Lucene search
+L

8 matches found

OpenVAS
OpenVAS
•added 2014/05/26 12:00 a.m.•63 views

Fedora Update for rubygem-actionpack FEDORA-2014-6098

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.3AI score0.53703EPSS
SaveExploits5References4
OpenVAS
OpenVAS
•added 2014/03/12 12:00 a.m.•69 views

Fedora Update for rubygem-actionpack FEDORA-2013-23636

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.4CVSS7.3AI score0.207EPSS
SaveExploits3References2
Tenable Nessus
Tenable Nessus
•added 2013/12/09 12:00 a.m.•51 views

FreeBSD : rails -- multiple vulnerabilities (6a806960-3016-44ed-8575-8614a7cb57c7)

Rails weblog : Rails 3.2.16 and 4.0.2 have been released! These two releases contain important security fixes, so please upgrade as soon as possible! In order to make upgrading as smooth as possible, we've only included commits directly related to each security issue. The security fixes in 3.2.16...

6.4CVSS5.3AI score0.207EPSS
SaveExploits2References7
NVD
NVD
•added 2013/12/07 12:55 a.m.•28 views

CVE-2013-6416

Cross-site scripting XSS vulnerability in the simpleformat helper in actionpack/lib/actionview/helpers/texthelper.rb in Ruby on Rails 4.x before 4.0.2 allows remote attackers to inject arbitrary web script or HTML via a crafted HTML attribute...

4.3CVSS5.4AI score0.01963EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2013/12/07 12:00 a.m.•44 views

CVE-2013-6416

Cross-site scripting XSS vulnerability in the simpleformat helper in actionpack/lib/actionview/helpers/texthelper.rb in Ruby on Rails 4.x before 4.0.2 allows remote attackers to inject arbitrary web script or HTML via a crafted HTML attribute...

5.3AI score0.01963EPSS
SaveExploits0References3
CVE
CVE
•added 2013/12/07 12:00 a.m.•118 views

CVE-2013-6416

The CVE-2013-6416 entry concerns Ruby on Rails 4.x prior to 4.0.2, specifically a cross-site scripting (XSS) flaw in the simple_format helper within action_view/helpers/text_helper.rb. The vulnerability allows remote attackers to inject arbitrary script or HTML via a crafted HTML attribute, impac...

4.3CVSS5.4AI score0.01963EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE
•added 2013/12/07 12:00 a.m.•74 views

CVE-2013-6416

Cross-site scripting XSS vulnerability in the simpleformat helper in actionpack/lib/actionview/helpers/texthelper.rb in Ruby on Rails 4.x before 4.0.2 allows remote attackers to inject arbitrary web script or HTML via a crafted HTML attribute...

4.3CVSS5.4AI score0.01963EPSS
SaveExploits0
FreeBSD
FreeBSD
•added 2013/12/03 12:00 a.m.•66 views

rails -- multiple vulnerabilities

Rails weblog: Rails 3.2.16 and 4.0.2 have been released! These two releases contain important security fixes, so please upgrade as soon as possible! In order to make upgrading as smooth as possible, we've only included commits directly related to each security issue. The security fixes in 3.2.16...

6.4CVSS6.5AI score0.207EPSS
SaveExploits2References1
Rows per page
Query Builder