Add New Ruby-Saml vulnerability

* A second Ruby advisory with the same story, CVE request but not OSVDB
was sent out today as well. Added that. The CVSS_2 scores were
calculated by a colleague

gems/ruby-saml/OSVDB-124383.yml

@@ -0,0 +1,11 @@
+---
+gem: ruby-saml
+osvdb: 124383
+url: https://github.com/onelogin/ruby-saml/pull/247
+title: Ruby-Saml Gem is vulnerable to entity expansion attacks
+date: 2015-06-30
+description: |
+  ruby-saml before 1.0.0 is vulnerable to entity expansion attacks.
+cvss_v2: 3.9
+patched_versions:
+  - ">= 1.0.0"

gems/ruby-saml/OSVDB-124991.yml

@@ -0,0 +1,13 @@
+---
+gem: ruby-saml
+osvdb: 124991
+url: https://github.com/onelogin/ruby-saml/pull/225
+title: Ruby-Saml Gem is vulnerable to XPath Injection
+date: 2015-04-29
+description: |
+  ruby-saml before 1.0.0 is vulnerable to XPath injection on xml_security.rb. The 
+  lack of prepared statements allows for possibly command injection, leading to 
+  arbitrary code execution
+cvss_v2: 6.7
+patched_versions:
+  - ">= 1.0.0"