CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| CVE-2021-46020 |
| 高危7.5 |
An untrusted pointer dereference in mrb_vm_exec() of mruby v3.0.0 can lead to a segmentation fault or application crash. |
| 14/01/2022 |
| CVE-2022-0080 | 严重9.8 | mruby is vulnerable to Heap-based Buffer Overflow | 02/01/2022 |
| CVE-2021-4188 | 高危7.5 | mruby is vulnerable to NULL Pointer Dereference | 30/12/2021 |
| CVE-2021-4110 | 高危7.5 | mruby is vulnerable to NULL Pointer Dereference | 15/12/2021 |
| CVE-2020-36401 | 高危7.8 | mruby 2.1.2 has a double free in mrb_default_allocf (called from mrb_free and obj_free). | 01/07/2021 |
| CVE-2020-15866 | 严重9.8 | mruby through 2.1.2-rc has a heap-based buffer overflow in the mrb_yield_with_class function in vm.c because of incorrect VM stack handling. It can be triggered via the stack_copy function. | 21/07/2020 |
| CVE-2020-6840 | 严重9.8 | In mruby 2.1.0, there is a use-after-free in hash_slice in mrbgems/mruby-hash-ext/src/hash-ext.c. | 11/01/2020 |
| CVE-2020-6839 | 严重9.8 | In mruby 2.1.0, there is a stack-based buffer overflow in mrb_str_len_to_dbl in string.c. | 11/01/2020 |
| CVE-2020-6838 | 严重9.8 | In mruby 2.1.0, there is a use-after-free in hash_values_at in mrbgems/mruby-hash-ext/src/hash-ext.c. | 11/01/2020 |
| CVE-2018-14337 | 高危7.5 | The CHECK macro in mrbgems/mruby-sprintf/src/sprintf.c in mruby 1.4.1 contains a signed integer overflow, possibly leading to out-of-bounds memory access because the mrb_str_resize function in string.c does not check for a negative length. | 17/07/2018 |
| CVE-2018-12249 | 高危7.5 | An issue was discovered in mruby 1.4.1. There is a NULL pointer dereference in mrb_class_real because "class BasicObject" is not properly supported in class.c. | 12/06/2018 |
| CVE-2018-12248 | 高危7.5 | An issue was discovered in mruby 1.4.1. There is a heap-based buffer over-read associated with OP_ENTER because mrbgems/mruby-fiber/src/fiber.c does not extend the stack in cases of many arguments to fiber. | 12/06/2018 |
| CVE-2018-12247 | 高危7.5 | An issue was discovered in mruby 1.4.1. There is a NULL pointer dereference in mrb_class, related to certain .clone usage, because mrb_obj_clone in kernel.c copies flags other than the MRB_FLAG_IS_FROZEN flag (e.g., the embedded flag). | 12/06/2018 |
| CVE-2018-11743 | 严重9.8 | The init_copy function in kernel.c in mruby 1.4.1 makes initialize_copy calls for TT_ICLASS objects, which allows attackers to cause a denial of service (mrb_hash_keys uninitialized pointer and application crash) or possibly have unspecified other impact. | 05/06/2018 |
| CVE-2018-10199 | 严重9.8 | In versions of mruby up to and including 1.4.0, a use-after-free vulnerability exists in src/io.c::File#initilialize_copy(). An attacker that can cause Ruby code to be run can possibly use this to execute arbitrary code. | 18/04/2018 |