2194 matches found
CVE-2016-0752
Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application’s unrestricted use of the render method and providing...
Ruby on Rails Active Model Security Bypass Vulnerability
Ruby on Rails is the Rails core team to develop and maintain a set of open source Web application framework based on the Ruby language . Active Model is one of the libraries containing various modules . A security vulnerability exists in Ruby on Rails Active Model that allows remote attackers to...
Ruby on Rails Action Pack Denial of Service Vulnerability
Ruby on Rails is the Rails core team to develop and maintain a set of open source Ruby-based Web application framework . Action Pack is one of the components used to build and test MVC Web applications . A security vulnerability in Ruby on Rails Action Pack allows remote attackers to conduct deni...
Ruby on Rails Action View Directory Traversal Vulnerability
Ruby on Rails is the Rails core team to develop and maintain a set of open source Ruby-based web application framework . Action View is one of the rendering view and can be used in any Ruby code base in the independent code base . A security vulnerability in Ruby on Rails Action View allows remot...
Ruby on Rails rails-html-sanitizer cross-site scripting vulnerability (CNVD-2016-00966)
Ruby on Rails is Rails core team to develop and maintain a set of open source Ruby-based Web application framework . rails-html-sanitizer is one of the HTML code cleanup package . Ruby on Rails rails-html-sanitizer has a cross-site scripting vulnerability that can be exploited by remote attackers...
Ruby on Rails rails-html-sanitizer cross-site scripting vulnerability
Ruby on Rails is Rails core team to develop and maintain a set of open source Ruby-based Web application framework . rails-html-sanitizer is one of the HTML code cleanup package . Ruby on Rails rails-html-sanitizer has a cross-site scripting vulnerability that can be exploited by remote attackers...
Ruby on Rails Action Record Security Bypass Vulnerability
Ruby on Rails is the Rails core team to develop and maintain a set of open source Ruby-based Web application framework . Action Record is one of the responsible for communicating with the database ORM components . Ruby on Rails Action Record has a security vulnerability that allows remote attacke...
Ruby on Rails Action Pack Information Disclosure Vulnerability
Ruby on Rails is the Rails core team to develop and maintain a set of open source Ruby-based Web application framework . Action Pack is one of the components used to build and test MVC Web applications . A security vulnerability exists in Ruby on Rails Action Pack that can be exploited by remote...
Ruby on Rails rails-html-sanitizer cross-site scripting vulnerability (CNVD-2016-00964)
Ruby on Rails is Rails core team to develop and maintain a set of open source Ruby-based Web application framework . rails-html-sanitizer is one of the HTML code cleanup package . Ruby on Rails rails-html-sanitizer has a cross-site scripting vulnerability that can be exploited by remote attackers...
Ruby On Rails Action Controller Information Disclosure Vulnerability
Ruby on Rails is the Rails core team to develop and maintain a set of open source Ruby-based Web application framework . Action Controller is one of the MVC C controller component . Ruby On Rails Action Controller has a security vulnerability that allows remote attackers to submit special request...
Debian Security Advisory DSA 3464-1 (rails - security update)
Multiple security issues have been discovered in the Ruby on Rails web application development framework, which may result in denial of service, cross-site scripting, information disclosure or bypass of input validation. OpenVAS Vulnerability Test $Id: deb3464.nasl 6608 2017-07-07 12:05:05Z...
Debian: Security Advisory (DSA-3464-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ruby on Rails: Remote code execution using render :inline
Possible remote code execution vulnerability in Action Pack. There is a possible remote code execution vulnerability in Action Pack. This vulnerability has been assigned the CVE identifier CVE-2016-2098. Versions Affected: 3.2.x, 4.0.x, 4.1.x, 4.2.x Not affected: 5.0+ Fixed Versions: 3.2.22.2,...
Debian DSA-3464-1 : rails - security update
Multiple security issues have been discovered in the Ruby on Rails web application development framework, which may result in denial of service, cross-site scripting, information disclosure or bypass of input validation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text an...
PT-2016-1280 · Ruby +1 · Ruby On Rails +1
Name of the Vulnerable Software and Affected Versions: Ruby on Rails versions prior to 3.2.22.1 Ruby on Rails versions 4.0.x through 4.1.14 Ruby on Rails versions 4.2.x through 4.2.5 Ruby on Rails versions 5.x through 5.0.0.beta1.1 Description: The issue is related to a directory traversal...
DSA-3464-1 rails - security update
Bulletin has no description...
Ruby on Rails rails-html-sanitizer XSS 漏洞
XSS vulnerability in rails-html-sanitizer There is a XSS vulnerability in Rails::Html::FullSanitizer used by Action View's striptags. This vulnerability has been assigned the CVE identifier CVE-2015-7579. Versions Affected: 1.0.2 Not affected: 1.0.0, 1.0.1 Fixed Versions: 1.0.3 Impact Due to the...
Ruby on Rails ActiveModel::Name远程拒绝服务漏洞
No description provided by source...