Show filters
36 Total Results
Displaying 31-36 of 36
Sort by:
Attacker Value
Unknown
CVE-2013-1875
Disclosure Date: March 20, 2013 (last updated October 05, 2023)
command_wrap.rb in the command_wrap Gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL or filename.
0
Attacker Value
Unknown
CVE-2013-2615
Disclosure Date: March 20, 2013 (last updated October 05, 2023)
lib/entry_controller.rb in the fastreader Gem 1.0.8 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL.
0
Attacker Value
Unknown
CVE-2013-2616
Disclosure Date: March 20, 2013 (last updated October 05, 2023)
lib/mini_magick.rb in the MiniMagick Gem 1.3.1 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL.
0
Attacker Value
Unknown
CVE-2013-0269
Disclosure Date: February 13, 2013 (last updated October 05, 2023)
The JSON gem before 1.5.5, 1.6.x before 1.6.8, and 1.7.x before 1.7.7 for Ruby allows remote attackers to cause a denial of service (resource consumption) or bypass the mass assignment protection mechanism via a crafted JSON document that triggers the creation of arbitrary Ruby symbols or certain internal objects, as demonstrated by conducting a SQL injection attack against Ruby on Rails, aka "Unsafe Object Creation Vulnerability."
0
Attacker Value
Unknown
CVE-2012-2140
Disclosure Date: July 18, 2012 (last updated October 04, 2023)
The Mail gem before 2.4.3 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a (1) sendmail or (2) exim delivery.
0
Attacker Value
Unknown
CVE-2012-2139
Disclosure Date: July 18, 2012 (last updated October 04, 2023)
Directory traversal vulnerability in lib/mail/network/delivery_methods/file_delivery.rb in the Mail gem before 2.4.4 for Ruby allows remote attackers to read arbitrary files via a .. (dot dot) in the to parameter.
0
