Lucene search
+L

4857 matches found

OpenVAS
OpenVAS
•added 2009/02/17 12:00 a.m.•22 views

Fedora Update for rubygem-rails FEDORA-2008-8322

Check for the Version of rubygem-rails OpenVAS Vulnerability Test Fedora Update for rubygem-rails FEDORA-2008-8322 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

7.5CVSS0.0303EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2009/02/17 12:00 a.m.•19 views

Fedora Update for rubygem-rails FEDORA-2008-8322

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

7.5CVSS9.5AI score0.0303EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2008/11/27 12:00 a.m.•32 views

Ruby on Rails redirect_to() HTTP Header Injection Vulnerability (Oct 2008) - Linux

Ruby on Rails is prone to a HTTP Header injection vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

5CVSS7.6AI score0.01533EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2008/11/27 12:00 a.m.•41 views

Ruby on Rails redirect_to() HTTP Header Injection Vulnerability - Linux

The host is running Ruby on Rails, which is prone to HTTP Header Injection Vulnerability. OpenVAS Vulnerability Test $Id: gbrubyrailshttpheaderinjvulnlin.nasl 4227 2016-10-07 05:45:35Z teissa $ Ruby on Rails redirectto HTTP Header Injection Vulnerability - Linux Authors: Veerendra GG Copyright:...

5CVSS0.01533EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2008/11/21 12:00 p.m.•37 views

CVE-2008-5189

CRLF injection vulnerability in Ruby on Rails before 2.0.5 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL to the redirectto function...

5CVSS7.2AI score0.01533EPSS
SaveExploits0References1
Prion
Prion
•added 2008/11/21 12:00 p.m.•35 views

Crlf injection

CRLF injection vulnerability in Ruby on Rails before 2.0.5 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL to the redirectto function...

5CVSS6.8AI score0.01533EPSS
SaveExploits0References5Affected Software2
NVD
NVD
•added 2008/11/21 12:00 p.m.•27 views

CVE-2008-5189

CRLF injection vulnerability in Ruby on Rails before 2.0.5 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL to the redirectto function...

5CVSS6.6AI score0.01533EPSS
SaveExploits0References5
OSV
OSV
•added 2008/11/21 12:00 p.m.•8 views

DEBIAN-CVE-2008-5189

CRLF injection vulnerability in Ruby on Rails before 2.0.5 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL to the redirectto function...

5CVSS7.4AI score0.01533EPSS
SaveExploits0References1
OSV
OSV
•added 2008/11/21 12:00 p.m.•22 views

CVE-2008-5189

CRLF injection vulnerability in Ruby on Rails before 2.0.5 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL to the redirectto function...

6.6AI score
SaveExploits0References5
Debian CVE
Debian CVE
•added 2008/11/21 11:00 a.m.•59 views

CVE-2008-5189

CRLF injection vulnerability in Ruby on Rails before 2.0.5 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL to the redirectto function...

5CVSS6.8AI score0.01533EPSS
SaveExploits0
Cvelist
Cvelist
•added 2008/11/21 11:00 a.m.•47 views

CVE-2008-5189

CRLF injection vulnerability in Ruby on Rails before 2.0.5 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL to the redirectto function...

6.5AI score0.01533EPSS
SaveExploits0References5
CVE
CVE
•added 2008/11/21 11:00 a.m.•114 views

CVE-2008-5189

CVE-2008-5189 is a CRLF header injection in Ruby on Rails prior to 2.0.5 that enables remote attackers to inject arbitrary HTTP headers and perform HTTP response splitting via a crafted URL to redirect_to. Affected: Rails 2.0.x up to 2.0.4. Remediation: upgrade Rails to 2.0.5 or newer where the r...

5CVSS6.5AI score0.01533EPSS
SaveExploits0References5Affected Software2
Tenable Nessus
Tenable Nessus
•added 2008/11/21 12:00 a.m.•23 views

Ruby on Rails < 2.0.5 Multiple Vulnerabilities

Binary data 4764.prm...

5CVSS7.3AI score0.01533EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/11/21 12:00 a.m.•4 views

CVE-2008-5189: Cross-Site Request Forgery (CSRF)

CRLF injection vulnerability in Ruby on Rails before 2.0.5 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL to the redirectto function...

5CVSS6.1AI score0.01533EPSS
SaveExploits0References2
securityvulns
securityvulns
•added 2008/11/01 12:00 a.m.•49 views

Typo &lt;= 5.1.3 Multiple Vulnerabilities

====================================================================== Typo = 5.1.3 Multiple Vulnerabilities ====================================================================== Author: L4teral l4teral at gmail com Impact: Cross Site Scripting SQL Injection Insecure password hash salt Status:...

7.9AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2008/10/31 12:00 a.m.•32 views

typo-sqlxss.txt

====================================================================== Typo Impact: Cross Site Scripting SQL Injection Insecure password hash salt Status: patch not available ------------------------------ Affected software description: ------------------------------ Application: Typo Version: =...

7.4AI score
SaveExploits0
Fedora
Fedora
•added 2008/10/16 2:02 a.m.•42 views

[SECURITY] Fedora 8 Update: rubygem-rails-2.1.1-2.fc8

Rails is a framework for building web-application using CGI, FCGI, modruby, or WEBrick on top of either MySQL, PostgreSQL, SQLite, DB2, SQL Server, or Oracle with eRuby- or Builder-based templates...

7.5CVSS1.3AI score0.0303EPSS
SaveExploits1
Fedora
Fedora
•added 2008/10/16 2:02 a.m.•41 views

[SECURITY] Fedora 8 Update: rubygem-activesupport-2.1.1-1.fc8

Utility library which carries commonly used classes and goodies from the Rails framework...

7.5CVSS2.3AI score0.0303EPSS
SaveExploits1
OSV
OSV
•added 2008/09/30 5:22 p.m.•14 views

DEBIAN-CVE-2008-4094

Multiple SQL injection vulnerabilities in Ruby on Rails before 2.1.1 allow remote attackers to execute arbitrary SQL commands via the 1 :limit and 2 :offset parameters, related to ActiveRecord, ActiveSupport, ActiveResource, ActionPack, and ActionMailer...

7.5CVSS8.8AI score0.0303EPSS
SaveExploits1References1
OSV
OSV
•added 2008/09/30 5:22 p.m.•9 views

CVE-2008-4094

Multiple SQL injection vulnerabilities in Ruby on Rails before 2.1.1 allow remote attackers to execute arbitrary SQL commands via the 1 :limit and 2 :offset parameters, related to ActiveRecord, ActiveSupport, ActiveResource, ActionPack, and ActionMailer...

8.3AI score
SaveExploits0References18
Rows per page
Query Builder