Products: 1
Vulnerabilities: 3
Known Exploited: 0
0
Critical Level Threats
1
High Level Threats
2
Medium Level Threats
0
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2017-16792
Stored cross-site scripting (XSS) vulnerability in "geminabox" (Gem in a Box) before 0.13.10 allows attackers to inject arbitrary web script via the "homepage" value of a ".gemspec" file, related to views/gem.erb and views/index.erb.
Last Modified: Apr 20, 2025
Published: Nov 13, 2017
CVE-2017-14506
geminabox (aka Gem in a Box) before 0.13.6 has XSS, as demonstrated by uploading a gem file that has a crafted gem.homepage value in its .gemspec file.
Last Modified: Apr 20, 2025
Published: Sep 25, 2017
CVE-2017-14683
geminabox (aka Gem in a Box) before 0.13.7 has CSRF, as demonstrated by an unintended gem upload.
Last Modified: Apr 20, 2025
Published: Sep 25, 2017
Items Per Page
