rubygem-activerecord vulnerabilities (Red Hat)
100 vulnerabilities.
rubygem-activerecordRed Hatrails-html-sanitizer contains an incomplete fix for an XSS vulnerability6.1 Mediumrubygem-activerecordRed HatPossible XSS vulnerability with certain configurations of rails-html-sanitizer7.2 Highrubygem-activerecordRed HatImproper neutralization of data URIs allows XSS in rails-html-sanitizer6.1 Mediumrubygem-activerecordRed HatInefficient Regular Expression Complexity in rails-html-sanitizer7.5 Highrubygem-activerecordRed HatUncontrolled Recursion in Loofah7.5 Highrubygem-activerecordRed HatImproper neutralization of data URIs may allow XSS in Loofah6.1 Mediumrubygem-activerecordRed HatInefficient Regular Expression Complexity in Loofah7.5 Highrubygem-activerecordRed HatExcessive memory growth in net/http and golang.org/x/net/http25.3 Mediumrubygem-activerecordRed HatRemote Code execution in SnakeYAML8.3 Highrubygem-activerecordRed HatTemporaryFolder on unix-like systems does not limit access to created files in pgjdbc4.7 Mediumrubygem-activerecordRed HatPlaintext storage of tokens in pulp_ansible5.5 Mediumrubygem-activerecordRed HatApache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults9.8 Criticalrubygem-activerecordRed HatDjango denial-of-service vulnerability in internationalized URLs7.5 Highrubygem-activerecordRed HatUncontrolled Resource Consumption in FasterXML jackson-databind7.5 Highrubygem-activerecordRed HatUncontrolled Resource Consumption in Jackson-databind7.5 Highrubygem-activerecordRed HatDoS in SnakeYAML6.5 Mediumrubygem-activerecordRed HatDoS in SnakeYAML6.5 Mediumrubygem-activerecordRed HatDoS in SnakeYAML6.5 Mediumrubygem-activerecordRed HatDoS in SnakeYAML6.5 Mediumrubygem-activerecordRed HatDenial of Service (DoS)7.5 Highrubygem-activerecordRed HatTZInfo relative path traversal vulnerability allows loading of arbitrary files7.5 Highrubygem-activerecordRed HatActive Record RCE bug with Serialized Columns9.8 Criticalrubygem-activerecordRed HatApache Commons Configuration insecure interpolation defaults9.8 Criticalrubygem-activerecordRed HatThe c_rehash script allows command injection7.3 Highrubygem-activerecordRed HatThe c_rehash script allows command injection7.3 Highrubygem-activerecordRed HatXSS Vulnerability in Action View tag helpers6.1 Mediumrubygem-activerecordRed HatCross-site Scripting Vulnerability in Action Pack6.1 Mediumrubygem-activerecordRed HatImproper Certificate Validation in kubeclient8.1 Highrubygem-activerecordRed HatRuby 1.8.7 before patchlevel 371, 1.9.3 before patchlevel 286, and 2.0 before revision r37068...5.0 Mediumrubygem-activerecordRed HatRuby 1.9.3 before patchlevel 286 and 2.0 before revision r37068 allows context-dependent...5.0 Mediumrubygem-activerecordRed Hatruby_parser allows local users to overwrite arbitrary files via symlink attack on temporary file with predictable name2.1 Lowrubygem-activerecordRed HatThe lockwrap function in port-proxy/bin/openshift-port-proxy-cfg in Red Hat OpenShift Origin...3.6 Lowrubygem-activerecordRed HatJenkins allows attackers to obtain the master cryptographic key2.6 Lowrubygem-activerecordRed HatJenkins allows Cross-Site Scripting (XSS)3.5 Lowrubygem-activerecordRed HatJenkins affected by Open Redirect Vulnerability5.8 Mediumrubygem-activerecordRed HatJenkins allows HTTP Injection and Response Splitting4.3 Mediumrubygem-activerecordRed Hatrhc-chk.rb in Red Hat OpenShift Origin before 1.1, when -d (debug mode) is used, outputs the...2.1 Lowrubygem-activerecordRed HatActiveRecord vulnerable to modification of protected model attributes4.3 Mediumrubygem-activerecordRed HatActive Record allows bypassing of database-query restrictions6.4 Mediumrubygem-activerecordRed HatActive Record contains SQL Injection7.5 Highrubygem-activerecordRed HatRuby (aka CRuby) 1.9 before 1.9.3-p327 and 2.0 before r37575 computes hash values without...5.0 Mediumrubygem-activerecordRed HatThe rb_get_path_check function in file.c in Ruby 1.9.3 before patchlevel 286 and Ruby 2.0.0...5.0 Mediumrubygem-activerecordRed Hatactionpack Cross-site Scripting vulnerability4.3 Mediumrubygem-activerecordRed Hatactivesupport Cross-site Scripting vulnerability4.3 Mediumrubygem-activerecordRed Hatactionpack Cross-site Scripting vulnerability4.3 Mediumrubygem-activerecordRed Hatactionpack Improper Authentication vulnerability5.0 Mediumrubygem-activerecordRed Hatactiverecord vulnerable to SQL Injection7.5 Highrubygem-activerecordRed Hatactionpack allows remote attackers to bypass database-query restrictions, perform NULL checks via crafted request4.3 Mediumrubygem-activerecordRed HatActive Record vulnerable to SQL Injection via nested query parameters5.0 Mediumrubygem-activerecordRed HatAction Pack contains database-query restrictions bypass6.4 Medium