Vendor
Ruby
123 known vulnerabilities in products by Ruby, 0 of them actively exploited (CISA KEV).
Key figures
123
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
17
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2017-17405 | Ruby: Command Injection | 8.8 | |
| Critical | CVE-2018-16395 | Ruby: security vulnerability | 9.8 | |
| Critical | CVE-2017-14064 | Ruby: security vulnerability | 9.8 | |
| High | CVE-2017-10784 | Ruby: security vulnerability | 8.8 | |
| Critical | CVE-2016-2337 | Ruby: Type Confusion | 9.8 | |
| Critical | CVE-2018-8780 | Ruby: Path Traversal | 9.1 | |
| Critical | CVE-2017-17790 | Ruby: Command Injection | 9.8 | |
| Critical | CVE-2017-0898 | HackerOne Ruby: Use of Externally-Controlled Format String | 9.1 | |
| Critical | CVE-2016-2339 | Ruby: security vulnerability | 9.8 | |
| Critical | CVE-2021-41816 | CGI: Buffer Overflow | 9.8 | |
| Critical | CVE-2016-2338 | Ruby: security vulnerability | 9.8 | |
| High | CVE-2021-28966 | Ruby: security vulnerability | 7.5 | |
| High | CVE-2018-16396 | Ruby: security vulnerability | 8.1 | |
| Critical | CVE-2016-2336 | Ruby: Type Confusion | 9.8 | |
| Critical | CVE-2022-28738 | Ruby: Double Free | 9.8 | |
| High | CVE-2018-6914 | Ruby: Path Traversal | 7.5 | |
| Critical | CVE-2017-9225 | Oniguruma Project Oniguruma: Stack-Based Buffer Overflow | 9.8 | |
| High | CVE-2017-14033 | Ruby: Denial of Service | 7.5 | |
| High | CVE-2018-8778 | Ruby: Format String | 7.5 | |
| High | CVE-2018-8779 | Ruby: security vulnerability | 7.5 | |
| High | CVE-2009-5147 | Ruby: security vulnerability | 7.3 | |
| Critical | CVE-2011-4121 | OpenSSL extension of Ruby (Git trunk): security vulnerability | 9.8 | |
| High | CVE-2019-16255 | Ruby: Code Injection | 8.1 | |
| High | CVE-2017-9229 | PHP: Denial of Service | 7.5 | |
| High | CVE-2019-16201 | Ruby: Denial of Service | 7.5 |