Skip to content

Rubyonrails vulnerabilities

Products

Newest

rubyonrails rails, ruby on rails +1 moreactionpack Improper Input Validation vulnerabilityCVE-2013-6414Fix availableEPSS 20.7%5.0 MediumDecember 7, 2013
rubyonrails rails, ruby on rails +1 moreactionpack vulnerable to Cross-site ScriptingCVE-2013-4491Fix available4.3 MediumDecember 7, 2013
rubyonrails rails, debian linux, opensuse +2 moreactionmailer email address processing causes Denial of serviceCVE-2013-4389Fix available4.3 MediumOctober 17, 2013
rubyonrails rails, ruby on rails +1 moreActive Record component in Ruby on Rails has a data-type injection vulnerabilityCVE-2013-3221Fix available6.4 MediumApril 22, 2013
rubyonrails rails, ruby on rails, redhat enterprise linux +2 moreactionpack Cross-site Scripting vulnerabilityCVE-2013-1857Fix available4.3 MediumMarch 19, 2013
rubyonrails rails, ruby on rails +1 moreactivesupport Improper Input Validation vulnerabilityCVE-2013-1856Fix available5.8 MediumMarch 19, 2013
rubyonrails rails, ruby on rails, redhat enterprise linux +2 moreactionpack Cross-site Scripting vulnerabilityCVE-2013-1855Fix available4.3 MediumMarch 19, 2013
rubyonrails rails, ruby on rails, redhat enterprise linux +2 moreActive Record Improper Input ValidationCVE-2013-1854Fix available5.0 MediumMarch 19, 2013
rubyonrails rails, ruby on rails +1 moreActive Record contains deserialization of arbitrary YAMLCVE-2013-0277Fix available10.0 HighFebruary 12, 2013
rubyonrails railsActiveRecord vulnerable to modification of protected model attributesCVE-2013-0276Fix available4.3 MediumFebruary 12, 2013
rubyonrails rails, ruby on rails +1 moreactivesupport in Rails vulnerable to incorrect data conversionCVE-2013-0333Public exploitFix availableEPSS 95.6%7.5 HighJanuary 29, 2013
rubyonrails rails, ruby on rails, debian linux +2 moreActive Record allows bypassing of database-query restrictionsCVE-2013-0155Fix available6.4 MediumJanuary 13, 2013
rubyonrails rails, ruby on rails, debian linux +2 moreactionpack Improper Input Validation vulnerabilityCVE-2013-0156Public exploitFix availableEPSS 99.0%7.5 HighJanuary 9, 2013
rubyonrails railsAuthlogic Information Exposure vulnerabilityCVE-2012-6497Fix available5.0 MediumJanuary 4, 2013
rubyonrails rails, ruby on rails +1 moreActive Record contains SQL InjectionCVE-2012-6496Fix available7.5 HighJanuary 4, 2013
rubyonrails rails, ruby on rails +1 moreactionpack Cross-site Scripting vulnerabilityCVE-2012-3465Fix available4.3 MediumAugust 10, 2012
rubyonrails rails, ruby on rails +1 moreactivesupport Cross-site Scripting vulnerabilityCVE-2012-3464Fix available4.3 MediumAugust 10, 2012
rubyonrails rails, ruby on rails +1 moreactionpack Cross-site Scripting vulnerabilityCVE-2012-3463Fix available4.3 MediumAugust 10, 2012
rubyonrails rails, ruby on rails +1 moreactionpack Improper Authentication vulnerabilityCVE-2012-3424Fix available5.0 MediumAugust 8, 2012
rubyonrails rails, ruby on rails +1 moreactiverecord vulnerable to SQL InjectionCVE-2012-2695Fix available7.5 HighJune 22, 2012
rubyonrails rails, ruby on rails +1 moreactionpack allows remote attackers to bypass database-query restrictions, perform NULL checks via crafted requestCVE-2012-2694Fix available4.3 MediumJune 22, 2012
rubyonrails rails, ruby on rails +1 moreActive Record vulnerable to SQL Injection via nested query parametersCVE-2012-2661Public exploitFix available5.0 MediumJune 22, 2012
rubyonrails rails, ruby on rails +1 moreAction Pack contains database-query restrictions bypassCVE-2012-2660Fix available6.4 MediumJune 22, 2012
