rubyzip project kayıtları
rubyzip project üreticisine ait 3 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-59 Improper Link Resolution Before File Access ('Link Following')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
3 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2018-1000544İstismar yok | rubyzip gem rubyzip version 1.2.1 and earlier contains a Directory Traversal vulnerability in Zip::File component that can result in write arubyzip project · rubyzip · CWE-59 | Kritik9,8 | — | %4,4 | 26 Haz 2018 |
40Planlayın | CVE-2017-5946İstismar yok | The Zip::File component in the rubyzip gem before 1.2.1 for Ruby has a directory traversal vulnerability.rubyzip project · rubyzip · CWE-22 | Kritik9,8 | — | %3,4 | 27 Şub 2017 |
22İzleyin | CVE-2019-16892İstismar yok | In Rubyzip before 1.3.0, a crafted ZIP file can bypass application checks on ZIP entry sizes because data about the uncompressed size can berubyzip project · rubyzip | Orta5,5 | — | %1,6 | 25 Eyl 2019 |
- CVE-2018-100054440Planlayın
rubyzip gem rubyzip version 1.2.1 and earlier contains a Directory Traversal vulnerability in Zip::File component that can result in write a
KritikCVSS 9,8İstismar yokEPSS %4rubyzip project · rubyzip26 Haz 2018
- CVE-2017-594640Planlayın
The Zip::File component in the rubyzip gem before 1.2.1 for Ruby has a directory traversal vulnerability.
KritikCVSS 9,8İstismar yokEPSS %3rubyzip project · rubyzip27 Şub 2017
- CVE-2019-1689222İzleyin
In Rubyzip before 1.3.0, a crafted ZIP file can bypass application checks on ZIP entry sizes because data about the uncompressed size can be
OrtaCVSS 5,5İstismar yokEPSS %2rubyzip project · rubyzip25 Eyl 2019