Type Ruby Gem
Timeline
The analysis of the timeline helps to identify the required approach and handling of single vulnerabilities and vulnerability collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Initiating immediate vulnerability response and prioritizing of issues is possible.
Remediation »
Vendors and researchers are eager to find countermeasures to mitigate security vulnerabilities. These can be distinguished between multiple forms and levels of remediation which influence risks differently.
Exploitability »
Researcher and attacker which are looking for security vulnerabilities try to exploit them for academic purposes or personal gain. The level and quality of exploitability can be distinguished to determine simplicity and strength of attacks.
CVSSv3 Base »
The Common Vulnerability Scoring System (CVSS) is an industry standard to define the characteristics and impacts of security vulnerabilities. The base score represents the intrinsic aspects that are constant over time and across user environments. Our unique meta score merges all available scores from different sources to aggregate to the most reliable result.
VulDB »
The moderation team is always defining the base vector and base score for an entry. These and all other available scores are used to generate the meta score.
NVD »
The National Vulnerability Database (NVD) is also defining CVSS vectors and scores. These are usually not complete and might differ from VulDB scores.
Exploit 0-day »
The moderation team is working with the threat intelligence team to determine prices for exploits. Our unique algorithm is used to identify the 0-day prices for an exploit, before it got distributed or became public. Calculated prices are aligned to prices disclosed by vulnerability broker and compared to prices we see on exploit markets.
Affected Products (70): actionpack Gem, active-support Gem, aescrypt gem, brbackup Gem, BSON Gem, cap-strap Gem, CarrierWave, Chartkick Gem, ciborg Gem, codders-dataset Gem, datagrid Gem, Elastic APM Agent, espeak-ruby Gem, excon Gem, Features Gem, festivaltts4r Gem, Field Test Gem, field_test Gem, Fileutils, gon Gem, gyazo Gem, hammer_cli_foreman Gem, http gem, json-jwt Gem, JSON Gem, kajam Gem, Karo Gem, kcapifony Gem, kramdown Gem, lawn-login Gem, lean-ruport Gem, Loofah Gem, magento-lts Gem, Mail gem, makandra consul Gem, netaddr Gem, Nokogiri Gem, omniauth-apple Gem, omniauth-auth0 Gem, omniauth-weibo-oauth2 Gem, OmniAuth Gem, Ox Gem, Paperclip Ruby Gem, paranoid2 Gem, PgHero Gem, point-cli Gem, private_address_check Ruby Gem, Puma Gem, rack-cors Gem, rack-mini-profiler Gem, rails-html-sanitizer Gem, rails_admin Gem, Rake, rest-client Gem, REST Client for Ruby, rubyzip Gem, Ruby Gem Fileutils, ruby_parser-legacy Gem, Safemode Gem, Sanitize Gem, secure_headers Gem, simple_captcha2 Gem, strong_password Gem, Thor Gem, Thoughtbot Paperclip Gem, VladTheEnterprising Gem, Wayne Conrad ftpd Gem for Ruby, WEBrick Gem, websocket-extensions, yajl-ruby gem
Are you interested in using VulDB?
Download the whitepaper to learn more about our service!