Most recent entries from all

bdu:2020-05763

Withdrawn: BELL-CVE-2020-8130 — CVE-2020-8130 does not affect BellSoft software

Withdrawn by the publisher.

BREW-mikutter-CVE-2020-8130 — OS Command Injection in Rake

Affected: Homebrew: mikutter

There is an OS command injection vulnerability in Ruby Rake before 12.3.3 in `Rake::FileList` when supplying a filename that begins with the pipe character `|`.

certfr-2025-avi-0899 — De multiples vulnérabilités ont été découvertes dans les produits Microsoft. Certaines d'entre elles permettent à un at…

certfr-2025-avi-0899

cnvd-2020-13472

EUVD-2026-38255

fkie_cve-2020-8130

There is an OS command injection vulnerability in Ruby Rake < 12.3.3 in Rake::FileList when supplying a filename that begins with the pipe character `|`.

GHSA-jppv-gw3r-w3q8 — OS Command Injection in Rake

Affected: RubyGems: rake

There is an OS command injection vulnerability in Ruby Rake before 12.3.3 in `Rake::FileList` when supplying a filename that begins with the pipe character `|`.

gsd-2020-8130

msrc_CVE-2020-8130 — There is an OS command injection vulnerability in Ruby Rake < 12.3.3 in Rake::FileList when supplying a filename that b…

msrc_CVE-2020-8130

openSUSE-SU-2020:0395-1 — Recommended update for ruby2.5

Recommended update for ruby2.5

RHSA-2021:4702 — Red Hat Security Advisory: Satellite 6.10 Release

python-ecdsa: Unexpected and undocumented exceptions during signature decoding python-ecdsa: DER encoding is not being verified in signatures rubygem-activerecord-session_store: hijack sessions by using timing attacks targeting the session id rake: OS Command Injection via egrep in Rake::FileList guava: local information disclosure via temporary directory created with unsafe permissions PyYAML: incomplete fix for CVE-2020-1747 rubygem-nokogiri: XML external entity injection via Nokogiri::XML::Schema Satellite: Azure compute resource secret_key leak to authenticated users foreman: possible man-in-the-middle in smart_proxy realm_freeipa Satellite: BMC controller credential leak via API python-aiohttp: Open redirect in aiohttp.web_middlewares.normalize_path_middleware rubygem-actionpack: Possible Information Disclosure / Unintended Method Execution in Action Pack rails: Possible Denial of Service vulnerability in Action Dispatch rails: Possible DoS Vulnerability in Action Controller Token Authentication django: potential directory-traversal via uploaded files rubygem-puma: incomplete fix for CVE-2019-16770 allows Denial of Service (DoS) django: Potential directory-traversal via uploaded files rubygem-addressable: ReDoS in templates django: Potential directory traversal via ``admindocs`` python-urllib3: ReDoS in the parsing of authority part of URL django: Possible indeterminate SSRF, RFI, and LFI attacks since validators accepted leading zeros in IPv4 addresses

SUSE-SU-2020:0737-1 — Recommended update for ruby2.5

Recommended update for ruby2.5

UBUNTU-CVE-2020-8130

Affected: Ubuntu:16.04:LTS: rake, Ubuntu:18.04:LTS: rake

There is an OS command injection vulnerability in Ruby Rake < 12.3.3 in Rake::FileList when supplying a filename that begins with the pipe character `|`.