ruby193-rubygem-activerecord-doc vulnerabilities (Red Hat)
31 vulnerabilities.
-
ruby193-rubygem-activerecord-docRed Hat A CSRF issue was found in OpenShift Enterprise 1.2. The web console is using 'Basic... 6.5 Medium -
ruby193-rubygem-activerecord-docRed Hat actionpack allows remote code execution via application's unrestricted use of render method 7.3 High -
ruby193-rubygem-activerecord-docRed Hat actionview contains Path Traversal vulnerability 5.3 Medium -
ruby193-rubygem-activerecord-docRed Hat Directory traversal vulnerability in Action View in Ruby on Rails 7.5 High -
ruby193-rubygem-activerecord-docRed Hat actionpack is vulnerable to denial of service via a crafted HTTP Accept header 7.5 High -
ruby193-rubygem-activerecord-docRed Hat Active Record Improper Access Control 5.3 Medium -
ruby193-rubygem-activerecord-docRed Hat actionpack is vulnerable to remote bypass authentication 3.7 Low -
ruby193-rubygem-activerecord-docRed Hat SQL Injection in Active Record 7.5 High -
ruby193-rubygem-activerecord-docRed Hat Ruby 1.8.7 before patchlevel 371, 1.9.3 before patchlevel 286, and 2.0 before revision r37068... 5.0 Medium -
ruby193-rubygem-activerecord-docRed Hat Ruby 1.9.3 before patchlevel 286 and 2.0 before revision r37068 allows context-dependent... 5.0 Medium -
ruby193-rubygem-activerecord-docRed Hat Active Record Improper Input Validation 5.0 Medium -
ruby193-rubygem-activerecord-docRed Hat ruby_parser allows local users to overwrite arbitrary files via symlink attack on temporary file with predictable name 2.1 Low -
ruby193-rubygem-activerecord-docRed Hat The lockwrap function in port-proxy/bin/openshift-port-proxy-cfg in Red Hat OpenShift Origin... 3.6 Low -
ruby193-rubygem-activerecord-docRed Hat Jenkins allows attackers to obtain the master cryptographic key 2.6 Low -
ruby193-rubygem-activerecord-docRed Hat Jenkins allows Cross-Site Scripting (XSS) 3.5 Low -
ruby193-rubygem-activerecord-docRed Hat Jenkins affected by Open Redirect Vulnerability 5.8 Medium -
ruby193-rubygem-activerecord-docRed Hat Jenkins allows HTTP Injection and Response Splitting 4.3 Medium -
ruby193-rubygem-activerecord-docRed Hat rhc-chk.rb in Red Hat OpenShift Origin before 1.1, when -d (debug mode) is used, outputs the... 2.1 Low -
ruby193-rubygem-activerecord-docRed Hat ActiveRecord vulnerable to modification of protected model attributes 4.3 Medium -
ruby193-rubygem-activerecord-docRed Hat Active Record allows bypassing of database-query restrictions 6.4 Medium -
ruby193-rubygem-activerecord-docRed Hat Active Record contains SQL Injection 7.5 High -
ruby193-rubygem-activerecord-docRed Hat Ruby (aka CRuby) 1.9 before 1.9.3-p327 and 2.0 before r37575 computes hash values without... 5.0 Medium -
ruby193-rubygem-activerecord-docRed Hat The rb_get_path_check function in file.c in Ruby 1.9.3 before patchlevel 286 and Ruby 2.0.0... 5.0 Medium -
ruby193-rubygem-activerecord-docRed Hat actionpack Cross-site Scripting vulnerability 4.3 Medium -
ruby193-rubygem-activerecord-docRed Hat activesupport Cross-site Scripting vulnerability 4.3 Medium -
ruby193-rubygem-activerecord-docRed Hat actionpack Cross-site Scripting vulnerability 4.3 Medium -
ruby193-rubygem-activerecord-docRed Hat actionpack Improper Authentication vulnerability 5.0 Medium -
ruby193-rubygem-activerecord-docRed Hat activerecord vulnerable to SQL Injection 7.5 High -
ruby193-rubygem-activerecord-docRed Hat actionpack allows remote attackers to bypass database-query restrictions, perform NULL checks via crafted request 4.3 Medium -
ruby193-rubygem-activerecord-docRed Hat Active Record vulnerable to SQL Injection via nested query parameters 5.0 Medium -
ruby193-rubygem-activerecord-docRed Hat Action Pack contains database-query restrictions bypass 6.4 Medium