Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
suseSuseSUSE-SU-2013:0508-1
HistoryMar 20, 2013 - 5:04 p.m.

Security update for rubygem-merb-core (important)

2013-03-2017:04:42
lists.opensuse.org
23

EPSS

0.972

Percentile

99.9%

JSON

rubygem-merb-core has been updated to change the rack
version dependency. Now any rack 1.1 version is accepted.

This update needs to be installed in parallel with the
2.3.17 rails update.

OSVersionArchitecturePackageVersionFilename
SUSE Cloud1.0x86_64rubygem-merb-core< 1.1.3-0.9.1rubygem-merb-core-1.1.3-0.9.1.x86_64.rpm

Related

openvas 46
suse 5
nessus 19
fedora 17
ics 1
freebsd 2
gentoo 1
redhat 3
securityvulns 2
osv 9
debian 6
cvelist 9
prion 7
rubygems 7
debiancve 5
github 6
veracode 3
ubuntucve 8
seebug 3
cve 6
nvd 6
checkpoint_advisories 2
ibm 1
zdt 2
kitploit 1
packetstorm 3
metasploit 3
exploitdb 3
saint 4
cert 1
threatpost 3
thn 2
gitlab 3
openvas
openvas
openSUSE: Security Advisory for ruby (openSUSE-SU-2013:0278-1)
2013-03-11 00:00:00
SuSE Update for ruby openSUSE-SU-2013:0280-1 (ruby)
2013-03-11 00:00:00
SuSE Update for ruby openSUSE-SU-2013:0278-1 (ruby)
2013-03-11 00:00:00
suse
suse
ruby on rails to 2.3.16 (important)
2013-02-12 10:10:39
ruby on rails to 2.3.16 (important)
2013-02-12 11:04:29
Security update for Ruby on Rails (important)
2013-04-03 20:06:19
nessus
nessus
openSUSE Security Update : ruby (openSUSE-SU-2013:0278-1)
2014-06-13 00:00:00
Fedora 16 : rubygem-rack-1.3.0-3.fc16 (2013-0896)
2013-01-28 00:00:00
Fedora 18 : rubygem-rack-1.4.0-4.fc18 (2013-0837)
2013-01-28 00:00:00
fedora
fedora
[SECURITY] Fedora 17 Update: rubygem-rack-1.4.0-3.fc17
2013-01-25 21:44:01
[SECURITY] Fedora 18 Update: rubygem-rack-1.4.0-4.fc18
2013-01-25 21:37:50
[SECURITY] Fedora 18 Update: rubygem-actionpack-3.2.8-2.fc18
2013-01-20 03:40:48
ics
ics
Wonderware Intelligence Tableau Server Ruby on Rails Improper Input Validation (Update A)
2013-02-21 00:00:00
freebsd
freebsd
rubygem-rails -- multiple vulnerabilities
2013-01-08 00:00:00
rubygem-rails -- SQL injection vulnerability
2013-01-02 00:00:00
gentoo
gentoo
Rack: Multiple vulnerabilities
2014-05-17 00:00:00
redhat
redhat
(RHSA-2013:0544) Important: Subscription Asset Manager 1.2 update
2013-02-21 00:00:00
(RHSA-2013:0153) Critical: Ruby on Rails security update
2013-01-10 00:00:00
(RHSA-2013:0154) Critical: Ruby on Rails security update
2013-01-10 20:37:00
securityvulns
securityvulns
Librack multiple security vulnerabilities
2013-10-28 00:00:00
[SECURITY] [DSA 2783-2] librack-ruby regression update
2013-10-28 00:00:00
osv
osv
librack-ruby - several
2013-10-21 00:00:00
Rack vulnerable to REDoS
2017-10-24 18:33:37
Rack rubygems receiving excessively long lines triggers out-of-memory error
2017-10-24 18:33:37
debian
debian
[SECURITY] [DSA 2783-2] librack-ruby regression update
2013-10-24 19:29:38
[SECURITY] [DSA 2783-2] librack-ruby regression update
2013-10-24 19:29:38
[SECURITY] [DSA 2597-1] rails security update
2013-01-04 22:11:28
cvelist
cvelist
CVE-2012-6109
2013-03-01 02:00:00
CVE-2013-0184
2013-03-01 02:00:00
CVE-2012-5664
1976-01-01 00:00:00
prion
prion
Design/Logic Flaw
2013-03-01 05:40:00
Design/Logic Flaw
2013-03-01 05:40:00
Type confusion
2013-01-13 22:55:00
rubygems
rubygems
CVE-2012-6109 rubygem-rack: parsing Content-Disposition header DoS
2012-05-03 20:00:00
CVE-2013-0184 rubygem-rack: Rack::Auth::AbstractRequest DoS
2013-01-12 20:00:00
CVE-2013-0183 rubygem-rack: receiving excessively long lines triggers out-of-memory error
2013-01-06 20:00:00
debiancve
debiancve
CVE-2012-6109
2013-03-01 05:40:16
CVE-2013-0183
2013-03-01 05:40:17
CVE-2013-0184
2013-03-01 05:40:17
github
github
Rack vulnerable to REDoS
2017-10-24 18:33:37
Rack rubygems receiving excessively long lines triggers out-of-memory error
2017-10-24 18:33:37
