Lucene search
+L

8 matches found

Mageia
Mageia
•added 2014/04/03 1:23 p.m.•67 views

Updated ruby-rack-ssl packages fix CVE-2014-2538

Updated ruby-rack-ssl packages fix security vulnerabilities: Cross-site scripting XSS vulnerability in lib/rack/ssl.rb in the rack-ssl gem before 1.4.0 for Ruby allows remote attackers to inject arbitrary web script or HTML via a URI, which might not be properly handled by third-party adapters su...

4.3CVSS5.6AI score0.0219EPSS
SaveExploits1References2
NVD
NVD
•added 2014/03/25 6:21 p.m.•44 views

CVE-2014-2538

Cross-site scripting XSS vulnerability in lib/rack/ssl.rb in the rack-ssl gem before 1.4.0 for Ruby allows remote attackers to inject arbitrary web script or HTML via a URI, which might not be properly handled by third-party adapters such as JRuby-Rack...

4.3CVSS5.5AI score0.0219EPSS
SaveExploits1References5
Prion
Prion
•added 2014/03/25 6:21 p.m.•24 views

Cross site scripting

Cross-site scripting XSS vulnerability in lib/rack/ssl.rb in the rack-ssl gem before 1.4.0 for Ruby allows remote attackers to inject arbitrary web script or HTML via a URI, which might not be properly handled by third-party adapters such as JRuby-Rack...

4.3CVSS6AI score0.0219EPSS
SaveExploits1References5Affected Software1
UbuntuCve
UbuntuCve
•added 2014/03/25 6:21 p.m.•25 views

CVE-2014-2538

Cross-site scripting XSS vulnerability in lib/rack/ssl.rb in the rack-ssl gem before 1.4.0 for Ruby allows remote attackers to inject arbitrary web script or HTML via a URI, which might not be properly handled by third-party adapters such as JRuby-Rack...

4.3CVSS7.3AI score0.0219EPSS
SaveExploits1References2
CVE
CVE
•added 2014/03/25 2:00 p.m.•102 views

CVE-2014-2538

CVE-2014-2538 describes an XSS vulnerability in the rack-ssl gem’s Ruby component (lib/rack/ssl.rb) prior to version 1.4.0. The issue allows remote attackers to inject arbitrary web script or HTML via a URI, which may not be handled correctly by adapters such as JRuby-Rack. Affected product: rack...

4.3CVSS5.5AI score0.0219EPSS
SaveExploits1References5Affected Software1
Debian CVE
Debian CVE
•added 2014/03/25 2:00 p.m.•62 views

CVE-2014-2538

Cross-site scripting XSS vulnerability in lib/rack/ssl.rb in the rack-ssl gem before 1.4.0 for Ruby allows remote attackers to inject arbitrary web script or HTML via a URI, which might not be properly handled by third-party adapters such as JRuby-Rack...

4.3CVSS5.5AI score0.0219EPSS
SaveExploits1
Cvelist
Cvelist
•added 2014/03/25 2:00 p.m.•50 views

CVE-2014-2538

Cross-site scripting XSS vulnerability in lib/rack/ssl.rb in the rack-ssl gem before 1.4.0 for Ruby allows remote attackers to inject arbitrary web script or HTML via a URI, which might not be properly handled by third-party adapters such as JRuby-Rack...

5.4AI score0.0219EPSS
SaveExploits1References5
RubySec
RubySec
•added 2013/07/09 12:00 a.m.•36 views

CVE-2014-2538 rubygem rack-ssl: URL error display XSS

Cross-site scripting XSS vulnerability in lib/rack/ssl.rb in the rack-ssl gem before 1.4.0 for Ruby allows remote attackers to inject arbitrary web script or HTML via a URI, which might not be properly handled by third-party adapters such as JRuby-Rack...

4.3CVSS5.5AI score0.0219EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder