Lucene search
+L

207 matches found

OSV
OSV
•added 2015/07/31 12:00 a.m.•28 views

DSA-3322-1 ruby-rack - security update

Bulletin has no description...

5CVSS6.3AI score0.07991EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2015/07/30 12:00 a.m.•32 views

Debian: Security Advisory (DSA-3322-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5CVSS6.5AI score0.07991EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2014/06/13 12:00 a.m.•46 views

openSUSE Security Update : RubyOnRails (openSUSE-SU-2013:0338-1)

The Ruby on Rails 2.3 stack was updated to 2.3.17. The Ruby on Rails 3.2 stack was updated to 3.2.12. The Ruby Rack was updated to 1.1.6. The Ruby Rack was updated to 1.2.8. The Ruby Rack was updated to 1.3.10. The Ruby Rack was updated to 1.4.5. The updates fix various security issues and bugs. ...

10CVSS6.4AI score0.07497EPSS
SaveExploits2References13
Tenable Nessus
Tenable Nessus
•added 2014/05/19 12:00 a.m.•35 views

GLSA-201405-10 : Rack: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201405-10 Rack: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Rack. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly execute arbitrary code with...

5.1CVSS7.2AI score0.05383EPSS
SaveExploits0References6
OSV
OSV
•added 2014/04/03 1:23 p.m.•9 views

MGASA-2014-0156 Updated ruby-rack-ssl packages fix CVE-2014-2538

Updated ruby-rack-ssl packages fix security vulnerabilities: Cross-site scripting XSS vulnerability in lib/rack/ssl.rb in the rack-ssl gem before 1.4.0 for Ruby allows remote attackers to inject arbitrary web script or HTML via a URI, which might not be properly handled by third-party adapters su...

4.3CVSS5.6AI score0.0219EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2013/02/18 12:00 a.m.•41 views

FreeBSD : Ruby Rack Gem -- Multiple Issues (fcfdabb7-f14d-4e61-a7d5-cfefb4b99b15)

Rack developers report : Today we are proud to announce the release of Rack 1.4.5. Fix CVE-2013-0263, timing attack against Rack::Session::Cookie Fix CVE-2013-0262, symlink path traversal in Rack::File %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

5.1CVSS6.4AI score0.05383EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2012/03/06 12:00 a.m.•43 views

GLSA-201203-05 : Rack: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201203-05 Rack: Denial of Service Rack does not properly randomize hash functions to protect against hash collision attacks. Impact : A remote attacker could send a specially crafted form post, possibly resulting in a Denial of...

5CVSS7.3AI score0.03871EPSS
SaveExploits1References2
Rows per page
Query Builder