Skip to content

Vendor

mark evans vulnerabilities

2 published CVES affecting mark evans, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
2
Medium
0
Low
0
Unscored
0
CISA KEV
0
Atom feed of mark evans alerts

Products

Latest mark evans CVEs

Newest publication first

  1. CVE-2013-1756 Dragonfly Code Injection vulnerability

    Published
    HighCVSS 7.5 EPSS 3.7%

    The Dragonfly gem 0.7 before 0.8.6 and 0.9.x before 0.9.13 for Ruby, when used with Ruby on Rails, allows remote attackers to execute arbitrary code via a crafted request.

  2. CVE-2013-5671 Code injection in dragonfly gem

    Published
    HighCVSS 7.5 EPSS 2.2%

    lib/dragonfly/imagemagickutils.rb in the fog-dragonfly gem 0.8.2 for Ruby allows remote attackers to execute arbitrary commands via unspecified vectors.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.