Search vulnerabilities

Results 3

Export CSV
CVE-2013-4492

rubygem-i18n: cross-site scripting flaw in exception handling

Cross-site scripting (XSS) vulnerability in exceptions.rb in the i18n gem before 0.6.6 for Ruby allows remote attackers to inject arbitrary web script or HTML via a crafted I18n::MissingTranslationData.new call.

CVSS 2.0 · 4.3 Medium EPSS 2.2% KEV · Not listed
CVE-2020-7791

Denial of Service (DoS)

This affects the package i18n before 2.1.15. Vulnerability arises out of insufficient handling of erroneous language tags in src/i18n/Concrete/TextLocalizer.cs and src/i18n/LocalizedApplication.cs.

CVSS 3.1 · 7.5 High EPSS 3.0% KEV · Not listed
Vendors
Products
CVE-2014-10077

rubygem-i18n: denial of service in Hash#slice in lib/i18n/core_ext/hash.rb

Hash#slice in lib/i18n/core_ext/hash.rb in the i18n gem before 0.8.0 for Ruby allows remote attackers to cause a denial of service (application crash) via a call in a situation where :some_key is present in keep_keys but not present in the hash.

CVSS 3.0 · 7.5 High EPSS 3.4% KEV · Not listed
Products