Filter

rubyonrails RailsActiveRecord in Ruby on Rails before 2.3.17 and 3.x before 3.1.0 allows remote attackers to cause a …

First published (updated )

Ruby on RailsThe example code for the digest authentication functionality (http_authentication.rb) in Ruby on Rai…

First published (updated )

Ruby on RailsSQL Injection

8.1
First published (updated )

Ruby on RailsSQL Injection

8.1
First published (updated )

rubyonrails RailsSQL Injection

7.5
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

rubyonrails RailsRuby on Rails Directory Traversal Vulnerability

First published (updated )

rubyonrails RailsCode Injection

7.5
First published (updated )

rubyonrails RailsSQL Injection

7.5
First published (updated )

rubyonrails RailsSQL Injection

7.5
First published (updated )

Mark Evans Dragonfly gemCode Injection

7.5
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

rubyonrails RailsSQL Injection

7.5
First published (updated )

rubyonrails RailsInput Validation

7.5
First published (updated )

rubyonrails RailsRuby on Rails Directory Traversal Vulnerability

First published (updated )

rubyonrails Railsactionpack/lib/action_dispatch/http/mime_type.rb in Action Pack in Ruby on Rails before 3.2.22.1, 4.…

7.5
First published (updated )

rubyonrails RailsSQL Injection

7.5
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Ruby on RailsInput Validation

7.5
First published (updated )

rubyonrails RailsSQL Injection

7.5
First published (updated )

Ruby on RailsSession fixation vulnerability in Rails before 1.2.4, as used for Ruby on Rails, allows remote attac…

First published (updated )

rubyonrails RailsRace Condition

First published (updated )

rubyonrails RailsInput Validation

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

rubyonrails Railsactionpack/lib/action_dispatch/http/request.rb in Ruby on Rails before 3.2.16 and 4.x before 4.0.2 d…

First published (updated )

redhat/rubygem-actionpackSQL Injection

First published (updated )

rubyonrails Railsactionpack/lib/action_dispatch/http/request.rb in Ruby on Rails before 3.0.13, 3.1.x before 3.1.5, a…

First published (updated )

rubyonrails RailsXSS

First published (updated )

rubyonrails RailsInput Validation

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

rubygems/activerecord-session_storeThe activerecord-session_store (aka Active Record Session Store) component through 1.1.3 for Ruby on…

First published (updated )

rubyonrails RailsPath Traversal

First published (updated )

rubyonrails Railsactiverecord/lib/active_record/nested_attributes.rb in Active Record in Ruby on Rails 3.1.x and 3.2.…

First published (updated )

rubyonrails RailsInput Validation

First published (updated )

rubyonrails RailsInput Validation

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203