Cross site scripting

The sanitize helper in lib/actioncontroller/vendor/html-scanner/html/sanitizer.rb in the Action Pack component in Ruby on Rails before 2.3.18, 3.0.x and 3.1.x before 3.1.12, and 3.2.x before 3.2.13 does not properly handle encoded : colon characters in URLs, which makes it easier for remote...

CVE-2013-1857

The sanitize helper in lib/actioncontroller/vendor/html-scanner/html/sanitizer.rb in the Action Pack component in Ruby on Rails before 2.3.18, 3.0.x and 3.1.x before 3.1.12, and 3.2.x before 3.2.13 does not properly handle encoded : colon characters in URLs, which makes it easier for remote...

PT-2013-3435

Name of the Vulnerable Software and Affected Versions Ruby on Rails versions prior to 2.3.18 Ruby on Rails versions 3.0.x through 3.1.11 Ruby on Rails versions 3.2.x through 3.2.12 Description The sanitize helper in the Action Pack component does not properly handle encoded : colon characters in...

XSS Vulnerability in the `sanitize` helper

The sanitize helper in Ruby on Rails is designed to filter HTML and remove all tags and attributes which could be malicious...

CVE-2013-1857 rubygem-actionpack: sanitize_protocol: XSS Vulnerability in the helper of Ruby on Rails

'The sanitize helper in lib/actioncontroller/vendor/html-scanner/html/sanitizer.rb in the Action Pack component in Ruby on Rails before 2.3.18, 3.0.x and 3.1.x before 3.1.12, and 3.2.x before 3.2.13 does not properly handle encoded : colon characters in URLs, which makes it easier for remote...

rubygem-rails -- multiple vulnerabilities

Ruby on Rails team reports: Rails versions 3.2.13 has been released. This release contains important security fixes. It is recommended users upgrade as soon as possible. Four vulnerabilities have been discovered and fixed: CVE-2013-1854 Symbol DoS vulnerability in Active Record CVE-2013-1855 XSS...

Security fix for the ALT Linux 10 package dnsmasq version 2.65-alt1

March 6, 2013 Mikhail Efremov 2.65-alt1 - Patch from Fedora: + Fix for CVE-2013-0198 checking of TCP connection interfaces - Improved resolvconf support. - Added dnsmasq.service. - Added dnsmasq-helper script. - Drop 'build without resolvconf' support. - Updated to 2.65...

CVE-2013-0277

ActiveRecord in Ruby on Rails before 2.3.17 and 3.x before 3.1.0 allows remote attackers to cause a denial of service or execute arbitrary code via crafted serialized attributes that cause the +serialize+ helper to deserialize arbitrary YAML...

PT-2013-2210

Name of the Vulnerable Software and Affected Versions Ruby on Rails versions prior to 2.3.17 Ruby on Rails versions 3.x prior to 3.1.0 Description The issue allows remote attackers to cause a denial of service or execute arbitrary code via crafted serialized attributes that cause the serialize...

CVE-2013-0277 rubygem-activerecord: Serialized Attributes YAML Vulnerability with Rails 2.3 and 3.0

ActiveRecord in Ruby on Rails before 2.3.17 and 3.x before 3.1.0 allows remote attackers to cause a denial of service or execute arbitrary code via crafted serialized attributes that cause the +serialize+ helper to deserialize arbitrary YAML...

Fedora Update for cups-pk-helper FEDORA-2012-18927

Check for the Version of cups-pk-helper OpenVAS Vulnerability Test Fedora Update for cups-pk-helper FEDORA-2012-18927 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...

Fedora Update for cups-pk-helper FEDORA-2012-18927

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 16 : cups-pk-helper-0.1.3-4.fc16 (2012-18927)

This update fixes CVE-2012-4510. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

[SECURITY] Fedora 16 Update: cups-pk-helper-0.1.3-4.fc16

cups-pk-helper is an application which makes cups configuration interfaces available under control of PolicyKit...

[SECURITY] Fedora 18 Update: cups-pk-helper-0.2.4-1.fc18

cups-pk-helper is an application which makes cups configuration interfaces available under control of PolicyKit...

[SECURITY] Fedora 17 Update: cups-pk-helper-0.2.2-2.fc17

cups-pk-helper is an application which makes cups configuration interfaces available under control of PolicyKit...

Fedora Update for cups-pk-helper FEDORA-2012-18950

Check for the Version of cups-pk-helper OpenVAS Vulnerability Test Fedora Update for cups-pk-helper FEDORA-2012-18950 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...

Fedora Update for cups-pk-helper FEDORA-2012-18950

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 18 : cups-pk-helper-0.2.4-1.fc18 (2012-17907)

Update to cups-pk-helper-0.2.4. Fixes CVE-2012-4510. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 17 : cups-pk-helper-0.2.2-2.fc17 (2012-18950)

This update fixes CVE-2012-4510. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...