[{"CVE":"CVE-2020-8130","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":[],"bugzilla":"1816270","bugzilla_description":"CVE-2020-8130 rake: OS Command Injection via egrep in Rake::FileList","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8130.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2014-8090","severity":"moderate","public_date":"2014-11-13T00:00:00Z","advisories":["RHSA-2014:1911","RHSA-2014:1914","RHSA-2014:1913","RHSA-2014:1912"],"bugzilla":"1159927","bugzilla_description":"CVE-2014-8090 ruby: REXML incomplete fix for CVE-2014-8080","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-776","affected_packages":["ruby193-ruby-0:1.9.3.484-50.el7","ruby193-ruby-0:1.9.3.484-50.el6","ruby-0:1.8.7.374-3.el6_6","ruby-0:2.0.0.353-22.el7_0","ruby200-ruby-0:2.0.0.353-24.el6","ruby200-ruby-0:2.0.0.353-24.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8090.json"},{"CVE":"CVE-2014-8080","severity":"moderate","public_date":"2014-10-27T00:00:00Z","advisories":["RHSA-2014:1911","RHSA-2014:1914","RHSA-2014:1913","RHSA-2014:1912"],"bugzilla":"1157709","bugzilla_description":"CVE-2014-8080 ruby: REXML billion laughs attack via parameter entity expansion","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-776","affected_packages":["ruby193-ruby-0:1.9.3.484-50.el7","ruby193-ruby-0:1.9.3.484-50.el6","ruby-0:1.8.7.374-3.el6_6","ruby-0:2.0.0.353-22.el7_0","ruby200-ruby-0:2.0.0.353-24.el6","ruby200-ruby-0:2.0.0.353-24.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8080.json"},{"CVE":"CVE-2014-4975","severity":"low","public_date":"2014-07-09T00:00:00Z","advisories":["RHSA-2014:1914","RHSA-2014:1913","RHSA-2014:1912"],"bugzilla":"1118158","bugzilla_description":"CVE-2014-4975 ruby: off-by-one stack-based buffer overflow in the encodes() function","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-193->CWE-121","affected_packages":["ruby193-ruby-0:1.9.3.484-50.el7","ruby193-ruby-0:1.9.3.484-50.el6","ruby-0:2.0.0.353-22.el7_0","ruby200-ruby-0:2.0.0.353-24.el6","ruby200-ruby-0:2.0.0.353-24.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4975.json"}]