rails vulnerabilities (Debian)
134 vulnerabilities.
railsDebianActiveSupport potentially unintended unmarshalling of user-provided objects in MemCacheStore and RedisCacheStore9.8 CriticalrailsDebianPossible XSS vulnerability in ActionView4.0 MediumrailsDebianThe encrypt/decrypt functions in Ruby on Rails 2.3 are vulnerable to padding oracle attacks.6.5 MediumrailsDebianUse of Insufficiently Random Values in Railties Allows Remote Code Execution9.8 CriticalrailsDebianPath Traversal in Action View7.5 HighrailsDebianDenial of Service Vulnerability in Action View7.5 HighrailsDebianExposure of Sensitive Information to an Unauthorized Actor in activestorage6.5 MediumrailsDebianImproper Access Control in activejob7.5 HighrailsDebian** DISPUTED ** SQL injection vulnerability in the 'reorder' method in Ruby on Rails 5.1.4 and...8.1 HighrailsDebian** DISPUTED ** SQL injection vulnerability in the 'order' method in Ruby on Rails 5.1.4 and...8.1 HighrailsDebian** DISPUTED ** SQL injection vulnerability in the 'where' method in Ruby on Rails 5.1.4 and...8.1 HighrailsDebian** DISPUTED ** SQL injection vulnerability in the 'find_by' method in Ruby on Rails 5.1.4 and...8.1 HighrailsDebianActiveRecord in Ruby on Rails allows database-query bypass7.5 HighrailsDebianactionview Cross-site Scripting vulnerability6.1 MediumrailsDebianactionpack allows remote code execution via application's unrestricted use of render method7.3 HighrailsDebianactionview contains Path Traversal vulnerability5.3 MediumrailsDebianactivemodel contains Improper Input Validation5.3 MediumrailsDebianDirectory traversal vulnerability in Action View in Ruby on Rails7.5 HighrailsDebianactionpack is vulnerable to denial of service via a crafted HTTP Accept header7.5 HighrailsDebianactionpack is vulnerable to denial of service because of a wildcard controller route7.5 HighrailsDebianActive Record Improper Access Control5.3 MediumrailsDebianactionpack is vulnerable to remote bypass authentication3.7 LowrailsDebianactivesupport vulnerable to Denial of Service via large XML document depth5.0 MediumrailsDebianactivesupport Cross-site Scripting vulnerability4.3 MediumrailsDebianDirectory traversal vulnerability in actionpack5.0 MediumrailsDebianactionpack vulnerable to Path Traversal4.3 MediumrailsDebianActive Record subject to strong parameters protection bypass7.5 HighrailsDebianActive Record contains SQL Injection via improper range quoting7.5 HighrailsDebianSQL Injection in Active Record7.5 HighrailsDebianactionpack Improper Input Validation vulnerability5.0 MediumrailsDebianRails vulnerable to Cross-site Scripting4.3 MediumrailsDebianActive Record component in Ruby on Rails has a data-type injection vulnerability6.4 MediumrailsDebianactionpack Cross-site Scripting vulnerability4.3 MediumrailsDebianactionpack Cross-site Scripting vulnerability4.3 MediumrailsDebianActive Record Improper Input Validation5.0 MediumrailsDebianActive Record contains deserialization of arbitrary YAML10.0 HighrailsDebianActiveRecord vulnerable to modification of protected model attributes4.3 MediumrailsDebianactivesupport in Rails vulnerable to incorrect data conversion7.5 HighrailsDebianActive Record allows bypassing of database-query restrictions6.4 MediumrailsDebianactionpack Improper Input Validation vulnerability7.5 HighrailsDebianAuthlogic Information Exposure vulnerability5.0 MediumrailsDebianActive Record contains SQL Injection7.5 HighrailsDebianactionpack Cross-site Scripting vulnerability4.3 MediumrailsDebianactivesupport Cross-site Scripting vulnerability4.3 MediumrailsDebianCross-site Scripting in actionpack4.3 MediumrailsDebianactivesupport Cross-site Scripting vulnerability4.3 MediumrailsDebianrails - severalNo scorerailsDebianactionpack Improper Input Validation vulnerability4.3 MediumrailsDebianactionpack CRLF injection vulnerability4.3 MediumrailsDebianactivesupport Cross-site Scripting vulnerability4.3 Medium- Show moreLoading…