rubygem-actionpack vulnerabilities (Red Hat)
124 vulnerabilities.
-
rubygem-actionpackRed Hat Out-of-bounds read & write in RFC 3211 KEK Unwrap 9.8 Critical -
rubygem-actionpackRed Hat Foreman: read-only access to entire db from templates 6.3 Medium -
rubygem-actionpackRed Hat Memory leak 7.2 High -
rubygem-actionpackRed Hat Puppet-pulpcore: an authentication bypass vulnerability exists in pulpcore 9.8 Critical -
rubygem-actionpackRed Hat Puppet-foreman: an authentication bypass vulnerability exists in foreman 9.8 Critical -
rubygem-actionpackRed Hat Django SQL injection vulnerability 7.3 High -
rubygem-actionpackRed Hat HPACK table poisoning in gRPC C++, Python & Ruby 6.3 Medium -
rubygem-actionpackRed Hat Django vulnerable to Denial of Service 7.5 High -
rubygem-actionpackRed Hat Django Path Traversal vulnerability 4.3 Medium -
rubygem-actionpackRed Hat Django vulnerable to user enumeration attack 5.3 Medium -
rubygem-actionpackRed Hat Django vulnerable to Denial of Service 7.5 High -
rubygem-actionpackRed Hat Denial of Service via crafted zip file in jaraco/zipp 6.2 Medium -
rubygem-actionpackRed Hat Proxy-Authorization request header isn't stripped during cross-origin redirects in urllib3 4.4 Medium -
rubygem-actionpackRed Hat Regular Expression Denial of Service in micromatch 5.3 Medium -
rubygem-actionpackRed Hat node-tar vulnerable to denial of service while parsing a tar file due to lack of folders count validation 6.5 Medium -
rubygem-actionpackRed Hat Request body not stripped after redirect in urllib3 4.2 Medium -
rubygem-actionpackRed Hat HTTP/2 rapid reset can cause excessive work in net/http 7.5 High -
rubygem-actionpackRed Hat Foreman: world readable file containing secrets 6.7 Medium -
rubygem-actionpackRed Hat `Cookie` HTTP header isn't stripped on cross-origin redirects 5.9 Medium -
rubygem-actionpackRed Hat Os command injection via ct_command and fcct_command 8.0 High -
rubygem-actionpackRed Hat Foreman: arbitrary code execution through templates 9.1 Critical -
rubygem-actionpackRed Hat Foreman: stored cross-site scripting in host tab 5.4 Medium -
rubygem-actionpackRed Hat GitPython blind local file inclusion 4.0 Medium -
rubygem-actionpackRed Hat GitPython vulnerable to remote code execution due to insufficient sanitization of input arguments 9.8 Critical -
rubygem-actionpackRed Hat Insufficient sanitization of Host header in net/http 6.5 Medium -
rubygem-actionpackRed Hat Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 7.5 High -
rubygem-actionpackRed Hat Django has regular expression denial of service vulnerability in EmailValidator/URLValidator 7.5 High -
rubygem-actionpackRed Hat Actionpack has possible cross-site scripting vulnerability via User Supplied Values to redirect_to 4.0 Medium -
rubygem-actionpackRed Hat Unintended leak of Proxy-Authorization header in requests 6.1 Medium -
rubygem-actionpackRed Hat A Regular Expression Denial of Service (ReDoS) issue was discovered in Puppet Server 7.9.2... 5.3 Medium -
rubygem-actionpackRed Hat Django bypasses validation when using one form field to upload multiple files 9.8 Critical -
rubygem-actionpackRed Hat Parser contains an inefficient regular expression in sqlparse 5.5 Medium -
rubygem-actionpackRed Hat jackson-databind possible Denial of Service if using JDK serialization to serialize JsonNode 7.5 High -
rubygem-actionpackRed Hat Possible Denial of Service Vulnerability in Rack's header parsing 5.3 Medium -
rubygem-actionpackRed Hat Rack has possible DoS Vulnerability in Multipart MIME parsing 7.5 High -
rubygem-actionpackRed Hat Resource exhaustion in Django 7.5 High -
rubygem-actionpackRed Hat Django contains Uncontrolled Resource Consumption via cached header 7.5 High -
rubygem-actionpackRed Hat Denial of Service Vulnerability in Rack Content-Disposition parsing 7.5 High -
rubygem-actionpackRed Hat ReDoS based DoS vulnerability in Action Dispatch 7.5 High -
rubygem-actionpackRed Hat ReDoS based DoS vulnerability in Active Support's underscore 7.5 High -
rubygem-actionpackRed Hat Denial of Service Vulnerability in ActiveRecord's PostgreSQL adapter 7.5 High -
rubygem-actionpackRed Hat ReDoS based DoS vulnerability in Action Dispatch 7.5 High -
rubygem-actionpackRed Hat SQL Injection Vulnerability via ActiveRecord comments 8.8 High -
rubygem-actionpackRed Hat Denial of service via header parsing in Rack 7.5 High -
rubygem-actionpackRed Hat Denial of service via multipart parsing in Rack 7.5 High -
rubygem-actionpackRed Hat ReDoS based DoS vulnerability in GlobalID 7.5 High -
rubygem-actionpackRed Hat Code injection in ruby git 8.0 High -
rubygem-actionpackRed Hat ruby-git has potential remote code execution vulnerability 8.0 High -
rubygem-actionpackRed Hat Python Charmers Future denial of service vulnerability 7.5 High -
rubygem-actionpackRed Hat A blind site-to-site request forgery vulnerability was found in Satellite server. It is possible... 4.5 Medium - Show olderLoading…