CVSS: 7.5EPSS: 14%CPEs: 10EXPL: 1CVE-2006-1931 – Yukihiro Matsumoto Ruby 1.x - XMLRPC Server Denial of Service
https://notcve.org/view.php?id=CVE-2006-1931
20 Apr 2006 — The HTTP/XMLRPC server in Ruby before 1.8.2 uses blocking sockets, which allows attackers to cause a denial of service (blocked connections) via a large amount of data. Several vulnerabilities have been discovered in the interpreter for the Ruby language, which may lead to the bypass of security restrictions or denial of service. • https://www.exploit-db.com/exploits/27723 •
CVSS: 9.8EPSS: 20%CPEs: 12EXPL: 0CVE-2005-2337 – Debian Linux Security Advisory 860-1
https://notcve.org/view.php?id=CVE-2005-2337
07 Oct 2005 — Ruby 1.6.x up to 1.6.8, 1.8.x up to 1.8.2, and 1.9.0 development up to 2005-09-01 allows attackers to bypass safe level and taint flag protections and execute disallowed code when Ruby processes a program through standard input (stdin). The object oriented scripting language Ruby supports safely executing untrusted code with two mechanisms: safe level and taint flag on objects. Dr. Yutaka Oiwa discovered a vulnerability that allows Ruby methods to bypass these mechanisms. In systems which use this feature, ... • http://jvn.jp/jp/JVN%2362914675/index.html •
CVSS: 7.5EPSS: 1%CPEs: 17EXPL: 0CVE-2004-0983 – dsa-586.txt
https://notcve.org/view.php?id=CVE-2004-0983
10 Nov 2004 — The CGI module in Ruby 1.6 before 1.6.8, and 1.8 before 1.8.2, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a certain HTTP request. The upstream developers of Ruby have corrected a problem in the CGI module for this language. Specially crafted requests could cause an infinite loop and thus cause the program to eat up cpu cycles. • http://www.debian.org/security/2004/dsa-586 •
CVSS: 7.1EPSS: 0%CPEs: 2EXPL: 0CVE-2004-0755 – dsa-537.txt
https://notcve.org/view.php?id=CVE-2004-0755
16 Aug 2004 — The FileStore capability in CGI::Session for Ruby before 1.8.1, and possibly PStore, creates files with insecure permissions, which can allow local users to steal session information and hijack sessions. La capacidad FileStore en CGI::Session de Ruby anteriores a 1.8.1, y posiblemente PStore, crea ficheros con permisos no seguros, lo que puede permitir a usuarios locales robar información de sesión secuestrar sesiones. A problem in the CGI session management of Ruby, an object-oriented scripting language, a... • http://secunia.com/advisories/12290 •