Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

rubygems rubygems 2.4.4 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2015-4020
RubyGems 2.0.x prior to 2.0.17, 2.2.x prior to 2.2.5, and 2.4.x prior to 2.4.8 does not validate the hostname when fetching gems or making API requests, which allows remote malicious users to redirect requests to arbitrary domains via a crafted DNS SRV record with a domain that i...
Oracle Solaris 11.3Rubygems Rubygems 2.0.0Rubygems Rubygems 2.0.15Rubygems Rubygems 2.0.16Rubygems Rubygems 2.0.9Rubygems Rubygems 2.2.0Rubygems Rubygems 2.4.2Rubygems Rubygems 2.4.3Rubygems Rubygems 2.0.1Rubygems Rubygems 2.0.10Rubygems Rubygems 2.0.2Rubygems Rubygems 2.0.3Rubygems Rubygems 2.2.1Rubygems Rubygems 2.2.2Rubygems Rubygems 2.4.4Rubygems Rubygems 2.4.5Rubygems Rubygems 2.0.11Rubygems Rubygems 2.0.12Rubygems Rubygems 2.0.4Rubygems Rubygems 2.0.5Rubygems Rubygems 2.2.3Rubygems Rubygems 2.2.4
NA
CVE-2015-3900
RubyGems 2.0.x prior to 2.0.16, 2.2.x prior to 2.2.4, and 2.4.x prior to 2.4.7 does not validate the hostname when fetching gems or making API requests, which allows remote malicious users to redirect requests to arbitrary domains via a crafted DNS SRV record, aka a "DNS hij...
Ruby-lang Ruby 2.1.1Ruby-lang Ruby 2.1.2Ruby-lang Ruby 1.9.3Ruby-lang Ruby 2.0.0Ruby-lang Ruby 2.1Ruby-lang Ruby 1.9.1Ruby-lang Ruby 1.9.2Ruby-lang Ruby 2.1.5Ruby-lang Ruby 2.2.0Ruby-lang Ruby 1.9Ruby-lang Ruby 2.1.3Ruby-lang Ruby 2.1.4Rubygems Rubygems 2.0.1Rubygems Rubygems 2.0.2Rubygems Rubygems 2.0.3Rubygems Rubygems 2.0.10Rubygems Rubygems 2.0.11Rubygems Rubygems 2.2.2Rubygems Rubygems 2.2.3Rubygems Rubygems 2.0.4Rubygems Rubygems 2.0.5Rubygems Rubygems 2.0.12
NA
CVE-2012-2139
Directory traversal vulnerability in lib/mail/network/delivery_methods/file_delivery.rb in the Mail gem prior to 2.4.4 for Ruby allows remote malicious users to read arbitrary files via a .. (dot dot) in the to parameter.
Rubygems Mail GemRubygems Mail Gem 2.4.1Rubygems Mail Gem 2.3.3Rubygems Mail Gem 2.3.2
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionfirmwareCVE-2006-4304CVE-2024-32878CVE-2024-31502XSSCVE-2024-3059CVE-2024-33692CVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook