Lucene search
K

13 matches found

OpenVAS
OpenVAS
added 2013/04/02 12:0 a.m.36 views

Fedora Update for rubygem-actionpack FEDORA-2013-4199

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

6.4CVSS7.8AI score0.05673EPSS
Exploits8References2
OpenVAS
OpenVAS
added 2013/01/24 12:0 a.m.38 views

Fedora Update for rubygem-actionpack FEDORA-2013-0686

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

7.5CVSS8.2AI score0.99449EPSS
Exploits28References2
OpenVAS
OpenVAS
added 2013/01/24 12:0 a.m.43 views

Fedora Update for rubygem-actionpack FEDORA-2013-0635

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

7.5CVSS8.2AI score0.99449EPSS
Exploits27References2
OpenVAS
OpenVAS
added 2012/08/30 12:0 a.m.44 views

Fedora Update for rubygem-actionpack FEDORA-2012-11885

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

5CVSS7.8AI score0.02568EPSS
Exploits3References2
OpenVAS
OpenVAS
added 2012/08/24 12:0 a.m.44 views

Fedora Update for rubygem-actionpack FEDORA-2012-11870

Check for the Version of rubygem-actionpack OpenVAS Vulnerability Test Fedora Update for rubygem-actionpack FEDORA-2012-11870 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

6.4CVSS0.1AI score0.04477EPSS
Exploits6References2
OpenVAS
OpenVAS
added 2012/08/24 12:0 a.m.28 views

Fedora Update for rubygem-actionpack FEDORA-2012-11870

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

6.4CVSS7.8AI score0.04477EPSS
Exploits6References2
Tenable Nessus
Tenable Nessus
added 2012/08/23 12:0 a.m.61 views

Fedora 17 : rubygem-actionpack-3.0.11-7.fc17 (2012-11885)

Fixes for CVE-2012-3463, CVE-2012-3464 and CVE-2012-3465. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

4.3CVSS7.2AI score0.02568EPSS
Exploits2References7
Tenable Nessus
Tenable Nessus
added 2012/08/23 12:0 a.m.43 views

Fedora 16 : rubygem-actionpack-3.0.10-9.fc16 (2012-11870)

Fixes for CVE-2012-3463, CVE-2012-3464 and CVE-2012-3465. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

4.3CVSS7.2AI score0.02568EPSS
Exploits2References7
seebug.org
seebug.org
added 2012/08/13 12:0 a.m.44 views

Ruby on Rails 'select_tag()'方法跨站脚本执行漏洞

BUGTRAQ ID: 54959 CVE ID: CVE-2012-3463 Ruby on Rails简称RoR或Rails,是一个使用Ruby语言写的开源Web应用框架,它是严格按照MVC结构开发的。 Ruby on Rails 3.0.17之前的3.x版本、3.1.8之前的3.1.x版本、3.2.8之前的3.2.x版本内actionpack/lib/actionview/helpers/formtaghelper.rb在实现上存在XSS漏洞,可允许远程攻击者通过prompt字段注入任意Web脚本或HTML到selecttag帮助程序。 0 Ruby on Rails Ruby o...

4.3CVSS0.1AI score0.01306EPSS
Exploits1
UbuntuCve
UbuntuCve
added 2012/08/10 10:34 a.m.43 views

CVE-2012-3463

Cross-site scripting XSS vulnerability in actionpack/lib/actionview/helpers/formtaghelper.rb in Ruby on Rails 3.x before 3.0.17, 3.1.x before 3.1.8, and 3.2.x before 3.2.8 allows remote attackers to inject arbitrary web script or HTML via the prompt field to the selecttag helper...

4.3CVSS6AI score0.01306EPSS
Exploits1References4
CVE
CVE
added 2012/08/10 10:0 a.m.98 views

CVE-2012-3463

CVE-2012-3463 is a Cross-site Scripting (XSS) vulnerability in Ruby on Rails’ ActionView form helper. The flaw resides in actionpack/lib/action_view/helpers/form_tag_helper.rb, allowing remote attackers to inject arbitrary Web script or HTML via the prompt field to the select_tag helper. Affected...

4.3CVSS5.5AI score0.01306EPSS
Exploits1References3Affected Software2
OpenVAS
OpenVAS
added 2012/08/10 12:0 a.m.45 views

FreeBSD Ports: rubygem-rails

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

4.3CVSS6.3AI score0.02568EPSS
Exploits2References5
RubySec
RubySec
added 2012/08/09 12:0 a.m.48 views

CVE-2012-3463 rubygem-actionpack: potential XSS vulnerability in select_tag prompt

Cross-site scripting XSS vulnerability in actionpack/lib/actionview/helpers/formtaghelper.rb in Ruby on Rails 3.x before 3.0.17, 3.1.x before 3.1.8, and 3.2.x before 3.2.8 allows remote attackers to inject arbitrary web script or HTML via the prompt field to the selecttag helper...

4.3CVSS4.1AI score0.01306EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder