https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 01:16:59 +0000 https://cve.radiocsirt.org/vuln/bdu:2016-00903 bdu:2016-00903 https://cve.radiocsirt.org/vuln/bdu:2016-00903 https://cve.radiocsirt.org/vuln/certfr-2016-avi-106 certfr-2016-avi-106 https://cve.radiocsirt.org/vuln/certfr-2016-avi-106 https://cve.radiocsirt.org/vuln/cnvd-2016-01874 cnvd-2016-01874 https://cve.radiocsirt.org/vuln/cnvd-2016-01874 https://cve.radiocsirt.org/vuln/euvd-2026-95071 EUVD-2026-95071 https://cve.radiocsirt.org/vuln/euvd-2026-95071 https://cve.radiocsirt.org/vuln/fkie_cve-2015-7551 <p>The Fiddle::Handle implementation in ext/fiddle/handle.c in Ruby before 2.0.0-p648, 2.1 before 2.1.8, and 2.2 before 2.2.4, as distributed in Apple OS X before 10.11.4 and other products, mishandles tainting, which allows context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted string, related to the DL module and the libffi library. NOTE: this vulnerability exists because of a CVE-2009-5147 regression.</p> <p>The Fiddle::Handle implementation in ext/fiddle/handle.c in Ruby before 2.0.0-p648, 2.1 before 2.1.8, and 2.2 before 2.2.4, as distributed in Apple OS X before 10.11.4 and other products, mishandles tainting, which allows context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted string, related to the DL module and the libffi library. NOTE: this vulnerability exists because of a CVE-2009-5147 regression.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-7551 https://cve.radiocsirt.org/vuln/ghsa-m9xr-x5mq-4fp5 <p>The Fiddle::Handle implementation in ext/fiddle/handle.c in Ruby before 2.0.0-p648, 2.1 before 2.1.8, and 2.2 before 2.2.4, as distributed in Apple OS X before 10.11.4 and other products, mishandles tainting, which allows context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted string, related to the DL module and the libffi library. NOTE: this vulnerability exists because of a CVE-2009-5147 regression.</p> <p>The Fiddle::Handle implementation in ext/fiddle/handle.c in Ruby before 2.0.0-p648, 2.1 before 2.1.8, and 2.2 before 2.2.4, as distributed in Apple OS X before 10.11.4 and other products, mishandles tainting, which allows context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted string, related to the DL module and the libffi library. NOTE: this vulnerability exists because of a CVE-2009-5147 regression.</p> https://cve.radiocsirt.org/vuln/ghsa-m9xr-x5mq-4fp5 https://cve.radiocsirt.org/vuln/gsd-2015-7551 gsd-2015-7551 https://cve.radiocsirt.org/vuln/gsd-2015-7551 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10481-1 <p>libruby2_2-2_2-2.2.5-1.5 on GA media</p> <p>libruby2_2-2_2-2.2.5-1.5 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10481-1 https://cve.radiocsirt.org/vuln/rhsa-2018:0583 <p>ruby: dlopen could open a library with tainted library name ruby: dlopen could open a library with tainted library name ruby: Buffer underrun vulnerability in Kernel.sprintf rubygems: Escape sequence in the &#34;summary&#34; field of gemspec rubygems: No size limit in summary length of gem spec rubygems: Arbitrary file overwrite due to incorrect validation of specification name rubygems: DNS hijacking vulnerability rubygems: Unsafe object deserialization through YAML formatted gem specifications ruby: Escape sequence injection vulnerability in the Basic authentication of WEBrick ruby: Buffer underrun in OpenSSL ASN1 decode ruby: Arbitrary heap exposure during a JSON.generate call ruby: Command injection vulnerability in Net::FTP ruby: Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code execution</p> <p>ruby: dlopen could open a library with tainted library name ruby: dlopen could open a library with tainted library name ruby: Buffer underrun vulnerability in Kernel.sprintf rubygems: Escape sequence in the &#34;summary&#34; field of gemspec rubygems: No size limit in summary length of gem spec rubygems: Arbitrary file overwrite due to incorrect validation of specification name rubygems: DNS hijacking vulnerability rubygems: Unsafe object deserialization through YAML formatted gem specifications ruby: Escape sequence injection vulnerability in the Basic authentication of WEBrick ruby: Buffer underrun in OpenSSL ASN1 decode ruby: Arbitrary heap exposure during a JSON.generate call ruby: Command injection vulnerability in Net::FTP ruby: Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code execution</p> https://cve.radiocsirt.org/vuln/rhsa-2018:0583 https://cve.radiocsirt.org/vuln/suse-su-2017:0948-1 <p>Security update for ruby</p> <p>Security update for ruby</p> https://cve.radiocsirt.org/vuln/suse-su-2017:0948-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-7551 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: ruby2.0</p> <p>The Fiddle::Handle implementation in ext/fiddle/handle.c in Ruby before 2.0.0-p648, 2.1 before 2.1.8, and 2.2 before 2.2.4, as distributed in Apple OS X before 10.11.4 and other products, mishandles tainting, which allows context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted string, related to the DL module and the libffi library. NOTE: this vulnerability exists because of a CVE-2009-5147 regression.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: ruby2.0</p> <p>The Fiddle::Handle implementation in ext/fiddle/handle.c in Ruby before 2.0.0-p648, 2.1 before 2.1.8, and 2.2 before 2.2.4, as distributed in Apple OS X before 10.11.4 and other products, mishandles tainting, which allows context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted string, related to the DL module and the libffi library. NOTE: this vulnerability exists because of a CVE-2009-5147 regression.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-7551