2177 matches found
CVE-2015-7578
CVE-2015-7578 is a cross-site scripting (XSS) vulnerability in the rails-html-sanitizer gem, prior to version 1.0.3, used with Ruby on Rails 4.2.x and 5.x. The issue allows remote attackers to inject arbitrary web script or HTML via crafted tag attributes due to inadequate sanitization. Exploitat...
CVE-2016-0751
actionpack/lib/actiondispatch/http/mimetype.rb in Action Pack in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 does not properly restrict use of the MIME type cache, which allows remote attackers to cause a denial of service...
CVE-2016-0752
CVE-2016-0752 is a directory-traversal flaw in Rails’ Action View triggered when untrusted input is passed to render, allowing remote read of arbitrary files via a path containing .. and linked to incomplete fixes that affected Rails 3.2.x/4.x. The vulnerability stems from Action View’s rendering...
CVE-2016-0752
Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application’s unrestricted use of the render method and providing...
Ruby on Rails Action Pack Denial of Service Vulnerability
Ruby on Rails is the Rails core team to develop and maintain a set of open source Ruby-based Web application framework . Action Pack is one of the components used to build and test MVC Web applications . A security vulnerability in Ruby on Rails Action Pack allows remote attackers to conduct deni...
Ruby on Rails Active Model Security Bypass Vulnerability
Ruby on Rails is the Rails core team to develop and maintain a set of open source Web application framework based on the Ruby language . Active Model is one of the libraries containing various modules . A security vulnerability exists in Ruby on Rails Active Model that allows remote attackers to...
Ruby on Rails Action View Directory Traversal Vulnerability
Ruby on Rails is the Rails core team to develop and maintain a set of open source Ruby-based web application framework . Action View is one of the rendering view and can be used in any Ruby code base in the independent code base . A security vulnerability in Ruby on Rails Action View allows remot...
Ruby on Rails Action Pack Information Disclosure Vulnerability
Ruby on Rails is the Rails core team to develop and maintain a set of open source Ruby-based Web application framework . Action Pack is one of the components used to build and test MVC Web applications . A security vulnerability exists in Ruby on Rails Action Pack that can be exploited by remote...
Ruby on Rails rails-html-sanitizer cross-site scripting vulnerability
Ruby on Rails is Rails core team to develop and maintain a set of open source Ruby-based Web application framework . rails-html-sanitizer is one of the HTML code cleanup package . Ruby on Rails rails-html-sanitizer has a cross-site scripting vulnerability that can be exploited by remote attackers...
Ruby on Rails rails-html-sanitizer cross-site scripting vulnerability (CNVD-2016-00966)
Ruby on Rails is Rails core team to develop and maintain a set of open source Ruby-based Web application framework . rails-html-sanitizer is one of the HTML code cleanup package . Ruby on Rails rails-html-sanitizer has a cross-site scripting vulnerability that can be exploited by remote attackers...
Ruby on Rails Action Record Security Bypass Vulnerability
Ruby on Rails is the Rails core team to develop and maintain a set of open source Ruby-based Web application framework . Action Record is one of the responsible for communicating with the database ORM components . Ruby on Rails Action Record has a security vulnerability that allows remote attacke...
Ruby on Rails rails-html-sanitizer cross-site scripting vulnerability (CNVD-2016-00964)
Ruby on Rails is Rails core team to develop and maintain a set of open source Ruby-based Web application framework . rails-html-sanitizer is one of the HTML code cleanup package . Ruby on Rails rails-html-sanitizer has a cross-site scripting vulnerability that can be exploited by remote attackers...
Ruby On Rails Action Controller Information Disclosure Vulnerability
Ruby on Rails is the Rails core team to develop and maintain a set of open source Ruby-based Web application framework . Action Controller is one of the MVC C controller component . Ruby On Rails Action Controller has a security vulnerability that allows remote attackers to submit special request...
Debian: Security Advisory (DSA-3464-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian Security Advisory DSA 3464-1 (rails - security update)
Multiple security issues have been discovered in the Ruby on Rails web application development framework, which may result in denial of service, cross-site scripting, information disclosure or bypass of input validation. OpenVAS Vulnerability Test $Id: deb3464.nasl 6608 2017-07-07 12:05:05Z...
Ruby on Rails: Remote code execution using render :inline
Possible remote code execution vulnerability in Action Pack. There is a possible remote code execution vulnerability in Action Pack. This vulnerability has been assigned the CVE identifier CVE-2016-2098. Versions Affected: 3.2.x, 4.0.x, 4.1.x, 4.2.x Not affected: 5.0+ Fixed Versions: 3.2.22.2,...
Debian DSA-3464-1 : rails - security update
Multiple security issues have been discovered in the Ruby on Rails web application development framework, which may result in denial of service, cross-site scripting, information disclosure or bypass of input validation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text an...
PT-2016-1280 · Ruby +1 · Ruby On Rails +1
Name of the Vulnerable Software and Affected Versions: Ruby on Rails versions prior to 3.2.22.1 Ruby on Rails versions 4.0.x through 4.1.14 Ruby on Rails versions 4.2.x through 4.2.5 Ruby on Rails versions 5.x through 5.0.0.beta1.1 Description: The issue is related to a directory traversal...
