{"url":"http://public2.vulnerablecode.io/api/packages/122856?format=json","purl":"pkg:rpm/redhat/ruby193-rubygem-more_core_extensions@1.1.2-1?arch=el6cf","type":"rpm","namespace":"redhat","name":"ruby193-rubygem-more_core_extensions","version":"1.1.2-1","qualifiers":{"arch":"el6cf"},"subpath":"","is_vulnerable":true,"next_non_vulnerable_version":null,"latest_non_vulnerable_version":null,"affected_by_vulnerabilities":[{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/54798?format=json","vulnerability_id":"VCID-1bdw-9rs5-6ycg","summary":"several","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4164.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4164.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2013-4164","reference_id":"","reference_type":"","scores":[{"value":"0.11958","scoring_system":"epss","scoring_elements":"0.9372","published_at":"2026-04-01T12:55:00Z"},{"value":"0.11958","scoring_system":"epss","scoring_elements":"0.93729","published_at":"2026-04-02T12:55:00Z"},{"value":"0.11958","scoring_system":"epss","scoring_elements":"0.9374","published_at":"2026-04-04T12:55:00Z"},{"value":"0.11958","scoring_system":"epss","scoring_elements":"0.93743","published_at":"2026-04-07T12:55:00Z"},{"value":"0.11958","scoring_system":"epss","scoring_elements":"0.93752","published_at":"2026-04-08T12:55:00Z"},{"value":"0.11958","scoring_system":"epss","scoring_elements":"0.93755","published_at":"2026-04-09T12:55:00Z"},{"value":"0.11958","scoring_system":"epss","scoring_elements":"0.93759","published_at":"2026-04-13T12:55:00Z"},{"value":"0.11958","scoring_system":"epss","scoring_elements":"0.93781","published_at":"2026-04-16T12:55:00Z"},{"value":"0.11958","scoring_system":"epss","scoring_elements":"0.93787","published_at":"2026-04-18T12:55:00Z"},{"value":"0.11958","scoring_system":"epss","scoring_elements":"0.93789","published_at":"2026-04-21T12:55:00Z"},{"value":"0.11958","scoring_system":"epss","scoring_elements":"0.93793","published_at":"2026-04-24T12:55:00Z"},{"value":"0.11958","scoring_system":"epss","scoring_elements":"0.93791","published_at":"2026-04-26T12:55:00Z"},{"value":"0.11958","scoring_system":"epss","scoring_elements":"0.93788","published_at":"2026-04-29T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2013-4164"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1821","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1821"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4073","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4073"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4164","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4164"},{"reference_url":"https://www.ruby-lang.org/en/news/2013/11/22/heap-overflow-in-floating-point-parsing-cve-2013-4164","reference_id":"","reference_type":"","scores":[],"url":"https://www.ruby-lang.org/en/news/2013/11/22/heap-overflow-in-floating-point-parsing-cve-2013-4164"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1033460","reference_id":"1033460","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1033460"},{"reference_url":"https://security.gentoo.org/glsa/201412-27","reference_id":"GLSA-201412-27","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/201412-27"},{"reference_url":"https://access.redhat.com/errata/RHSA-2013:1763","reference_id":"RHSA-2013:1763","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2013:1763"},{"reference_url":"https://access.redhat.com/errata/RHSA-2013:1764","reference_id":"RHSA-2013:1764","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2013:1764"},{"reference_url":"https://access.redhat.com/errata/RHSA-2013:1767","reference_id":"RHSA-2013:1767","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2013:1767"},{"reference_url":"https://access.redhat.com/errata/RHSA-2014:0011","reference_id":"RHSA-2014:0011","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2014:0011"},{"reference_url":"https://access.redhat.com/errata/RHSA-2014:0215","reference_id":"RHSA-2014:0215","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2014:0215"},{"reference_url":"https://usn.ubuntu.com/2035-1/","reference_id":"USN-2035-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/2035-1/"}],"fixed_packages":[],"aliases":["CVE-2013-4164","GHSA-j98q-m2w8-57rc","OSV-100113"],"risk_score":0.2,"exploitability":"2.0","weighted_severity":"0.1","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-1bdw-9rs5-6ycg"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/6903?format=json","vulnerability_id":"VCID-3wtf-uu89-2qe5","summary":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')\nMultiple cross-site scripting (XSS) vulnerabilities in actionview/lib/action_view/helpers/number_helper.rb in Ruby on Rails beta2 allow remote attackers to inject arbitrary web script or HTML via the (1) format, (2) negative_format, or (3) units parameter to the (a) number_to_currency, (b) number_to_percentage, or (c) number_to_human helper.","references":[{"reference_url":"http://lists.opensuse.org/opensuse-updates/2014-02/msg00081.html","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://lists.opensuse.org/opensuse-updates/2014-02/msg00081.html"},{"reference_url":"http://openwall.com/lists/oss-security/2014/02/18/8","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://openwall.com/lists/oss-security/2014/02/18/8"},{"reference_url":"http://rhn.redhat.com/errata/RHSA-2014-0215.html","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://rhn.redhat.com/errata/RHSA-2014-0215.html"},{"reference_url":"http://rhn.redhat.com/errata/RHSA-2014-0306.html","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://rhn.redhat.com/errata/RHSA-2014-0306.html"},{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0081.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0081.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2014-0081","reference_id":"","reference_type":"","scores":[{"value":"0.00885","scoring_system":"epss","scoring_elements":"0.75514","published_at":"2026-04-29T12:55:00Z"},{"value":"0.00885","scoring_system":"epss","scoring_elements":"0.75447","published_at":"2026-04-09T12:55:00Z"},{"value":"0.00885","scoring_system":"epss","scoring_elements":"0.75467","published_at":"2026-04-11T12:55:00Z"},{"value":"0.00885","scoring_system":"epss","scoring_elements":"0.75446","published_at":"2026-04-12T12:55:00Z"},{"value":"0.00885","scoring_system":"epss","scoring_elements":"0.75435","published_at":"2026-04-13T12:55:00Z"},{"value":"0.00885","scoring_system":"epss","scoring_elements":"0.75477","published_at":"2026-04-16T12:55:00Z"},{"value":"0.00885","scoring_system":"epss","scoring_elements":"0.75483","published_at":"2026-04-18T12:55:00Z"},{"value":"0.00885","scoring_system":"epss","scoring_elements":"0.75471","published_at":"2026-04-21T12:55:00Z"},{"value":"0.00885","scoring_system":"epss","scoring_elements":"0.75505","published_at":"2026-04-24T12:55:00Z"},{"value":"0.00885","scoring_system":"epss","scoring_elements":"0.7551","published_at":"2026-04-26T12:55:00Z"},{"value":"0.00885","scoring_system":"epss","scoring_elements":"0.75378","published_at":"2026-04-01T12:55:00Z"},{"value":"0.00885","scoring_system":"epss","scoring_elements":"0.75382","published_at":"2026-04-02T12:55:00Z"},{"value":"0.00885","scoring_system":"epss","scoring_elements":"0.75415","published_at":"2026-04-04T12:55:00Z"},{"value":"0.00885","scoring_system":"epss","scoring_elements":"0.75394","published_at":"2026-04-07T12:55:00Z"},{"value":"0.00885","scoring_system":"epss","scoring_elements":"0.75438","published_at":"2026-04-08T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2014-0081"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0081","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0081"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0082","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0082"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0130","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0130"},{"reference_url":"https://github.com/rails/rails","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/rails/rails"},{"reference_url":"https://github.com/rails/rails/commit/08d0a11a3f62718d601d39e617c834759cf59bbb","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/rails/rails/commit/08d0a11a3f62718d601d39e617c834759cf59bbb"},{"reference_url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2014-0081.yml","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2014-0081.yml"},{"reference_url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rails/CVE-2014-0081.yml","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rails/CVE-2014-0081.yml"},{"reference_url":"https://groups.google.com/forum/#!topic/rubyonrails-security/tfp6gZCtzr4","reference_id":"","reference_type":"","scores":[],"url":"https://groups.google.com/forum/#!topic/rubyonrails-security/tfp6gZCtzr4"},{"reference_url":"https://web.archive.org/web/20140911141416/http://www.securitytracker.com/id/1029782","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://web.archive.org/web/20140911141416/http://www.securitytracker.com/id/1029782"},{"reference_url":"https://web.archive.org/web/20170307202606/http://www.securityfocus.com/bid/65647","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://web.archive.org/web/20170307202606/http://www.securityfocus.com/bid/65647"},{"reference_url":"https://web.archive.org/web/20201207045136/https://groups.google.com/forum/message/raw?msg=rubyonrails-security/tfp6gZCtzr4/j8LUHmu7fIEJ","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://web.archive.org/web/20201207045136/https://groups.google.com/forum/message/raw?msg=rubyonrails-security/tfp6gZCtzr4/j8LUHmu7fIEJ"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1065520","reference_id":"1065520","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1065520"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0081","reference_id":"CVE-2014-0081","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0081"},{"reference_url":"https://github.com/advisories/GHSA-m46p-ggm5-5j83","reference_id":"GHSA-m46p-ggm5-5j83","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-m46p-ggm5-5j83"},{"reference_url":"https://access.redhat.com/errata/RHSA-2014:0215","reference_id":"RHSA-2014:0215","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2014:0215"},{"reference_url":"https://access.redhat.com/errata/RHSA-2014:0306","reference_id":"RHSA-2014:0306","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2014:0306"}],"fixed_packages":[],"aliases":["CVE-2014-0081","GHSA-m46p-ggm5-5j83","OSV-103439"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-3wtf-uu89-2qe5"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/86353?format=json","vulnerability_id":"VCID-bv8s-3wu9-mfa8","summary":"CFME: Dangerous send in ServiceController","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0057.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0057.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2014-0057","reference_id":"","reference_type":"","scores":[{"value":"0.00703","scoring_system":"epss","scoring_elements":"0.72015","published_at":"2026-04-01T12:55:00Z"},{"value":"0.00703","scoring_system":"epss","scoring_elements":"0.72022","published_at":"2026-04-02T12:55:00Z"},{"value":"0.00703","scoring_system":"epss","scoring_elements":"0.72042","published_at":"2026-04-04T12:55:00Z"},{"value":"0.00703","scoring_system":"epss","scoring_elements":"0.72019","published_at":"2026-04-07T12:55:00Z"},{"value":"0.00703","scoring_system":"epss","scoring_elements":"0.72055","published_at":"2026-04-08T12:55:00Z"},{"value":"0.00703","scoring_system":"epss","scoring_elements":"0.72067","published_at":"2026-04-09T12:55:00Z"},{"value":"0.00703","scoring_system":"epss","scoring_elements":"0.7209","published_at":"2026-04-11T12:55:00Z"},{"value":"0.00703","scoring_system":"epss","scoring_elements":"0.72074","published_at":"2026-04-12T12:55:00Z"},{"value":"0.00703","scoring_system":"epss","scoring_elements":"0.72058","published_at":"2026-04-13T12:55:00Z"},{"value":"0.00703","scoring_system":"epss","scoring_elements":"0.721","published_at":"2026-04-16T12:55:00Z"},{"value":"0.00703","scoring_system":"epss","scoring_elements":"0.72107","published_at":"2026-04-18T12:55:00Z"},{"value":"0.00703","scoring_system":"epss","scoring_elements":"0.72092","published_at":"2026-04-21T12:55:00Z"},{"value":"0.00703","scoring_system":"epss","scoring_elements":"0.72136","published_at":"2026-04-24T12:55:00Z"},{"value":"0.00703","scoring_system":"epss","scoring_elements":"0.72144","published_at":"2026-04-26T12:55:00Z"},{"value":"0.00703","scoring_system":"epss","scoring_elements":"0.72138","published_at":"2026-04-29T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2014-0057"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1064140","reference_id":"1064140","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1064140"},{"reference_url":"https://access.redhat.com/errata/RHSA-2014:0215","reference_id":"RHSA-2014:0215","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2014:0215"}],"fixed_packages":[],"aliases":["CVE-2014-0057"],"risk_score":null,"exploitability":"0.5","weighted_severity":"0.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-bv8s-3wu9-mfa8"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/86354?format=json","vulnerability_id":"VCID-er1e-c57c-t3fk","summary":"EVM: Stored XSS","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0186.