CVE-2019-13589 (paranoid2)

The paranoid2 gem 1.1.6 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party. The current version, without this backdoor, is 1.1.5.

View Full Alert

Related Posts

  • CVE-2019-9673 (freenet)

    Freenet 1483 has a MIME type bypass that allows arbitrary JavaScript execution via a crafted Freenet URI.

  • CVE-2019-12323 (hc10)

    The HC.Server service in Hosting Controller HC10 10.14 allows an Invalid Pointer Write DoS. View Full Alert

  • CVE-2019-12887 (linotp)

    KeyIdentity LinOTP before 2.10.5.3 has Incorrect Access Control (issue 1 of 2). View Full Alert