Latest vulnerabilities for vendor "rubyonrails"

6.1

First published (updated )

CVE-2024-32464

rubygems/actionpackAction Pack is missing security headers on non-HTML responses

9.8

First published (updated )

CVE-2024-28103

Actionpack Project ActionpackAn open redirect vulnerability is fixed in Rails 7.0.4.1 with the new protection against open redire…

6.1

First published (updated )

CVE-2023-22797

Clockwork Web Project Clockwork WebCSRF

6.5

First published (updated )

CVE-2023-25015

Rubyonrails RailsA specially crafted HTTP If-None-Match header can cause the regular expression engine to enter a sta…

7.5

First published (updated )

CVE-2023-22795

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Rubyonrails RailsA regular expression based DoS vulnerability in Action Dispatch <6.0.6.1,< 6.1.7.1, and <7.0.4.1. Sp…

7.5

First published (updated )

CVE-2023-22792

Rubyonrails GlobalidThere is a possible DoS vulnerability in the model name parsing section of the GlobalID gem. Careful…

7.5

First published (updated )

CVE-2023-22799

redhat/rubygem-rails-html-sanitizerPossible XSS vulnerability with certain configurations of rails-html-sanitizer

7.2

First published (updated )

CVE-2022-23519

redhat/rubygem-rails-html-sanitizerImproper neutralization of data URIs allows XSS in rails-html-sanitizer

6.1

First published (updated )

CVE-2022-23518

redhat/rubygem-rails-html-sanitizerInefficient Regular Expression Complexity in rails-html-sanitizer

7.5

First published (updated )

CVE-2022-23517

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

redhat/rubygem-rails-html-sanitizerrails-html-sanitizer contains an incomplete fix for an XSS vulnerability

6.1

First published (updated )

CVE-2022-23520

Rubyonrails RailsRuby on Rails _table.html.erb cross site scripting

5.4

First published (updated )

CVE-2022-3704

Fedoraproject FedoraXSS

6.1

First published (updated )

CVE-2022-32209

Rubyonrails ActionpackXSS

7.5

First published (updated )

CVE-2022-27777

Rubyonrails ActionpackXSS

7.5

First published (updated )

CVE-2022-22577

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

rubygems/activestorageCode Injection

9.8

First published (updated )

CVE-2022-21831

rubygems/actionpackExposure of sensitive information in Action Pack

7.4

First published (updated )

CVE-2022-23633

Rubyonrails RailsInformation Exposure when using Puma with Rails

8

First published (updated )

CVE-2022-23634

Rubyonrails RailsA open redirect vulnerability exists in Action Pack >= 6.0.0 that could allow an attacker to craft a…

6.1

First published (updated )

CVE-2021-44528

Rubyonrails RailsXSS

6.1

First published (updated )

CVE-2011-1497

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

debian/railsA possible open redirect vulnerability in the Host Authorization middleware in Action Pack >= 6.0.0 …

6.1

First published (updated )

CVE-2021-22942

Rubyonrails RailsThe actionpack ruby gem before 6.1.3.2 suffers from a possible open redirect vulnerability. Speciall…

6.1

First published (updated )

CVE-2021-22903

rubygems/actionpackA flaw was found in RubyGem Actionpack which is framework for handling and responding to web request…

7.5

First published (updated )

CVE-2021-22902

rubygems/actionpackA flaw was found in RubyGem Actionpack which is framework for handling and responding to web request…

7.5

First published (updated )

CVE-2021-22904

Rubyonrails RailsInfoleak

7.5

First published (updated )

CVE-2021-22885

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

rubygems/activerecord-session_storeThe activerecord-session_store (aka Active Record Session Store) component through 1.1.3 for Ruby on…

5.3

First published (updated )

CVE-2019-25025

Rubyonrails RailsInput Validation

7.5

First published (updated )

CVE-2021-22880

Rubyonrails RailsCVE-2021-22881

First published (updated )

CVE-2021-22881

rubygems/actionpackXSS

6.1

First published (updated )

CVE-2020-8264

Rubyonrails RailsCSRF

4.3

First published (updated )

CVE-2020-8166

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Rubyonrails RailsCode Injection

8.8

First published (updated )

CVE-2020-8163

Rubyonrails RailsA denial of service vulnerability exists in Rails <6.0.3.2 that allowed an untrusted user to run any…

6.5

First published (updated )

CVE-2020-8185

Rubyonrails RailsCSRF

6.5

First published (updated )

CVE-2020-8167

Rubyonrails RailsMalicious File Upload

7.5

First published (updated )

CVE-2020-8162

Debian Debian LinuxA deserialization of untrusted data vulnerability exists in rails < 5.2.4.3, rails < 6.0.3.1 which c…

7.5

First published (updated )

CVE-2020-8164

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Debian Debian LinuxA deserialization of untrusted data vulnernerability exists in rails < 5.2.4.3, rails < 6.0.3.1 that…

9.8

First published (updated )

CVE-2020-8165

Rubyonrails Actionpack Page-cachingPath Traversal

9.8

First published (updated )

CVE-2020-8159

Rubyonrails Active ResourceInfoleak

7.5

First published (updated )

CVE-2020-8151

redhat/rubygem-actionviewPossible XSS vulnerability in ActionView

4.8

First published (updated )

CVE-2020-5267

Debian Debian LinuxThe encrypt/decrypt functions in Ruby on Rails 2.3 are vulnerable to padding oracle attacks.

6.5

First published (updated )

CVE-2010-3299

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Rubyonrails RailsCommand Injection

9.8

First published (updated )

CVE-2019-5420

rubygems/actionviewPath Traversal

7.5

First published (updated )

CVE-2019-5418

rubygems/actionviewInput Validation

7.8

First published (updated )

CVE-2019-5419

Rubyonrails RailsInfoleak

6.5

First published (updated )

CVE-2018-16477

Rubyonrails RailsA Broken Access Control vulnerability in Active Job versions >= 4.2.0 allows an attacker to craft us…

7.5

First published (updated )

CVE-2018-16476

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Rubyonrails Html SanitizerXSS

6.1

First published (updated )

CVE-2018-3741

Rubyonrails Ruby On RailsSQL Injection

8.1

First published (updated )

CVE-2017-17919

Rubyonrails RailsSQL Injection

8.1

First published (updated )

CVE-2017-17917

Rubyonrails Ruby On RailsSQL Injection

8.1

First published (updated )

CVE-2017-17920

Rubyonrails RailsSQL Injection

8.1

First published (updated )

CVE-2017-17916

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.