ror40-rubygem-activerecord vulnerabilities (Red Hat)

9 vulnerabilities.

• ror40-rubygem-activerecord Red Hat actionpack allows remote code execution via application's unrestricted use of render method CVE-2016-2098 Public exploitFix available EPSS 81.4% 7.3 HighMarch 9, 2016
• ror40-rubygem-activerecord Red Hat actionview contains Path Traversal vulnerability CVE-2016-2097 Fix available 5.3 MediumMarch 9, 2016
• ror40-rubygem-activerecord Red Hat Directory traversal vulnerability in Action View in Ruby on Rails CVE-2016-0752 In KEVPublic exploitFix available EPSS 95.5% 7.5 HighJanuary 31, 2016
• ror40-rubygem-activerecord Red Hat actionpack is vulnerable to denial of service via a crafted HTTP Accept header CVE-2016-0751 Fix available 7.5 HighJanuary 31, 2016
• ror40-rubygem-activerecord Red Hat actionpack is vulnerable to denial of service because of a wildcard controller route CVE-2015-7581 Fix available 7.5 HighJanuary 31, 2016
• ror40-rubygem-activerecord Red Hat Active Record Improper Access Control CVE-2015-7577 Fix available 5.3 MediumJanuary 31, 2016
• ror40-rubygem-activerecord Red Hat actionpack is vulnerable to remote bypass authentication CVE-2015-7576 Fix available 3.7 LowJanuary 31, 2016
• ror40-rubygem-activerecord Red Hat Active Record subject to strong parameters protection bypass CVE-2014-3514 Fix available 7.5 HighAugust 20, 2014
• ror40-rubygem-activerecord Red Hat Active Record contains SQL Injection via improper range quoting CVE-2014-3483 Fix available 7.5 HighJuly 7, 2014