Open Source Vulnerabilities

sqlite3-ruby

sqlite3-ruby uses weak permissions for unspecified files, which allows local users to gain privileges

actionpack, actionpack, actionview, actionview

Rails actionpack gem vulnerable to Cross-site Scripting

activerecord, activerecord, activerecord, activerecord

activerecord vulnerable to SQL Injection

actionpack, actionpack

Improper Input Validation in actionpack

actionpack, actionpack, activesupport, activesupport

Cross site scripting that affects rails

actionpack, actionpack, actionpack, actionpack

actionpack Improper Authentication vulnerability

activesupport, activesupport

activesupport Cross-site Scripting vulnerability

rails, rails

Moderate severity vulnerability that affects rails

rails

Rails Denial of Service vulnerability

puppet

Puppet allows local users to overwrite arbitrary files via a symlink attack

mail

Mail Gem Path Traversal vulnerability

mail

Mail Improper Input Validation vulnerability

actionpack

actionpack CRLF injection vulnerability

actionpack, actionpack, activesupport, activesupport

actionpack and activesupport vulnerable to information leaks

activerecord, activerecord, activerecord

Active Record vulnerable to SQL Injection via nested query parameters

rails

Moderate severity vulnerability that affects rails

activerecord, activerecord

Rails activerecord gem has Improper Input Validation vulnerability

rails

Moderate severity vulnerability that affects rails

activerecord, activerecord, activerecord

activerecord vulnerable to SQL Injection

actionpack, actionpack, actionpack, actionpack

Action Pack contains database-query restrictions bypass

thin

High severity vulnerability that affects thin

actionpack, actionpack, actionpack

actionpack allows remote attackers to bypass database-query restrictions, perform NULL checks via crafted request

rails

rails is vulnerable to CRLF injection

activerecord

activerecord vulnerable to SQL Injection

rails

Session fixation vulnerability in Rails

rails

session fixation protection mechanism in cgi_process.rb in Rails

activesupport, activesupport, activesupport

activesupport Cross-site Scripting vulnerability

actionpack

actionpack Improper Input Validation vulnerability

mail

Mail Gem Improper Input Validation vulnerability

rails

Ruby on Rails vulnerable to code injection

rails

rails vulnerable to improper authentication

actionpack, actionpack

actionpack Cross-site Scripting vulnerability

actionpack, actionpack, activesupport, activesupport

rails Cross-site Scripting vulnerability

puppet

Puppet supports use of IP addresses in certnames without warning of potential risks

jquery-ui, org.webjars.npm:jquery-ui, jQuery.UI.Combined, jquery-ui-rails

Cross-site Scripting in jquery-ui

rwiki

Remote code execution in rwiki

activerecord

Rails ActiveRecord gem vulnerable to SQL injection

gtk2

gtk2 vulnerable to Use of Externally-Controlled Format String

actionpack, actionpack

Cross-site Scripting vulnerability in i18n translations helper method

activerecord, activerecord, activerecord

Active Record Improper Input Validation

rack, rack

Rack rubygems receiving excessively long lines triggers out-of-memory error

nori, nori, nori

nori contains Improper Input Validation

puppet, puppet

Puppet Improper Input Validation vulnerability

actionpack, actionpack

actionpack vulnerable to Cross-site Scripting

ruby-openid

Denial of service in ruby-openid

kelredd-pruview

Shell Metacharacter Injection in kelredd-pruview

thumbshooter

Thumbshooter vulnerable to Code Injection

actionpack, actionpack, actionpack, actionpack

actionpack Cross-site Scripting vulnerability

rack, rack

Rack Vulnerable to Path Traversal

puppet

Puppet allows local users to obtain sensitive configuration information