Skip to contentRails vulnerabilities
Newest
- rails https://github.com/rails/rails, rubyonrails rails +1 moreactionpack Open Redirect in Host Authorization MiddlewareCVE-2021-44528Fix available6.1 Medium
- railsCross site scripting in actionpack RubygemCVE-2011-1497Fix available6.1 Medium
- rails https://github.com/rails/rails, rubyonrails rails +1 moreOpen Redirect in ActionPackCVE-2021-22942Fix available6.1 Medium
- rails https://github.com/rails/rails, rubyonrails rails +1 morePossible DoS Vulnerability in Action Controller Token AuthenticationCVE-2021-22904Fix available7.5 High
- debian linux, rails https://github.com/rails/rails, rubyonrails actionpack page-caching +1 more +3 moreAction Pack contains Information Disclosure / Unintended Method Execution vulnerabilityCVE-2021-22885Fix available7.5 High
- rails https://github.com/rails/rails, rubyonrails rails +1 morePossible Open Redirect Vulnerability in Action PackCVE-2021-22903Fix available6.1 Medium
- rubyonrails rails, rails https://github.com/rails/rails +1 moreDenial of Service in Action DispatchCVE-2021-22902Fix available7.5 High
- fedoraproject fedora, rails https://github.com/rails/rails, rubyonrails rails +2 moreActionpack Open Redirect VulnerabilityCVE-2021-22881Fix availableEPSS 87.3%6.1 Medium
- rubyonrails rails, fedoraproject fedora, rails https://github.com/rails/rails +2 moreActive Record subject to Regular Expression Denial-of-Service (ReDoS)CVE-2021-22880Public exploitFix available7.5 High
- rails https://github.com/rails/rails, rubyonrails rails +1 moreCross-site scripting in actionpackCVE-2020-8264Fix availableEPSS 67.0%6.1 Medium
- action view project view, debian linux, fedoraproject fedora +1 more +3 moreXSS in Action ViewCVE-2020-15169Public exploitFix available5.4 Medium
- rubyonrails rails, debian linux, rails https://github.com/rails/rails +2 moreRemote code execution via user-provided local names in ActionViewCVE-2020-8163Public exploitFix availableEPSS 82.5%8.8 High
- rubyonrails rails, fedoraproject fedora, rails https://github.com/rails/rails +2 moreUntrusted users can run pending migrations in production in RailsCVE-2020-8185Fix available6.5 Medium
- rubyonrails rails, debian linux, rails https://github.com/rails/rails +2 moreAbility to forge per-form CSRF tokens in RailsCVE-2020-8166Fix available4.3 Medium
- rubyonrails rails, debian linux, rails https://github.com/rails/rails +2 moreCircumvention of file size limits in ActiveStorageCVE-2020-8162Public exploitFix available7.5 High
- rubyonrails rails, debian linux, opensuse backports sle +2 more +4 morePossible Strong Parameters Bypass in ActionPackCVE-2020-8164Fix available7.5 High
- rubyonrails rails, debian linux, opensuse leap +1 more +3 moreActiveSupport potentially unintended unmarshalling of user-provided objects in MemCacheStore and RedisCacheStoreCVE-2020-8165Public exploitFix availableEPSS 45.7%9.8 Critical
- rails actionview, debian linux, fedoraproject fedora +1 more +3 morePossible XSS vulnerability in ActionViewCVE-2020-5267Public exploitFix available4.0 Medium
- rails, debian linux +1 moreThe encrypt/decrypt functions in Ruby on Rails 2.3 are vulnerable to padding oracle attacks.CVE-2010-32996.5 Medium
- rubyonrails rails, debian linux, fedoraproject fedora +1 more +3 moreUse of Insufficiently Random Values in Railties Allows Remote Code ExecutionCVE-2019-5420Public exploitFix availableEPSS 89.3%9.8 Critical
- debian linux, fedoraproject fedora, opensuse leap +5 more +7 morePath Traversal in Action ViewCVE-2019-5418In KEVPublic exploitFix availableEPSS 98.5%7.5 High
- rubyonrails rails, debian linux, fedoraproject fedora +4 more +6 moreDenial of Service Vulnerability in Action ViewCVE-2019-5419Fix available7.5 High
- rails https://github.com/rails/rails, rubyonrails rails +1 moreExposure of Sensitive Information to an Unauthorized Actor in activestorageCVE-2018-16477Fix available6.5 Medium
- rails https://github.com/rails/rails, redhat cloudforms, rubyonrails rails +2 moreImproper Access Control in activejobCVE-2018-16476Fix available7.5 High
- rails rails-html-sanitizer, rubyonrails html sanitizer +1 morerails-html-sanitizer Cross-site Scripting vulnerabilityCVE-2018-3741Fix available6.1 Medium
- rails ruby on rails, rubyonrails rails, debian linux +4 more +6 moreDirectory traversal vulnerability in Action View in Ruby on RailsCVE-2016-0752In KEVPublic exploitFix availableEPSS 95.5%7.5 High
- rails ruby on rails, rubyonrails rails, redhat enterprise linux server +1 more +3 moreactionpack Path Traversal vulnerabilityCVE-2014-0130In KEVPublic exploitFix availableEPSS 53.7%7.5 High