Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

2180 matches found

Prion
Prion•added 2017/12/29 4:29 p.m.•29 views

Sql injection

DISPUTED SQL injection vulnerability in the 'where' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 'id' parameter. NOTE: The vendor disputes this issue because the documentation states that this method is not intended for use with...

6.8CVSS8.6AI score0.02272EPSS
SaveExploits1References1Affected Software1
NVD
NVD•added 2017/12/29 4:29 p.m.•24 views

CVE-2017-17917

SQL injection vulnerability in the 'where' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 'id' parameter. NOTE: The vendor disputes this issue because the documentation states that this method is not intended for use with untrusted inpu...

8.1CVSS8.6AI score0.02272EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve•added 2017/12/29 4:29 p.m.•39 views

CVE-2017-17919

SQL injection vulnerability in the 'order' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 'id desc' parameter. NOTE: The vendor disputes this issue because the documentation states that this method is not intended for use with untrusted...

8.1CVSS7.5AI score0.01518EPSS
SaveExploits1References2
Prion
Prion•added 2017/12/29 4:29 p.m.•23 views

Sql injection

DISPUTED SQL injection vulnerability in the 'order' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 'id desc' parameter. NOTE: The vendor disputes this issue because the documentation states that this method is not intended for use with...

6.8CVSS8.6AI score0.01518EPSS
SaveExploits1References1Affected Software1
UbuntuCve
UbuntuCve•added 2017/12/29 4:29 p.m.•39 views

CVE-2017-17920

SQL injection vulnerability in the 'reorder' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 'name' parameter. NOTE: The vendor disputes this issue because the documentation states that this method is not intended for use with untrusted...

8.1CVSS7.5AI score0.01518EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve•added 2017/12/29 4:29 p.m.•43 views

CVE-2017-17916

SQL injection vulnerability in the 'findby' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 'name' parameter. NOTE: The vendor disputes this issue because the documentation states that this method is not intended for use with untrusted...

8.1CVSS7.5AI score0.01532EPSS
SaveExploits1References2
OSV
OSV•added 2017/12/29 4:29 p.m.•15 views

CVE-2017-17916

SQL injection vulnerability in the 'findby' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 'name' parameter. NOTE: The vendor disputes this issue because the documentation states that this method is not intended for use with untrusted...

8.1CVSS8.5AI score
SaveExploits0References1
OSV
OSV•added 2017/12/29 4:29 p.m.•12 views

CVE-2017-17919

SQL injection vulnerability in the 'order' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 'id desc' parameter. NOTE: The vendor disputes this issue because the documentation states that this method is not intended for use with untrusted...

8.1CVSS8.5AI score
SaveExploits0References1
OSV
OSV•added 2017/12/29 4:29 p.m.•13 views

CVE-2017-17917

SQL injection vulnerability in the 'where' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 'id' parameter. NOTE: The vendor disputes this issue because the documentation states that this method is not intended for use with untrusted inpu...

8.1CVSS8.5AI score
SaveExploits0References1
OSV
OSV•added 2017/12/29 4:29 p.m.•9 views

DEBIAN-CVE-2017-17919

SQL injection vulnerability in the 'order' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 'id desc' parameter. NOTE: The vendor disputes this issue because the documentation states that this method is not intended for use with untrusted...

8.1CVSS8.7AI score0.01518EPSS
SaveExploits1References1
Prion
Prion•added 2017/12/29 4:29 p.m.•20 views

Sql injection

DISPUTED SQL injection vulnerability in the 'reorder' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 'name' parameter. NOTE: The vendor disputes this issue because the documentation states that this method is not intended for use with...

6.8CVSS8.6AI score0.01518EPSS
SaveExploits1References1Affected Software1
Prion
Prion•added 2017/12/29 4:29 p.m.•23 views

Sql injection

DISPUTED SQL injection vulnerability in the 'findby' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 'name' parameter. NOTE: The vendor disputes this issue because the documentation states that this method is not intended for use with...

6.8CVSS8.6AI score0.01532EPSS
SaveExploits1References1Affected Software1
NVD
NVD•added 2017/12/29 4:29 p.m.•25 views

CVE-2017-17916

SQL injection vulnerability in the 'findby' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 'name' parameter. NOTE: The vendor disputes this issue because the documentation states that this method is not intended for use with untrusted...

8.1CVSS8.6AI score0.01532EPSS
SaveExploits1References1
NVD
NVD•added 2017/12/29 4:29 p.m.•25 views

CVE-2017-17920

SQL injection vulnerability in the 'reorder' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 'name' parameter. NOTE: The vendor disputes this issue because the documentation states that this method is not intended for use with untrusted...

8.1CVSS8.6AI score0.01518EPSS
SaveExploits1References1
OSV
OSV•added 2017/12/29 4:29 p.m.•12 views

DEBIAN-CVE-2017-17920

SQL injection vulnerability in the 'reorder' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 'name' parameter. NOTE: The vendor disputes this issue because the documentation states that this method is not intended for use with untrusted...

8.1CVSS8.7AI score0.01518EPSS
SaveExploits1References1
Cvelist
Cvelist•added 2017/12/29 4:00 p.m.•28 views

CVE-2017-17920

SQL injection vulnerability in the 'reorder' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 'name' parameter. NOTE: The vendor disputes this issue because the documentation states that this method is not intended for use with untrusted...

8.6AI score0.01518EPSS
SaveExploits1References1
CVE
CVE•added 2017/12/29 4:00 p.m.•84 views

CVE-2017-17917

Ruby on Rails SQL injection CVE-2017-17917 affects Rails 5.1.4 and earlier, via the vulnerable "+where" method using the id parameter. The underlying issue allows remote execution of arbitrary SQL commands; vendor disputes the issue due to documentation stating the method isn’t intended for untru...

8.1CVSS8.6AI score0.02272EPSS
SaveExploits1References1Affected Software1
CVE
CVE•added 2017/12/29 4:00 p.m.•89 views

CVE-2017-17919

The CVE-2017-17919 entry describes a SQL injection in Rails 5.1.4 and earlier, exploitable via the id desc parameter in the order method. Concrete details across connected docs: affected software (Ruby on Rails), vulnerable component (order method handling untrusted input), and the underlying iss...

8.1CVSS8.6AI score0.01518EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment•added 2017/12/29 4:00 p.m.•14 views

CVE-2017-17917

SQL injection vulnerability in the 'where' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 'id' parameter. NOTE: The vendor disputes this issue because the documentation states that this method is not intended for use with untrusted inpu...

8.7AI score0.02272EPSS
SaveExploits1References1
Debian CVE
Debian CVE•added 2017/12/29 4:00 p.m.•63 views

CVE-2017-17919

SQL injection vulnerability in the 'order' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 'id desc' parameter. NOTE: The vendor disputes this issue because the documentation states that this method is not intended for use with untrusted...

8.1CVSS8.6AI score0.01518EPSS
SaveExploits1
Rows per page
Query Builder