4630 matches found
Fedora 15 : ruby-1.8.7.357-1.fc15 (2011-17551)
A security flaw was found on the previous ruby that with some series of strings which was specially crafted to intentionally collide their hash values with each other, rails applications may fall into denial of services when such strings are used in HTTP requests CVE-2011-4815. This new ruby will...
CVE-2011-4319
Cross-site scripting XSS vulnerability in the i18n translations helper method in Ruby on Rails 3.0.x before 3.0.11 and 3.1.x before 3.1.2, and the railsxss plugin in Ruby on Rails 2.3.x, allows remote attackers to inject arbitrary web script or HTML via vectors related to a translations string...
Cross site scripting
Cross-site scripting XSS vulnerability in the i18n translations helper method in Ruby on Rails 3.0.x before 3.0.11 and 3.1.x before 3.1.2, and the railsxss plugin in Ruby on Rails 2.3.x, allows remote attackers to inject arbitrary web script or HTML via vectors related to a translations string...
CVE-2011-4319
Cross-site scripting XSS vulnerability in the i18n translations helper method in Ruby on Rails 3.0.x before 3.0.11 and 3.1.x before 3.1.2, and the railsxss plugin in Ruby on Rails 2.3.x, allows remote attackers to inject arbitrary web script or HTML via vectors related to a translations string...
CVE-2011-4319
CVE-2011-4319 is a cross-site scripting (XSS) vulnerability affecting the i18n translations helper in Ruby on Rails. The issue exists in Rails 3.0.x up to before 3.0.11 and Rails 3.1.x up to before 3.1.2, and in the rails_xss plugin for Rails 2.3.x. An attacker can trigger XSS by supplying a tran...
CVE-2011-4319
Cross-site scripting XSS vulnerability in the i18n translations helper method in Ruby on Rails 3.0.x before 3.0.11 and 3.1.x before 3.1.2, and the railsxss plugin in Ruby on Rails 2.3.x, allows remote attackers to inject arbitrary web script or HTML via vectors related to a translations string...
CVE-2011-4319
Cross-site scripting XSS vulnerability in the i18n translations helper method in Ruby on Rails 3.0.x before 3.0.11 and 3.1.x before 3.1.2, and the railsxss plugin in Ruby on Rails 2.3.x, allows remote attackers to inject arbitrary web script or HTML via vectors related to a translations string...
Ruby on Rails Translate Helper方法跨站脚本执行漏洞
BUGTRAQ ID: 50722 Ruby on Rails简称RoR或Rails，是一个使用Ruby语言写的开源Web应用框架，它是严格按照MVC结构开发的。 Ruby on Rails在Translate Helper方法的实现上存在安全漏洞，远程攻击者可利用此漏洞在受影响站点的用户浏览器中执行任意脚本代码，窃取Cookie身份验证凭证。 Translate Helper方法将翻译字符串以html结尾的名称视为HTML安全，并具有插入机制。这些html字符串可使任意值包含在篡改的输入中，并且不可转义。 Ruby on Rails Ruby on Rails 3.x 临时解决方法：...
Debian: Security Advisory (DSA-2301-2)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian Security Advisory DSA 2301-1 (rails)
The remote host is missing an update to rails announced via advisory DSA 2301-1. OpenVAS Vulnerability Test $Id: deb23011.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2301-1 rails Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...
FreeBSD Ports: rubygem-rails
The remote host is missing an update to the system as announced in the referenced advisory. VID be77eff6-ca91-11e0-aea3-00215c6a37bb OpenVAS Vulnerability Test $ Description: Auto generated from VID be77eff6-ca91-11e0-aea3-00215c6a37bb Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...
FreeBSD Ports: rubygem-rails
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Fedora Update for rubygem-activesupport FEDORA-2011-11600
Check for the Version of rubygem-activesupport OpenVAS Vulnerability Test Fedora Update for rubygem-activesupport FEDORA-2011-11600 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...
Fedora Update for rubygem-activesupport FEDORA-2011-11579
Check for the Version of rubygem-activesupport OpenVAS Vulnerability Test Fedora Update for rubygem-activesupport FEDORA-2011-11579 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...
[SECURITY] [DSA 2301-1] rails security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2301-1 [email protected] http://www.debian.org/security/ Luciano Bello September 5, 2011 http://www.debian.org/security/faq -...
[SECURITY] Fedora 16 Update: rubygem-rails-3.0.10-1.fc16
Rails is a framework for building web-application using CGI, FCGI, modruby, or WEBrick on top of either MySQL, PostgreSQL, SQLite, DB2, SQL Server, or Oracle with eRuby- or Builder-based templates...
[SECURITY] Fedora 16 Update: rubygem-railties-3.0.10-1.fc16
Rails internals: application bootup, plugins, generators, and rake tasks. Railties is responsible to glue all frameworks together. Overall, it: handles all the bootstrapping process for a Rails application; manager rails command line interface; provides Rails generators core;...
[SECURITY] Fedora 16 Update: rubygem-activesupport-3.0.10-1.fc16
Utility library which carries commonly used classes and goodies from the Rails framework...
[SECURITY] Fedora 16 Update: rubygem-activemodel-3.0.10-1.fc16
Rich support for attributes, callbacks, validations, observers, serialization, internationalization, and testing. It provides a known set of interfaces for usage in model classes. It also helps building custom ORMs for use outside of the Rails framework...