Filter
AND
-Infinity
0
Trending
rubygems/activestoragePossible Sensitive Session Information Leak in Active Storage
5.3
EPSS
0.04%
First published (updated )
Ruby on RailsThe (1) jdom.rb and (2) rexml.rb components in Active Support in Ruby on Rails before 4.1.11 and 4.2…
First published (updated )
Ruby on Rails ActionPackAn open redirect vulnerability is fixed in Rails 7.0.4.1 with the new protection against open redire…
6.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
redhat/rubygem-rails-html-sanitizerrails-html-sanitizer contains an incomplete fix for an XSS vulnerability
6.1
First published (updated )
rubygems/railsRails Possible XSS Vulnerability in Action Controller
6.1
EPSS
0.04%
First published (updated )
Ruby on Railsactionpack/lib/action_dispatch/http/request.rb in Ruby on Rails before 3.0.13, 3.1.x before 3.1.5, a…
6.4
First published (updated )
Ruby on RailsThe decode_credentials method in actionpack/lib/action_controller/metal/http_authentication.rb in Ru…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Ruby on Railsactionpack/lib/action_dispatch/http/request.rb in Ruby on Rails before 3.0.14, 3.1.x before 3.1.6, a…
4.3
First published (updated )
Ruby on RailsA open redirect vulnerability exists in Action Pack >= 6.0.0 that could allow an attacker to craft a…
6.1
First published (updated )
rubygems/activerecord-session_storeThe activerecord-session_store (aka Active Record Session Store) component through 1.1.3 for Ruby on…
5.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
rubygems/actiontextActionText ContentAttachment can Contain Unsanitized HTML
6.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Debian LinuxThe encrypt/decrypt functions in Ruby on Rails 2.3 are vulnerable to padding oracle attacks.
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.