Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 08:31:23 +0000 cnvd-2015-04096 https://cve.radiocsirt.org/vuln/cnvd-2015-04096 cnvd-2015-04096 https://cve.radiocsirt.org/vuln/cnvd-2015-04096 EUVD-2026-92202 https://cve.radiocsirt.org/vuln/euvd-2026-92202 EUVD-2026-92202 https://cve.radiocsirt.org/vuln/euvd-2026-92202 fkie_cve-2015-3900 https://cve.radiocsirt.org/vuln/fkie_cve-2015-3900 <p>RubyGems 2.0.x before 2.0.16, 2.2.x before 2.2.4, and 2.4.x before 2.4.7 does not validate the hostname when fetching gems or making API requests, which allows remote attackers to redirect requests to arbitrary domains via a crafted DNS SRV record, aka a &#34;DNS hijack attack.&#34;</p> <p>RubyGems 2.0.x before 2.0.16, 2.2.x before 2.2.4, and 2.4.x before 2.4.7 does not validate the hostname when fetching gems or making API requests, which allows remote attackers to redirect requests to arbitrary domains via a crafted DNS SRV record, aka a &#34;DNS hijack attack.&#34;</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-3900 GHSA-wp3j-rvfp-624h — RubyGems vulnerable to DNS hijack attack https://cve.radiocsirt.org/vuln/ghsa-wp3j-rvfp-624h <p><strong>Affected:</strong> RubyGems: rubygems-update</p> <p>RubyGems 2.0.x before 2.0.16, 2.2.x before 2.2.4, and 2.4.x before 2.4.7 does not validate the hostname when fetching gems or making API requests, which allows remote attackers to redirect requests to arbitrary domains via a crafted DNS SRV record, aka a &#34;DNS hijack attack.&#34;</p> <p><strong>Affected:</strong> RubyGems: rubygems-update</p> <p>RubyGems 2.0.x before 2.0.16, 2.2.x before 2.2.4, and 2.4.x before 2.4.7 does not validate the hostname when fetching gems or making API requests, which allows remote attackers to redirect requests to arbitrary domains via a crafted DNS SRV record, aka a &#34;DNS hijack attack.&#34;</p> https://cve.radiocsirt.org/vuln/ghsa-wp3j-rvfp-624h gsd-2015-3900 https://cve.radiocsirt.org/vuln/gsd-2015-3900 gsd-2015-3900 https://cve.radiocsirt.org/vuln/gsd-2015-3900 openSUSE-SU-2024:10090-1 — libruby2_3-2_3-2.3.1-1.6 on GA media https://cve.radiocsirt.org/vuln/opensuse-su-2024:10090-1 <p>libruby2_3-2_3-2.3.1-1.6 on GA media</p> <p>libruby2_3-2_3-2.3.1-1.6 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10090-1 RHSA-2015:1657 — Red Hat Security Advisory: rh-ruby22-ruby security update https://cve.radiocsirt.org/vuln/rhsa-2015:1657 <p>rubygems: DNS hijacking vulnerability in api_endpoint()</p> <p>rubygems: DNS hijacking vulnerability in api_endpoint()</p> https://cve.radiocsirt.org/vuln/rhsa-2015:1657 SUSE-SU-2017:1067-1 — Security update for ruby2.1 https://cve.radiocsirt.org/vuln/suse-su-2017:1067-1 <p>Security update for ruby2.1</p> <p>Security update for ruby2.1</p> https://cve.radiocsirt.org/vuln/suse-su-2017:1067-1