Sploitus

75 exploited vulnerabilities in Ruby

Showing 1–50 of 75

Vendors
Cgi Gem, Linux Mint, Red Os, Ruby, Canonical, Alt Linux
With known exploits
75
Affected Ruby-lang Cgi versions
< 0.3.1, 0.1.0, 0.2.0, 0.3.0
Affected Ruby-lang Ruby versions
≤ 2.4.7, 2.5.6, 2.6.4, 2.3.7, 2.4.4, 2.5.1, 2.6.0, 2.2.8, 2.3.5, 2.4.2, 2.5.0, 3.0.4, 3.1.2, 2.2.2, 2.3.0, 2.2.7, 2.3.1, 2.3.2, 2.3.3, 2.3.4, 2.4.0, 2.4.1, 2.2.10, 2.2.0, 2.2.1, 2.2.3, 2.2.4, 2.2.5, 2.2.6, 4.0.5, 2.7.7, 2.6.8, 2.7.5, 3.0.3, 2.6.9, 2.6.7, 2.7.3, 3.0.1, 1.8.5, 1.8.6, 1.8.7, 1.9, 1.6, 1.6.8, 1.8.0, 1.8.1, 1.8.2, 1.8.3, 1.8.4, 1.9.0
Affected Ruby-lang Openssl versions
< 2.1.2
Affected Ruby-lang Json versions
< 2.15.2.1, 2.17.1.2, 2.19.2
Affected Oniguruma Project Oniguruma versions
= 6.2.0
Affected Puppet versions
= 2.7.2, 2.7.3, 2.7.4, 2.7.5, 2.7.6, 2.7.7, 2.7.8, 2.7.9, 2.7.10, 2.7.11, 2.7.12, 2.7.13, 2.7.14, 2.7.16, 2.7.17, 2.7.18
Affected Puppet Puppet Enterprise versions
= 3.1.0
Affected Puppetlabs Puppet versions
= 2.7.0, 2.7.1, 2.7.19, 2.7.20

Vulnerabilities with exploits

Highest CVSS first — 13 of these already have exploit code on Sploitus

CVE-2021-41816
CVSS 9.8 CRITICAL 2021-11-25FIX AVAILABLE
CVE-2019-16255
CVSS 8.1 HIGH 2019-07-27FIX AVAILABLE
CVE-2018-16395
CVSS 9.8 CRITICAL 2018-10-17FIX AVAILABLE
CVE-2017-17790
CVSS 9.8 CRITICAL 2017-12-20FIX AVAILABLE
CVE-2026-33210
CVSS 9.1 CRITICAL 2026-03-19FIX AVAILABLE
CVE-2022-28738
CVSS 9.8 CRITICAL 2022-04-12FIX AVAILABLE
CVE-2016-2338 3 exploits
CVSS 9.8 CRITICAL 2020-02-14
CVE-2017-14064
CVSS 9.8 CRITICAL 2017-08-31FIX AVAILABLE
CVE-2017-9224
CVSS 9.8 CRITICAL 2017-05-22FIX AVAILABLE
CVE-2017-9227
CVSS 9.8 CRITICAL 2017-05-22FIX AVAILABLE
CVE-2016-2336 1 exploit
CVSS 9.8 CRITICAL 2017-01-06
CVE-2016-2337 1 exploit
CVSS 9.8 CRITICAL 2017-01-06
CVE-2016-2339 1 exploit
CVSS 9.8 CRITICAL 2017-01-06
CVE-2017-17405 4 exploits
CVSS 9.3 HIGH 2017-12-14FIX AVAILABLE
CVE-2017-10784
CVSS 9.3 HIGH 2017-07-01FIX AVAILABLE
CVE-2018-8780
CVSS 9.1 CRITICAL 2018-04-01FIX AVAILABLE
CVE-2017-0898
CVSS 9.1 CRITICAL 2017-09-15FIX AVAILABLE
CVE-2013-1655
CVSS 7.5 HIGH 2013-03-20FIX AVAILABLE
CVE-2026-47389
CVSS 8.6 HIGH 2026-06-24FIX AVAILABLE
CVE-2026-46727
CVSS 8.1 HIGH 2026-05-20FIX AVAILABLE
CVE-2026-41316
CVSS 8.1 HIGH 2026-04-21FIX AVAILABLE
CVE-2018-16396
CVSS 8.1 HIGH 2018-10-26FIX AVAILABLE
CVE-2025-61594
CVSS 7.5 HIGH 2025-01-01FIX AVAILABLE
CVE-2025-24294
CVSS 7.5 HIGH 2025-07-08
CVE-2024-49761
CVSS 8.7 HIGH 2024-10-28FIX AVAILABLE
CVE-2023-22796
CVSS 7.5 HIGH 2023-01-18FIX AVAILABLE
CVE-2023-28756
CVSS 5.3 MEDIUM 2022-09-18FIX AVAILABLE
CVE-2021-41819
CVSS 7.5 HIGH 2021-11-24FIX AVAILABLE
CVE-2021-41817
CVSS 7.5 HIGH 2021-11-15FIX AVAILABLE
CVE-2021-31810
CVSS 5.8 MEDIUM 2021-04-02FIX AVAILABLE
CVE-2020-10663 1 exploit
CVSS 7.5 HIGH 2020-03-19FIX AVAILABLE
CVE-2019-16201
CVSS 7.8 HIGH 2019-07-27FIX AVAILABLE
CVE-2018-8779
CVSS 7.5 HIGH 2018-03-28FIX AVAILABLE
CVE-2018-8778
CVSS 7.5 HIGH 2018-03-28FIX AVAILABLE
CVE-2018-8777
CVSS 7.5 HIGH 2018-03-28FIX AVAILABLE
CVE-2018-6914
CVSS 7.5 HIGH 2018-03-28FIX AVAILABLE
CVE-2008-3905 1 exploit
CVSS 5.8 MEDIUMFIX AVAILABLE
CVE-2008-3657 1 exploit
CVSS 7.5 HIGH
CVE-2008-3656 3 exploits
CVSS 7.8 HIGH
CVE-2008-3655 2 exploits
CVSS 7.5 HIGHFIX AVAILABLE
CVE-2024-26142
CVSS 7.5 HIGH 2024-02-24FIX AVAILABLE
CVE-2022-28739
CVSS 7.5 HIGH 2022-04-12FIX AVAILABLE
CVE-2021-28966
CVSS 7.5 HIGH 2021-04-05FIX AVAILABLE
CVE-2021-28965
CVSS 7.5 HIGH 2021-04-12FIX AVAILABLE
CVE-2020-25613 1 exploit
CVSS 7.5 HIGH 2020-10-01FIX AVAILABLE
CVE-2019-16254
CVSS 5.3 MEDIUM 2016-10-03FIX AVAILABLE
CVE-2017-9229
CVSS 7.5 HIGH 2017-05-24FIX AVAILABLE
CVE-2017-14033
CVSS 7.5 HIGH 2017-09-16FIX AVAILABLE
CVE-2013-0269 1 exploit
CVSS 7.5 HIGH 2013-02-12FIX AVAILABLE
CVE-2009-4492 2 exploits
CVSS 7.5 HIGH 2010-01-13FIX AVAILABLE