National Vulnerability Database

National Vulnerability Database

National Vulnerability
Database

Search Results (Refine Search)

Search Parameters:
  • Contains Software Flaws (CVE)
  • Keyword (text search): Ruby
There are 390 matching records.
Displaying matches 81 through 100.
Vuln ID Summary CVSS Severity
CVE-2017-17804

In IKARUS anti.virus 2.16.20, the driver file (ntguard.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x83000084.

Published: December 20, 2017; 04:29:02 AM -05:00
V3: 7.8 HIGH
V2: 7.2 HIGH
CVE-2017-17803

In TG Soft Vir.IT eXplorer Lite 8.5.65, the driver file (VIRAGTLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x82736068, a different vulnerability than CVE-2017-17475.

Published: December 20, 2017; 04:29:02 AM -05:00
V3: 7.8 HIGH
V2: 7.2 HIGH
CVE-2017-17802

In TG Soft Vir.IT eXplorer Lite 8.5.65, the driver file (VIRAGTLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x8273E080.

Published: December 20, 2017; 04:29:02 AM -05:00
V3: 7.8 HIGH
V2: 7.2 HIGH
CVE-2017-17801

In TG Soft Vir.IT eXplorer Lite 8.5.65, the driver file (VIRAGTLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x8273E060.

Published: December 20, 2017; 04:29:02 AM -05:00
V3: 7.8 HIGH
V2: 7.2 HIGH
CVE-2017-17800

In TG Soft Vir.IT eXplorer Lite 8.5.65, the driver file (VIRAGTLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x8273A0A0, a different vulnerability than CVE-2017-17798.

Published: December 20, 2017; 04:29:02 AM -05:00
V3: 7.8 HIGH
V2: 7.2 HIGH
CVE-2017-17799

In TG Soft Vir.IT eXplorer Lite 8.5.65, the driver file (VIRAGTLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x82730068.

Published: December 20, 2017; 04:29:02 AM -05:00
V3: 7.8 HIGH
V2: 7.2 HIGH
CVE-2017-17798

In TG Soft Vir.IT eXplorer Lite 8.5.42, the driver file (VIRAGTLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x8273A0A0, a different vulnerability than CVE-2017-17800.

Published: December 20, 2017; 04:29:02 AM -05:00
V3: 7.8 HIGH
V2: 7.2 HIGH
CVE-2017-17797

In IKARUS anti.virus 2.16.20, the driver file (ntguard.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x83000058.

Published: December 20, 2017; 04:29:02 AM -05:00
V3: 7.8 HIGH
V2: 7.2 HIGH
CVE-2017-17796

In TG Soft Vir.IT eXplorer Lite 8.5.65, the driver file (VIRAGTLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x827300A4.

Published: December 20, 2017; 04:29:02 AM -05:00
V3: 7.8 HIGH
V2: 7.2 HIGH
CVE-2017-17795

In IKARUS anti.virus 2.16.20, the driver file (ntguard.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x83000088.

Published: December 20, 2017; 04:29:01 AM -05:00
V3: 7.8 HIGH
V2: 7.2 HIGH
CVE-2017-17790

The lazy_initialize function in lib/resolv.rb in Ruby through 2.4.3 uses Kernel#open, which might allow Command Injection attacks, as demonstrated by a Resolv::Hosts::new argument beginning with a '|' character, a different vulnerability than CVE-2017-17405. NOTE: situations with untrusted input may be highly unlikely.

Published: December 20, 2017; 04:29:01 AM -05:00
V3: 9.8 CRITICAL
V2: 7.5 HIGH
CVE-2017-17718

The Net::LDAP (aka net-ldap) gem before 0.16.0 for Ruby has Missing SSL Certificate Validation.

Published: December 17, 2017; 04:29:00 PM -05:00
V3: 5.9 MEDIUM
V2: 4.3 MEDIUM
CVE-2017-17405

Ruby before 2.4.3 allows Net::FTP command injection. Net::FTP#get, getbinaryfile, gettextfile, put, putbinaryfile, and puttextfile use Kernel#open to open a local file. If the localfile argument starts with the "|" pipe character, the command following the pipe character is executed. The default value of localfile is File.basename(remotefile), so malicious FTP servers could cause arbitrary command execution.

Published: December 15, 2017; 04:29:00 AM -05:00
V3: 8.8 HIGH
V2: 9.3 HIGH
CVE-2017-17475

TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\.\Viragtlt DeviceIoControl request of 0x82736068.

Published: December 08, 2017; 02:29:00 AM -05:00
V3: 7.8 HIGH
V2: 6.1 MEDIUM
CVE-2017-17474

TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\.\Viragtlt DeviceIoControl request of 0x82730070.

Published: December 08, 2017; 02:29:00 AM -05:00
V3: 7.8 HIGH
V2: 6.1 MEDIUM
CVE-2017-17473

TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\.\Viragtlt DeviceIoControl request of 0x82730050.

Published: December 08, 2017; 02:29:00 AM -05:00
V3: 7.8 HIGH
V2: 6.1 MEDIUM
CVE-2017-17472

TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\.\Viragtlt DeviceIoControl request of 0x82730030.

Published: December 08, 2017; 02:29:00 AM -05:00
V3: 7.8 HIGH
V2: 6.1 MEDIUM
CVE-2017-17471

TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\.\Viragtlt DeviceIoControl request of 0x82732140.

Published: December 08, 2017; 02:29:00 AM -05:00
V3: 7.8 HIGH
V2: 6.1 MEDIUM
CVE-2017-17470

TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\.\Viragtlt DeviceIoControl request of 0x82730054.

Published: December 08, 2017; 02:29:00 AM -05:00
V3: 7.8 HIGH
V2: 6.1 MEDIUM
CVE-2017-17469

TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\.\Viragtlt DeviceIoControl request of 0x82730008, a different vulnerability than CVE-2017-16948.

Published: December 08, 2017; 02:29:00 AM -05:00
V3: 7.8 HIGH
V2: 6.1 MEDIUM