Rack vulnerable to Denial of Service
2022-05-05 02:48:31
veracode
veracode
Denial Of Service (DoS) Infinite Loop
2019-01-15 08:58:11
Denial Of Service (DoS) Memory Consumption, Arbitrary Code Execution And Object-injection Attacks
2019-01-15 08:53:34
Arbitrary Code Execution, SQL Injection Attacks And Authentication Bypass
2019-01-15 08:54:45
ubuntucve
ubuntucve
CVE-2013-0184
2013-03-01 00:00:00
CVE-2012-6109
2013-03-01 00:00:00
CVE-2013-0183
2013-03-01 00:00:00
seebug
seebug
Ruby on Rails Authlogic gem SQL注入漏洞
2012-12-28 00:00:00
Ruby on Rails XML Processor YAML Deserialization Code Execution
2014-07-01 00:00:00
Ruby on Rails不安全查询生成漏洞
2013-01-10 00:00:00
cve
cve
CVE-2012-6109
2013-03-01 05:40:16
CVE-2013-0183
2013-03-01 05:40:17
CVE-2013-0156
2013-01-13 22:55:00
nvd
nvd
CVE-2012-6109
2013-03-01 05:40:16
CVE-2013-0184
2013-03-01 05:40:17
CVE-2013-0183
2013-03-01 05:40:17
checkpoint_advisories
checkpoint_advisories
Ruby on Rails Hash SQL Injection (CVE-2012-2695)
2012-10-14 00:00:00
Ruby on Rails XML Processor YAML Deserialization Code Execution (CVE-2013-0156)
2013-01-20 00:00:00
ibm
ibm
Security Bulletin: IBM Security Network Intrusion Prevention System can be affected by vulnerabilities in Ruby on Rails (CVE-2012-2660, CVE-2012-2694, CVE-2013-0156, CVE-2012-6496, CVE-2012-3424, and CVE-2012-2695)
2021-01-25 20:13:51
zdt
zdt
Action Pack Multiple Vulnerabilities
2013-01-09 00:00:00
Ruby On Rails XML Processor YAML Deserialization Code Execution
2013-01-11 00:00:00
kitploit
kitploit
[Nmap v6.40] Free Security Scanner For Network Exploration & Security Audits
2013-08-21 01:33:00
packetstorm
packetstorm
Ruby On Rails XML Processor YAML Deserialization Code Execution
2013-01-11 00:00:00
Ruby On Rails XML Processor YAML Deserialization Scanner
2024-09-01 00:00:00
Ruby on Rails JSON Processor YAML Deserialization Code Execution
2013-01-29 00:00:00
metasploit
metasploit
Ruby on Rails XML Processor YAML Deserialization Code Execution
2013-01-10 05:10:13
Ruby on Rails XML Processor YAML Deserialization Scanner
2013-01-09 18:50:38
Ruby on Rails Known Secret Session Cookie Remote Code Execution
2013-07-26 18:23:18
exploitdb
exploitdb
Ruby on Rails - XML Processor YAML Deserialization Code Execution (Metasploit)
2013-01-10 00:00:00
Ruby on Rails - Known Secret Session Cookie Remote Code Execution (Metasploit)
2013-08-12 00:00:00
Ruby on Rails - JSON Processor YAML Deserialization Code Execution (Metasploit)
2013-01-29 00:00:00
saint
saint
Ruby on Rails XML Processor YAML Deserialization
2013-02-15 00:00:00
Ruby on Rails XML Processor YAML Deserialization
2013-02-15 00:00:00
Ruby on Rails XML Processor YAML Deserialization
2013-02-15 00:00:00
cert
cert
Ruby on Rails Action Pack framework insecurely typecasts YAML and Symbol XML parameters
2013-01-08 00:00:00
threatpost
threatpost
Exploit Code, Metasploit Module Out for Ruby on Rails Flaws
2013-01-10 15:01:40
Ruby on Rails Exploit Harvests IRC Botnet
2013-05-28 18:56:05
Some Versions of Ruby on Rails Vulnerable to New Parsing Attack
2013-01-29 17:47:51
thn
thn
Ruby on Rails exploit could hijack unpatched servers for botnet
2013-05-31 03:53:00
Ruby on Rails exploit could hijack unpatched servers for botnet
2013-05-30 16:53:00
gitlab
gitlab
Multiple vulnerabilities in parameter parsing in Action Pack
2013-01-13 00:00:00
Unsafe Query Generation Risk in Ruby on Rails
2013-01-13 00:00:00
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
2017-10-24 00:00:00

EPSS

0.972

Percentile

99.9%

JSON
Related for SUSE-SU-2013:0508-1
openvas46suse5nessus19fedora17ics1freebsd2gentoo1redhat3securityvulns2osv9debian6cvelist9prion7rubygems7debiancve5github6veracode3ubuntucve8seebug3cve6nvd6checkpoint_advisories2ibm1zdt2kitploit1packetstorm3metasploit3exploitdb3saint4cert1threatpost3thn2gitlab3