2123 matches found
CVE-2024-39906
A command injection vulnerability was found in the IndieAuth functionality of the Ruby on Rails based Haven blog web application. The affected functionality requires authentication, but an attacker can craft a link that they can pass to a logged in administrator of the blog software. This leads t...
CVE-2026-22588
Spree is an open source e-commerce solution built with Ruby on Rails. Prior to versions 4.10.2, 5.0.7, 5.1.9, and 5.2.5, an Authenticated Insecure Direct Object Reference IDOR vulnerability was identified that allows an authenticated user to retrieve other users’ address information by modifying ...
CVE-2026-22588 Spree API has Authenticated Insecure Direct Object Reference (IDOR) via Order Modification
Spree is an open source e-commerce solution built with Ruby on Rails. Prior to versions 4.10.2, 5.0.7, 5.1.9, and 5.2.5, an Authenticated Insecure Direct Object Reference IDOR vulnerability was identified that allows an authenticated user to retrieve other users’ address information by modifying ...
GHSA-R657-RXJC-J557 vulnerabilities
Vulnerabilities for packages: ruby3.4-rack, ruby3.3-rack, ruby3.2-rack, kube-fluentd-operator, ruby4.0-rack...
CVE-2025-61780 vulnerabilities
Vulnerabilities for packages: ruby3.4-rails, ruby3.3-rack, ruby3.3-rails, ruby3.4-rack, logstash, gitlab-rails-ce, ruby3.2-rails, ruby4.0-rack, kube-fluentd-operator, ruby3.2-rack...
Fedora 44 : rubygem-actioncable / rubygem-actionmailbox / rubygem-actionmailer / etc (2025-6e5c27d218)
The remote Fedora 44 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2025-6e5c27d218 advisory. Update to Ruby on Rails 8.0.3 Fix CVE-2025-24293: Active Storage allowed transformation methods potentially unsafe Fix CVE-2025-55193: ANSI escape...
EUVD-2017-0249
Malware in sbrugna...
EUVD-2017-0258
Malware in sbrugna...
EUVD-2013-6251
Malware in sbrugna...
EUVD-2017-0203
Malware in sbrugna...
EUVD-2013-3159
Malware in sbrugna...
EUVD-2017-0164
Malware in sbrugna...
EUVD-2017-0210
Malware in sbrugna...
EUVD-2017-0194
Malware in sbrugna...
EUVD-2017-0225
Malware in sbrugna...
EUVD-2017-0298
Malware in sbrugna...
EUVD-2017-0314
Malware in sbrugna...
EUVD-2017-0209
Malware in sbrugna...