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0186.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2013-0186","reference_id":"","reference_type":"","scores":[{"value":"0.00401","scoring_system":"epss","scoring_elements":"0.60801","published_at":"2026-04-29T12:55:00Z"},{"value":"0.00401","scoring_system":"epss","scoring_elements":"0.60808","published_at":"2026-04-26T12:55:00Z"},{"value":"0.00401","scoring_system":"epss","scoring_elements":"0.60651","published_at":"2026-04-01T12:55:00Z"},{"value":"0.00401","scoring_system":"epss","scoring_elements":"0.60726","published_at":"2026-04-02T12:55:00Z"},{"value":"0.00401","scoring_system":"epss","scoring_elements":"0.60755","published_at":"2026-04-04T12:55:00Z"},{"value":"0.00401","scoring_system":"epss","scoring_elements":"0.60721","published_at":"2026-04-07T12:55:00Z"},{"value":"0.00401","scoring_system":"epss","scoring_elements":"0.60769","published_at":"2026-04-08T12:55:00Z"},{"value":"0.00401","scoring_system":"epss","scoring_elements":"0.60785","published_at":"2026-04-09T12:55:00Z"},{"value":"0.00401","scoring_system":"epss","scoring_elements":"0.60806","published_at":"2026-04-21T12:55:00Z"},{"value":"0.00401","scoring_system":"epss","scoring_elements":"0.60792","published_at":"2026-04-12T12:55:00Z"},{"value":"0.00401","scoring_system":"epss","scoring_elements":"0.60773","published_at":"2026-04-13T12:55:00Z"},{"value":"0.00401","scoring_system":"epss","scoring_elements":"0.60816","published_at":"2026-04-16T12:55:00Z"},{"value":"0.00401","scoring_system":"epss","scoring_elements":"0.60821","published_at":"2026-04-18T12:55:00Z"},{"value":"0.00401","scoring_system":"epss","scoring_elements":"0.60795","published_at":"2026-04-24T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2013-0186"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-0186","reference_id":"","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-0186"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=895346","reference_id":"895346","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=895346"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:redhat:cloudforms:3.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:redhat:cloudforms:3.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:redhat:cloudforms:3.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:redhat:manageiq_enterprise_virtualization_manager:-:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:redhat:manageiq_enterprise_virtualization_manager:-:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:redhat:manageiq_enterprise_virtualization_manager:-:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2013-0186","reference_id":"CVE-2013-0186","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv2","scoring_elements":"AV:N/AC:M/Au:N/C:N/I:P/A:N"},{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-0186"},{"reference_url":"https://access.redhat.com/errata/RHSA-2014:0215","reference_id":"RHSA-2014:0215","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2014:0215"}],"fixed_packages":[],"aliases":["CVE-2013-0186"],"risk_score":2.8,"exploitability":"0.5","weighted_severity":"5.5","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-er1e-c57c-t3fk"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/6901?format=json","vulnerability_id":"VCID-mep3-6sub-ykdk","summary":"Denial of Service Vulnerability when using render :text\nStrings sent in specially crafted headers will be converted to symbols.","references":[{"reference_url":"http://lists.opensuse.org/opensuse-updates/2014-02/msg00081.html","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://lists.opensuse.org/opensuse-updates/2014-02/msg00081.html"},{"reference_url":"http://openwall.com/lists/oss-security/2014/02/18/10","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://openwall.com/lists/oss-security/2014/02/18/10"},{"reference_url":"http://rhn.redhat.com/errata/RHSA-2014-0215.html","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://rhn.redhat.com/errata/RHSA-2014-0215.html"},{"reference_url":"http://rhn.redhat.com/errata/RHSA-2014-0306.html","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://rhn.redhat.com/errata/RHSA-2014-0306.html"},{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0082.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0082.