Browse / Ruby

Ruby

See its reports on the map

What gets reported to Ruby

• Code Execution13
• Other weaknesses13
• Memory Corruption12
• Denial of Service6
• Injection and Smuggling5
• Cryptography4

Most upvoted reports

AllValidInformativeN/ADuplicate

1. The taint flag is not propagated at JSON.parseInformative
   40 votes
2. XSS exploit of RDoc documentation generated by rdoc (CVE-2013-0256)InformativeCross-site Scripting (XSS) - Stored · medium
   16 votes
3. DoS in bigdecimal's sqrt function due to miscalculation of loop iterationsInformativeUncontrolled Resource Consumption · medium
   14 votes
4. 'net/http': HTTP Header Injection in the set_content_type methodInformativeCRLF Injection · high
   9 votes
5. 'net/ftp': Uncontrolled Resource Consumption (Memory/CPU)InformativeUncontrolled Resource Consumption · medium
   8 votes
6. Attacker can smuggle a malicious domain in a URI object.InformativeOpen Redirect
   8 votes
7. Header CRLF Injection in Ruby Net::HTTPInformativeCRLF Injection
   5 votes
8. XSS exploit of RDoc documentation generated by rdocInformativeCross-site Scripting (XSS) - Stored · medium
   5 votes
9. Resolv::getaddresses bug that can be abused to bypass security measures. InformativeViolation of Secure Design Principles
   5 votes
10. Ruby:HTTP Header injection in 'net/http'InformativeOpen Redirect
    5 votes
11. Stored XSS in RDoc hyperlinks through javascript schemeInformativeCross-site Scripting (XSS) - Stored · medium
    4 votes
12. OS Command Injection in '/lib/un.rb -- Utilities to replace common UNIX commands in Makefiles etc'InformativeOS Command Injection · medium
    4 votes
13. Ruby 2.4.1 has "Stack consistency error" and aborts when processing return statement within a case statementInformativeMemory Corruption - Generic
    4 votes
14. Bug Report : [ No Valid SPF Records ]InformativeMisconfiguration · high
    3 votes
15. XMLRPC does not limit deserializable classes.InformativeDeserialization of Untrusted Data · high
    3 votes
16. Net::SMTP with tls allows forged certificates as long as the hostname matchesInformativeImproper Certificate Validation · medium
    3 votes
17. Heap corruption in string.c tr_trans() due to undersized bufferInformativeMemory Corruption - Generic
    2 votes
18. DRb denial of service vulnerabilityInformativeUncontrolled Resource Consumption
    1 votes
19. Heap corruption in DateTime.strftime() on 32 bit for certain format stringsInformativeMemory Corruption - Generic
    1 votes
20. SEGV in parse_rat()InformativeUncontrolled Resource Consumption
21. Invalid URL parsing '#'Informative
22. Integer Underflow @ ossl_cipher_pkcs5_keyivgen InformativeInteger Underflow