Lucene search
+L

513 matches found

OpenVAS
OpenVAS
•added 2009/02/17 12:00 a.m.•29 views

Fedora Update for rubygem-actionpack FEDORA-2008-8282

Check for the Version of rubygem-actionpack OpenVAS Vulnerability Test Fedora Update for rubygem-actionpack FEDORA-2008-8282 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

7.5CVSS0.1AI score0.0303EPSS
SaveExploits1References2
Fedora
Fedora
•added 2008/10/16 2:02 a.m.•45 views

[SECURITY] Fedora 8 Update: rubygem-actionpack-2.1.1-1.fc8

Eases web-request routing, handling, and response as a half-way front, half-way page controller. Implemented with specific emphasis on enabling ea sy unit/integration testing that doesn't require a browser...

7.5CVSS1.3AI score0.0303EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
•added 2008/10/16 12:00 a.m.•39 views

Fedora 8 : rubygem-actionmailer-2.1.1-1.fc8 / rubygem-actionpack-2.1.1-1.fc8 / etc (2008-8282)

Fixes CVE-2008-4094 SQL injection in limit and offset clauses Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

7.5CVSS5.4AI score0.0303EPSS
SaveExploits1References14
OSV
OSV
•added 2008/09/30 5:22 p.m.•14 views

DEBIAN-CVE-2008-4094

Multiple SQL injection vulnerabilities in Ruby on Rails before 2.1.1 allow remote attackers to execute arbitrary SQL commands via the 1 :limit and 2 :offset parameters, related to ActiveRecord, ActiveSupport, ActiveResource, ActionPack, and ActionMailer...

7.5CVSS8.8AI score0.0303EPSS
SaveExploits1References1
NVD
NVD
•added 2008/09/30 5:22 p.m.•21 views

CVE-2008-4094

Multiple SQL injection vulnerabilities in Ruby on Rails before 2.1.1 allow remote attackers to execute arbitrary SQL commands via the 1 :limit and 2 :offset parameters, related to ActiveRecord, ActiveSupport, ActiveResource, ActionPack, and ActionMailer...

7.5CVSS10AI score0.0303EPSS
SaveExploits1References15
Prion
Prion
•added 2008/09/30 5:22 p.m.•24 views

Sql injection

Multiple SQL injection vulnerabilities in Ruby on Rails before 2.1.1 allow remote attackers to execute arbitrary SQL commands via the 1 :limit and 2 :offset parameters, related to ActiveRecord, ActiveSupport, ActiveResource, ActionPack, and ActionMailer...

7.5CVSS8.7AI score0.0303EPSS
SaveExploits1References15Affected Software2
UbuntuCve
UbuntuCve
•added 2008/09/30 5:22 p.m.•35 views

CVE-2008-4094

Multiple SQL injection vulnerabilities in Ruby on Rails before 2.1.1 allow remote attackers to execute arbitrary SQL commands via the 1 :limit and 2 :offset parameters, related to ActiveRecord, ActiveSupport, ActiveResource, ActionPack, and ActionMailer...

7.5CVSS6.2AI score0.0303EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2008/09/30 5:00 p.m.•60 views

CVE-2008-4094

Multiple SQL injection vulnerabilities in Ruby on Rails before 2.1.1 allow remote attackers to execute arbitrary SQL commands via the 1 :limit and 2 :offset parameters, related to ActiveRecord, ActiveSupport, ActiveResource, ActionPack, and ActionMailer...

10AI score0.0303EPSS
SaveExploits1References15
CVE
CVE
•added 2008/09/30 5:00 p.m.•122 views

CVE-2008-4094

CVE-2008-4094 corresponds to multiple SQL injection vulnerabilities in Ruby on Rails prior to 2.1.1, exploitable via the :limit and :offset parameters in ActiveRecord (and related components). Remote attackers could cause arbitrary SQL execution and potentially affect data integrity. The linked d...

7.5CVSS10AI score0.0303EPSS
SaveExploits1References15Affected Software2
Debian CVE
Debian CVE
•added 2008/09/30 5:00 p.m.•51 views

CVE-2008-4094

Multiple SQL injection vulnerabilities in Ruby on Rails before 2.1.1 allow remote attackers to execute arbitrary SQL commands via the 1 :limit and 2 :offset parameters, related to ActiveRecord, ActiveSupport, ActiveResource, ActionPack, and ActionMailer...

7.5CVSS8.4AI score0.0303EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/09/30 12:00 a.m.•8 views

CVE-2008-4094: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Ruby on Rails before 2.1.1 allow remote attackers to execute arbitrary SQL commands via the 1 :limit and 2 :offset parameters, related to ActiveRecord, ActiveSupport, ActiveResource, ActionPack, and ActionMailer...

7.5CVSS6.6AI score0.0303EPSS
SaveExploits1References2
Fedora
Fedora
•added 2008/09/28 6:38 p.m.•27 views

[SECURITY] Fedora 9 Update: rubygem-actionpack-2.1.1-1.fc9

Eases web-request routing, handling, and response as a half-way front, half-way page controller. Implemented with specific emphasis on enabling ea sy unit/integration testing that doesn't require a browser...

7.5CVSS1.3AI score0.0303EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
•added 2007/11/30 12:00 a.m.•47 views

openSUSE 10 Security Update : rubygem-actionpack (rubygem-actionpack-4754)

Malicious users could specify their session-ID in the URL and could gain access to an authenticated session that way CVE-2007-5380. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

6.8CVSS5.3AI score0.03576EPSS
SaveExploits0References1
Rows per page
Query Builder