong> Homebrew: braid</p> <p>The JSON gem before 1.5.5, 1.6.x before 1.6.8, and 1.7.x before 1.7.7 for Ruby allows remote attackers to cause a denial of service (resource consumption) or bypass the mass assignment protection mechanism via a crafted JSON document that triggers the creation of arbitrary Ruby symbols or certain internal objects, as demonstrated by conducting a SQL injection attack against Ruby on Rails, aka &#34;Unsafe Object Creation Vulnerability.&#34;</p> https://cve.radiocsirt.org/vuln/brew-braid-cve-2013-0269 https://cve.radiocsirt.org/vuln/certa-2013-avi-133 certa-2013-avi-133 https://cve.radiocsirt.org/vuln/certa-2013-avi-133 https://cve.radiocsirt.org/vuln/euvd-2026-104562 EUVD-2026-104562 https://cve.radiocsirt.org/vuln/euvd-2026-104562 https://cve.radiocsirt.org/vuln/fkie_cve-2013-0269 <p>The JSON gem before 1.5.5, 1.6.x before 1.6.8, and 1.7.x before 1.7.7 for Ruby allows remote attackers to cause a denial of service (resource consumption) or bypass the mass assignment protection mechanism via a crafted JSON document that triggers the creation of arbitrary Ruby symbols or certain internal objects, as demonstrated by conducting a SQL injection attack against Ruby on Rails, aka &#34;Unsafe Object Creation Vulnerability.&#34;</p> <p>The JSON gem before 1.5.5, 1.6.x before 1.6.8, and 1.7.x before 1.7.7 for Ruby allows remote attackers to cause a denial of service (resource consumption) or bypass the mass assignment protection mechanism via a crafted JSON document that triggers the creation of arbitrary Ruby symbols or certain internal objects, as demonstrated by conducting a SQL injection attack against Ruby on Rails, aka &#34;Unsafe Object Creation Vulnerability.&#34;</p> https://cve.radiocsirt.org/vuln/fkie_cve-2013-0269 https://cve.radiocsirt.org/vuln/ghsa-x457-cw4h-hq5f <p><strong>Affected:</strong> RubyGems: json</p> <p>The JSON gem before 1.5.5, 1.6.x before 1.6.8, and 1.7.x before 1.7.7 for Ruby allows remote attackers to cause a denial of service (resource consumption) or bypass the mass assignment protection mechanism via a crafted JSON document that triggers the creation of arbitrary Ruby symbols or certain internal objects, as demonstrated by conducting a SQL injection attack against Ruby on Rails, aka &#34;Unsafe Object Creation Vulnerability.&#34;</p> <p><strong>Affected:</strong> RubyGems: json</p> <p>The JSON gem before 1.5.5, 1.6.x before 1.6.8, and 1.7.x before 1.7.7 for Ruby allows remote attackers to cause a denial of service (resource consumption) or bypass the mass assignment protection mechanism via a crafted JSON document that triggers the creation of arbitrary Ruby symbols or certain internal objects, as demonstrated by conducting a SQL injection attack against Ruby on Rails, aka &#34;Unsafe Object Creation Vulnerability.&#34;</p> https://cve.radiocsirt.org/vuln/ghsa-x457-cw4h-hq5f https://cve.radiocsirt.org/vuln/gsd-2013-0269 gsd-2013-0269 https://cve.radiocsirt.org/vuln/gsd-2013-0269 https://cve.radiocsirt.org/vuln/rhsa-2013:0686 <p>Candlepin: bootstrap RPM deploys CA certificate file with mode 666 Candlepin: Re-enable manifest signature checking rubygem-rdoc: Cross-site scripting in the documentation created by Darkfish Rdoc HTML generator / template rubygem-rack: Timing attack in cookie sessions rubygem-json: Denial of Service and SQL Injection rubygem-activerecord/rubygem-activemodel: circumvention of attr_protected Katello: Notifications page Username XSS</p> <p>Candlepin: bootstrap RPM deploys CA certificate file with mode 666 Candlepin: Re-enable manifest signature checking rubygem-rdoc: Cross-site scripting in the documentation created by Darkfish Rdoc HTML generator / template rubygem-rack: Timing attack in cookie sessions rubygem-json: Denial of Service and SQL Injection rubygem-activerecord/rubygem-activemodel: circumvention of attr_protected Katello: Notifications page Username XSS</p> https://cve.radiocsirt.org/vuln/rhsa-2013:0686 https://cve.radiocsirt.org/vuln/ubuntu-cve-2013-0269 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: ruby-json</p> <p>The JSON gem before 1.5.5, 1.6.x before 1.6.8, and 1.7.x before 1.7.7 for Ruby allows remote attackers to cause a denial of service (resource consumption) or bypass the mass assignment protection mechanism via a crafted JSON document that triggers the creation of arbitrary Ruby symbols or certain internal objects, as demonstrated by conducting a SQL injection attack against Ruby on Rails, aka &#34;Unsafe Object Creation Vulnerability.&#34;</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: ruby-json</p> <p>The JSON gem before 1.5.5, 1.6.x before 1.6.8, and 1.7.x before 1.7.7 for Ruby allows remote attackers to cause a denial of service (resource consumption) or bypass the mass assignment protection mechanism via a crafted JSON document that triggers the creation of arbitrary Ruby symbols or certain internal objects, as demonstrated by conducting a SQL injection attack against Ruby on Rails, aka &#34;Unsafe Object Creation Vulnerability.&#34;</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2013-0269 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1601 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat JBoss Enterprise SOA Platform ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um Informationen zu manipulieren oder um einen Denial of Service Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat JBoss Enterprise SOA Platform ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um Informationen zu manipulieren oder um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1601