Lucene search
+L

33 matches found

Fedora
Fedora
•added 2023/04/01 12:17 a.m.•23 views

[SECURITY] Fedora 38 Update: rubygem-railties-7.0.4.3-1.fc38

Rails internals: application bootup, plugins, generators, and rake tasks. Railties is responsible to glue all frameworks together. Overall, it: handles all the bootstrapping process for a Rails application; manages rails command line interface; provides Rails generators core;...

5.3CVSS7.6AI score0.00923EPSS
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/01/30 11:51 p.m.•10 views

Malicious code in railties (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca2a029e076b6bf6c3c47bbc29d4df637c7e966d91a4e95f196e4178397daf1a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
•added 2023/01/30 11:51 p.m.•14 views

MAL-2023-718 Malicious code in railties (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca2a029e076b6bf6c3c47bbc29d4df637c7e966d91a4e95f196e4178397daf1a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OpenVAS
OpenVAS
•added 2021/04/25 12:00 a.m.•66 views

Fedora: Security Advisory for rubygem-railties (FEDORA-2021-7b8b65bc7a)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.7AI score0.05061EPSS
SaveExploits0References2
Fedora
Fedora
•added 2021/04/24 8:20 p.m.•122 views

[SECURITY] Fedora 34 Update: rubygem-railties-6.1.2.1-2.fc34

Rails internals: application bootup, plugins, generators, and rake tasks. Railties is responsible to glue all frameworks together. Overall, it: handles all the bootstrapping process for a Rails application; manages rails command line interface; provides Rails generators core;...

7.5CVSS2.6AI score0.05061EPSS
SaveExploits0
Fedora
Fedora
•added 2020/10/05 12:18 a.m.•65 views

[SECURITY] Fedora 33 Update: rubygem-railties-6.0.3.3-1.fc33

Rails internals: application bootup, plugins, generators, and rake tasks. Railties is responsible to glue all frameworks together. Overall, it: handles all the bootstrapping process for a Rails application; manages rails command line interface; provides Rails generators core;...

6.5CVSS6.7AI score0.02372EPSS
SaveExploits1
OpenVAS
OpenVAS
•added 2019/05/10 12:00 a.m.•103 views

Fedora Update for rubygem-railties FEDORA-2019-1cfe24db5c

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7AI score0.98507EPSS
SaveExploits30References4
Veracode
Veracode
•added 2019/03/14 2:16 a.m.•43 views

Remote Code Execution (RCE)

railties is vulnerable to remote code execution. A remote attacker is able to guess the automatically generated secret token when Rails is in development mode. This token can subsequently be used in combination with other Rails internals to execute arbitrary code...

9.8CVSS8.1AI score0.8933EPSS
SaveExploits13References8Affected Software2
Github Security Blog
Github Security Blog
•added 2019/03/13 5:28 p.m.•56 views

Use of Insufficiently Random Values in Railties Allows Remote Code Execution

Possible Remote Code Execution Exploit in Rails Development Mode Impact ------ With some knowledge of a target application it is possible for an attacker to guess the automatically generated development mode secret token. This secret token can be used in combination with other Rails internals to...

9.8CVSS8AI score0.8933EPSS
SaveExploits13References8Affected Software1
Veracode
Veracode
•added 2017/02/27 10:04 a.m.•11 views

Weak Cryptography

railties has a weak cryptography scheme for secrets. It uses an unauthenticated CBC mode with a constant IV...

6.9AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2016/12/07 12:00 a.m.•39 views

Fedora Update for rubygem-railties FEDORA-2016-5760339e76

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.5AI score0.03903EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2012/03/19 12:00 a.m.•36 views

Fedora Update for rubygem-railties FEDORA-2011-11386

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

7.5CVSS6.5AI score0.02492EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2012/03/19 12:00 a.m.•35 views

Fedora Update for rubygem-railties FEDORA-2011-11386

Check for the Version of rubygem-railties OpenVAS Vulnerability Test Fedora Update for rubygem-railties FEDORA-2011-11386 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

7.5CVSS0.02492EPSS
SaveExploits0References2
Rows per page
Query Builder