Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

ruby-lang ruby 1.8.7-330 vulnerabilities and exploits

(subscribe to this query)
445
VMScore
CVE-2011-1005
The safe-level feature in Ruby 1.8.6 up to and including 1.8.6-420, 1.8.7 up to and including 1.8.7-330, and 1.8.8dev allows context-dependent malicious users to modify strings via the Exception#to_s method, as demonstrated by changing an intended pathname.
Ruby-lang Ruby 1.8.7-330Ruby-lang Ruby 1.8.8Ruby-lang Ruby 1.8.6-420Ruby-lang Ruby 1.8.7Ruby-lang Ruby 1.8.6
445
VMScore
CVE-2011-2686
Ruby prior to 1.8.7-p352 does not reset the random seed upon forking, which makes it easier for context-dependent malicious users to predict the values of random numbers by leveraging knowledge of the number sequence obtained in a different child process, a related issue to CVE-2...
Ruby-lang Ruby 1.8.7-302Ruby-lang Ruby 1.8.7-249Ruby-lang Ruby 1.8.7-299Ruby-lang RubyRuby-lang Ruby 1.8.7Ruby-lang Ruby 1.8.7-330Ruby-lang Ruby 1.8.7-160Ruby-lang Ruby 1.8.7-173Ruby-lang Ruby 1.8.7-p21Ruby-lang Ruby 1.8.7-248
445
VMScore
CVE-2011-2705
The SecureRandom.random_bytes function in lib/securerandom.rb in Ruby prior to 1.8.7-p352 and 1.9.x prior to 1.9.2-p290 relies on PID values for initialization, which makes it easier for context-dependent malicious users to predict the result string by leveraging knowledge of ran...
Ruby-lang Ruby 1.8.7Ruby-lang RubyRuby-lang Ruby 1.8.7-p21Ruby-lang Ruby 1.8.7-173Ruby-lang Ruby 1.8.7-160Ruby-lang Ruby 1.8.7-330Ruby-lang Ruby 1.8.7-249Ruby-lang Ruby 1.8.7-248Ruby-lang Ruby 1.8.7-302Ruby-lang Ruby 1.8.7-299Ruby-lang Ruby 1.9.1Ruby-lang Ruby 1.9.0Ruby-lang Ruby 1.9.0-2Ruby-lang Ruby 1.9.0-20070709Ruby-lang Ruby 1.9.0-1Ruby-lang Ruby 1.9.2Ruby-lang Ruby 1.9.2-p180Ruby-lang Ruby 1.9Ruby-lang Ruby 1.9.0-0Ruby-lang Ruby 1.9.2-p136Ruby-lang Ruby 1.9.0-20060415
561
VMScore
CVE-2011-1004
The FileUtils.remove_entry_secure method in Ruby 1.8.6 up to and including 1.8.6-420, 1.8.7 up to and including 1.8.7-330, 1.8.8dev, 1.9.1 up to and including 1.9.1-430, 1.9.2 up to and including 1.9.2-136, and 1.9.3dev allows local users to delete arbitrary files via a symlink a...
Ruby-lang Ruby 1.9.2Ruby-lang Ruby 1.9.3Ruby-lang Ruby 1.8.6Ruby-lang Ruby 1.8.7Ruby-lang Ruby 1.8.8Ruby-lang Ruby 1.9.1
445
VMScore
CVE-2013-1821
lib/rexml/text.rb in the REXML parser in Ruby prior to 1.9.3-p392 allows remote malicious users to cause a denial of service (memory consumption and crash) via crafted text nodes in an XML document, aka an XML Entity Expansion (XEE) attack.
Ruby-lang Ruby 1.9.3Ruby-lang Ruby 1.9.2Ruby-lang RubyRuby-lang Ruby 1.9.1Ruby-lang Ruby 1.9Ruby-lang Ruby 2.0.0Ruby-lang Ruby 2.0
383
VMScore
CVE-2012-4481
The safe-level feature in Ruby 1.8.7 allows context-dependent malicious users to modify strings via the NameError#to_s method when operating on Ruby objects. NOTE: this issue is due to an incomplete fix for CVE-2011-1005.
Ruby-lang Ruby 1.8.7
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
encryptionCVE-2024-4331CVE-2024-26925arbitrary codeCVE-2006-4304CVE-2024-25458CVE-2024-27077reflected XSSCVE-2024-4059
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook