Lucene search
Veracode Vulnerability DatabaseVERACODE:19710HistoryMay 16, 2019 - 3:22 a.m.
Improper Input Validation
2019-05-1603:22:56
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
EPSS
0.004
Percentile
72.9%
Ruby is vulnerable to improper input validation vulnerability. This is because missing URL validation on spec home attribute which allows malicious gem to set an invalid homepage URL.
Related
github
github
RubyGems Improper Input Validation vulnerability
2022-05-14 01:01:09
nvd
nvd
CVE-2018-1000077
2018-03-13 15:29:00
prion
prion
Input validation
2018-03-13 15:29:00
ubuntucve
ubuntucve
CVE-2018-1000077
2018-03-13 00:00:00
rubygems
rubygems
RubyGems Improper Input Validation vulnerability
2022-05-13 21:00:00
cvelist
cvelist
CVE-2018-1000077
2018-03-13 15:00:00
osv
osv
CVE-2018-1000077
2018-03-13 15:29:00
RubyGems Improper Input Validation vulnerability
2022-05-14 01:01:09
jruby - security update
2018-03-31 00:00:00
redhatcve
redhatcve
CVE-2018-1000077
2019-10-14 01:38:20
debiancve
debiancve
CVE-2018-1000077
2018-03-13 15:29:00
cve
cve
CVE-2018-1000077
2018-03-13 15:29:00
openvas
openvas
Debian: Security Advisory (DLA-1337-1)
2018-04-02 00:00:00
Debian: Security Advisory (DLA-1336-1)
2018-04-01 00:00:00
Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2019-2250)
2020-01-23 00:00:00
nessus
nessus
Debian DLA-1337-1 : jruby security update
2018-04-03 00:00:00
Debian DLA-1336-1 : rubygems security update
2018-04-02 00:00:00
EulerOS 2.0 SP3 : ruby (EulerOS-SA-2019-2250)
2019-11-08 00:00:00
debian
debian
[SECURITY] [DLA 1336-1] rubygems security update
2018-04-01 17:18:32
[SECURITY] [DLA 1337-1] jruby security update
2018-04-02 21:10:51
[SECURITY] [DSA 4219-1] jruby security update
2018-06-08 09:31:46
f5
f5
K84262603 : Multiple Ruby vulnerabilities
2022-04-22 00:00:00
K52952871 : Multiple RubyGems vulnerabilities
2022-02-16 00:00:00
fedora
fedora
[SECURITY] Fedora 26 Update: ruby-2.4.3-87.fc26
2018-03-11 20:00:06
[SECURITY] Fedora 27 Update: ruby-2.4.3-87.fc27
2018-03-02 16:26:05
ubuntu
ubuntu
Ruby vulnerabilities
2018-04-05 00:00:00
Ruby regression
2018-04-13 00:00:00
mageia
mageia
Updated jruby packages fix security vulnerability
2019-02-13 14:08:25
Updated ruby-RubyGems packages fix security vulnerability
2020-06-11 00:39:20
redhat
redhat
(RHSA-2020:0591) Moderate: ruby security update
2020-02-25 11:32:20
(RHSA-2020:0663) Moderate: ruby security update
2020-03-03 13:41:04
(RHSA-2020:0542) Moderate: ruby security update
2020-02-18 13:56:05
amazon
amazon
Medium: ruby
2018-04-05 16:06:00
Medium: ruby
2019-08-23 03:41:00
Medium: ruby20, ruby22, ruby23, ruby24
2018-04-04 23:18:00
centos
centos
ruby, rubygem, rubygems security update
2019-08-30 04:17:17
oraclelinux
oraclelinux
ruby security update
2019-08-13 00:00:00
suse
suse
Security update for ruby-bundled-gems-rpmhelper, ruby2.5 (important)
2019-07-21 00:00:00