Mark Evans

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Mark Evans records in CISA KEV

No Mark Evans vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Dragonfly Gem 1 record LOW Fog-dragonfly 1 record LOW

Records

2 records

TI-2013-01545 CVE-2013-1756 · GHSA-p463-639r-q9g9

The Dragonfly gem 0.7 before 0.8.6 and 0.9.x before 0.9.13 for Ruby, when used with Ruby…

LOW 39

The Dragonfly gem 0.7 before 0.8.6 and 0.9.x before 0.9.13 for Ruby, when used with Ruby on Rails, allows remote attackers to execute arbitrary code via a crafted request.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03713 Published 2014-06-09 Fixed in 0.8.6, 0.9.13 CWE-94

TI-2013-04836 CVE-2013-5671 · GHSA-qrgf-jqqm-x7xv

lib/dragonfly/imagemagickutils.rb in the fog-dragonfly gem 0.8.2 for Ruby allows remote…

LOW 37

lib/dragonfly/imagemagickutils.rb in the fog-dragonfly gem 0.8.2 for Ruby allows remote attackers to execute arbitrary commands via unspecified vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02188 Published 2014-05-12 Fixed in 1.0.0 CWE-74

Open these records in search →

Critical	0
High	2
Medium	0
Low	0
No CVSS	0