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2014-0082","reference_id":"","reference_type":"","scores":[{"value":"0.06456","scoring_system":"epss","scoring_elements":"0.91105","published_at":"2026-04-29T12:55:00Z"},{"value":"0.06456","scoring_system":"epss","scoring_elements":"0.91062","published_at":"2026-04-09T12:55:00Z"},{"value":"0.06456","scoring_system":"epss","scoring_elements":"0.91071","published_at":"2026-04-13T12:55:00Z"},{"value":"0.06456","scoring_system":"epss","scoring_elements":"0.91096","published_at":"2026-04-16T12:55:00Z"},{"value":"0.06456","scoring_system":"epss","scoring_elements":"0.91095","published_at":"2026-04-18T12:55:00Z"},{"value":"0.06456","scoring_system":"epss","scoring_elements":"0.91098","published_at":"2026-04-21T12:55:00Z"},{"value":"0.06456","scoring_system":"epss","scoring_elements":"0.91112","published_at":"2026-04-24T12:55:00Z"},{"value":"0.06456","scoring_system":"epss","scoring_elements":"0.9111","published_at":"2026-04-26T12:55:00Z"},{"value":"0.06456","scoring_system":"epss","scoring_elements":"0.91021","published_at":"2026-04-01T12:55:00Z"},{"value":"0.06456","scoring_system":"epss","scoring_elements":"0.91026","published_at":"2026-04-02T12:55:00Z"},{"value":"0.06456","scoring_system":"epss","scoring_elements":"0.91035","published_at":"2026-04-04T12:55:00Z"},{"value":"0.06456","scoring_system":"epss","scoring_elements":"0.91044","published_at":"2026-04-07T12:55:00Z"},{"value":"0.06456","scoring_system":"epss","scoring_elements":"0.91056","published_at":"2026-04-08T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2014-0082"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0081","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0081"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0082","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0082"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0130","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0130"},{"reference_url":"https://github.com/rails/rails","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/rails/rails"},{"reference_url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2014-0082.yml","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2014-0082.yml"},{"reference_url":"https://groups.google.com/forum/#!topic/rubyonrails-security/LMxO_3_eCuc","reference_id":"","reference_type":"","scores":[],"url":"https://groups.google.com/forum/#!topic/rubyonrails-security/LMxO_3_eCuc"},{"reference_url":"https://web.archive.org/web/20201207044540/https://groups.google.com/forum/message/raw?msg=rubyonrails-security/LMxO_3_eCuc/ozGBEhKaJbIJ","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://web.archive.org/web/20201207044540/https://groups.google.com/forum/message/raw?msg=rubyonrails-security/LMxO_3_eCuc/ozGBEhKaJbIJ"},{"reference_url":"https://web.archive.org/web/20220315115444/https://puppet.com/security/cve/cve-2014-0082","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://web.archive.org/web/20220315115444/https://puppet.com/security/cve/cve-2014-0082"},{"reference_url":"http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1-3-release","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1-3-release"},{"reference_url":"http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1-3-release/","reference_id":"","reference_type":"","scores":[],"url":"http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1-3-release/"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1065538","reference_id":"1065538","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1065538"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0082","reference_id":"CVE-2014-0082","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0082"},{"reference_url":"https://github.com/advisories/GHSA-7cgp-c3g7-qvrw","reference_id":"GHSA-7cgp-c3g7-qvrw","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-7cgp-c3g7-qvrw"},{"reference_url":"https://access.redhat.com/errata/RHSA-2014:0215","reference_id":"RHSA-2014:0215","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2014:0215"},{"reference_url":"https://access.redhat.com/errata/RHSA-2014:0306","reference_id":"RHSA-2014:0306","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2014:0306"}],"fixed_packages":[],"aliases":["CVE-2014-0082","GHSA-7cgp-c3g7-qvrw","OSV-103440"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-mep3-6sub-ykdk"}],"fixing_vulnerabilities":[],"risk_score":"3.1","resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/ruby193-rubygem-more_core_extensions@1.1.2-1%3Farch=el6cf"}