Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2012-2139

rubygem-mail: directory traversal

Directory traversal vulnerability in lib/mail/network/delivery_methods/file_delivery.rb in the Mail gem before 2.4.4 for Ruby allows remote attackers to read arbitrary files via a .. (dot dot) in the to parameter.

CVSS 2.0 · 5.0 Medium EPSS 4.9% KEV · Not listed
Vendors
Cloudforms Cloudengine Rubygems
Products
1 Mail Gem
CVE-2012-2140

rubygem-mail: arbitrary command execution when using exim or sendmail from commandline

The Mail gem before 2.4.3 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a (1) sendmail or (2) exim delivery.

CVSS 2.0 · 7.5 High EPSS 4.5% KEV · Not listed
Vendors
Cloudforms Cloudengine Rubygems
Products
1 Mail Gem