portus vulnerabilities (SUSE)

11 vulnerabilities.

• portus SUSE Portus 2.2.0 has XSS via the Team field, related to typeahead. CVE-2017-14621 Fix available 5.4 MediumSeptember 20, 2017
• portus SUSE actionpack allows remote code execution via application's unrestricted use of render method CVE-2016-2098 Public exploitFix available EPSS 81.4% 7.3 HighMarch 9, 2016
• portus SUSE rails-html-sanitizer Cross-site Scripting vulnerability CVE-2015-7580 Fix available 6.1 MediumFebruary 9, 2016
• portus SUSE rails-html-sanitizer Cross-site Scripting vulnerability CVE-2015-7579 Fix available 6.1 MediumFebruary 9, 2016
• portus SUSE rails-html-sanitizer Cross-site Scripting vulnerability CVE-2015-7578 Fix available 6.1 MediumFebruary 9, 2016
• portus SUSE activemodel contains Improper Input Validation CVE-2016-0753 Fix available 5.3 MediumJanuary 31, 2016
• portus SUSE Directory traversal vulnerability in Action View in Ruby on Rails CVE-2016-0752 In KEVPublic exploitFix available EPSS 95.5% 7.5 HighJanuary 31, 2016
• portus SUSE actionpack is vulnerable to denial of service via a crafted HTTP Accept header CVE-2016-0751 Fix available 7.5 HighJanuary 31, 2016
• portus SUSE actionpack is vulnerable to denial of service because of a wildcard controller route CVE-2015-7581 Fix available 7.5 HighJanuary 31, 2016
• portus SUSE Active Record Improper Access Control CVE-2015-7577 Fix available 5.3 MediumJanuary 31, 2016
• portus SUSE actionpack is vulnerable to remote bypass authentication CVE-2015-7576 Fix available 3.7 LowJanuary 31, 2016