rubyonrails rails, ruby on rails +1 moreCross-site Scripting in actionpackCVE-2012-1099Fix available4.3 MediumMarch 13, 2012
rubyonrails rails, ruby on rails +1 moreactivesupport Cross-site Scripting vulnerabilityCVE-2012-1098Fix available4.3 MediumMarch 13, 2012
rubyonrails rails, ruby on rails +1 moreCross-site Scripting vulnerability in i18n translations helper methodCVE-2011-4319Fix available4.3 MediumNovember 28, 2011
rubyonrails railsactionpack Improper Input Validation vulnerabilityCVE-2011-3187Public exploitFix available4.3 MediumAugust 29, 2011
rubyonrails railsactionpack CRLF injection vulnerabilityCVE-2011-3186Fix available4.3 MediumAugust 29, 2011
rubyonrails rails, ruby on rails +1 moreactivesupport Cross-site Scripting vulnerabilityCVE-2011-2932Fix available4.3 MediumAugust 29, 2011
rubyonrails rails, ruby on rails +1 moreactionpack Cross-site Scripting vulnerabilityCVE-2011-2931Fix available4.3 MediumAugust 29, 2011
rubyonrails rails, ruby on rails +1 moreactiverecord vulnerable to SQL InjectionCVE-2011-2930Fix available7.5 HighAugust 29, 2011
rubyonrails rails, ruby on rails +1 moreactionpack Improper Input Validation vulnerabilityCVE-2011-2929Fix available5.0 MediumAugust 29, 2011
rubyonrails rails, ruby on rails +1 morerails Cross-site Scripting vulnerabilityCVE-2011-2197Fix available4.3 MediumJune 30, 2011
rubyonrails railsactionpack allows remote attackers to bypass intended access restrictionsCVE-2011-0449Fix available7.5 HighFebruary 21, 2011
rubyonrails railsactiverecord vulnerable to SQL InjectionCVE-2011-0448Fix available7.5 HighFebruary 21, 2011
rubyonrails railsactionpack Cross-Site Request Forgery vulnerabilityCVE-2011-0447Fix available6.8 MediumFebruary 14, 2011
rubyonrails railsRails actionpack gem vulnerable to Cross-site ScriptingCVE-2011-0446Fix available4.3 MediumFebruary 14, 2011
rubyonrails railsRails activerecord gem has Improper Input Validation vulnerabilityCVE-2010-3933Fix available6.4 MediumOctober 27, 2010
rubyonrails railsImproper Input Validation in actionpackCVE-2008-7248Public exploitFix available6.8 MediumDecember 16, 2009
rubyonrails rails, ruby on rails +1 moreModerate severity vulnerability that affects railsCVE-2009-4214Fix available4.3 MediumDecember 7, 2009
rubyonrails railsactionpack and activesupport vulnerable to information leaksCVE-2009-3086Fix available5.0 MediumSeptember 8, 2009
rubyonrails railsCross site scripting that affects railsCVE-2009-3009Fix available4.3 MediumSeptember 8, 2009
rubyonrails ruby on rails, apple mac os x, mac os x server +2 morerails vulnerable to improper authenticationCVE-2009-2422Fix available9.8 CriticalJuly 10, 2009
rubyonrails rails, ruby on rails +1 morerails is vulnerable to CRLF injectionCVE-2008-5189Fix available5.0 MediumNovember 21, 2008
rubyonrails rails, ruby on rails +1 moreRails ActiveRecord gem vulnerable to SQL injectionCVE-2008-4094Fix available7.5 HighSeptember 30, 2008
rubyonrails railssession fixation protection mechanism in cgi_process.rb in RailsCVE-2007-6077Fix available6.8 MediumNovember 21, 2007
rubyonrails railsModerate severity vulnerability that affects railsCVE-2007-3227Public exploitFix available4.3 MediumJune 14, 2007
rubyonrails railsRails Denial of Service vulnerabilityCVE-2006-4112Fix available7.5 HighAugust 14, 2006
rubyonrails rails, ruby on rails +1 moreRuby on Rails vulnerable to code injectionCVE-2006-4111Fix available7.5 HighAugust 14, 2006