Lucene search
K

10 matches found

RedHat Linux
RedHat Linux
added 2023/11/08 2:26 p.m.4 views

rubygem-activerecord: Denial of Service

A flaw was found in the rubygem-activerecord. RubyGem's ActiveRecord is vulnerable to a denial of service caused by a flaw in the PostgreSQL adapter. By sending a specially-crafted request, a remote attacker can cause a slow sequential scan, resulting in a denial of service...

7.5CVSS6.3AI score0.01543EPSS
Exploits1References5
OSV
OSV
added 2023/03/01 1:5 p.m.7 views

SUSE-SU-2023:0587-1 Security update for rubygem-activerecord-4_2

This update for rubygem-activerecord-42 contains the following fixes: - CVE-2022-44566: Fixed a potential denial of service due to an inefficient comparison between integer and numeric values. bsc1207450 - fixed regression caused by fix for CVE-2022-44566. bsc1207450...

7.5CVSS7.4AI score0.01543EPSS
Exploits1References3
OSV
OSV
added 2023/02/24 3:21 p.m.8 views

SUSE-SU-2023:0518-1 Security update for rubygem-activerecord-4_2

This update for rubygem-activerecord-42 fixes the following issues: - CVE-2022-44566: Fixed a potential denial of service due to an inefficient comparison between integer and numeric values bsc1207450...

7.5CVSS7.4AI score0.01543EPSS
Exploits1References3
CNNVD
CNNVD
added 2023/01/20 12:0 a.m.3 views

rubygem-activerecord SQL注入漏洞

rubygem-activerecord is an application of rubygems open source. A security vulnerability exists in rubygem-activerecord. An attacker exploited the vulnerability to perform SQL injection attacks...

8.8CVSS7.6AI score0.05757EPSS
Exploits1References5
OSV
OSV
added 2023/01/11 7:0 a.m.6 views

OPENSUSE-SU-2023:0009-1 Security update for rubygem-activerecord-5.2

This update for rubygem-activerecord-5.2 fixes the following issues: - CVE-2022-32224: Fixed possible remote code execution when using YAML serialized columns in Active Record boo1201465...

9.8CVSS9.8AI score0.01944EPSS
Exploits1References3
OSV
OSV
added 2021/11/12 1:6 p.m.5 views

OPENSUSE-SU-2021:1468-1 Security update for rubygem-activerecord-5_1

This update for rubygem-activerecord-51 fixes the following issues: - CVE-2021-22880: Fixed possible DoS vector in PostgreSQL money type bsc1182169. This update was imported from the SUSE:SLE-15:Update update project...

7.5CVSS7.5AI score0.02599EPSS
Exploits1References3
OSV
OSV
added 2021/11/09 9:51 a.m.8 views

OPENSUSE-SU-2021:3634-1 Security update for rubygem-activerecord-5_1

This update for rubygem-activerecord-51 fixes the following issues: - CVE-2021-22880: Fixed possible DoS vector in PostgreSQL money type bsc1182169...

7.5CVSS7.5AI score0.02599EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2018/12/06 12:0 a.m.44 views

RHEL 6 : ruby193-rubygem-activerecord (RHSA-2013:0699)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2013:0699 advisory. - rubygem-activerecord: attributedos Symbol DoS vulnerability CVE-2013-1854 Note that Nessus has not tested for this issue but has instead relied onl...

5CVSS7.3AI score0.01795EPSS
Exploits0References5
OSV
OSV
added 2016/03/01 1:53 p.m.6 views

SUSE-SU-2016:0619-1 Security update for rubygem-activerecord-3_2

This update for rubygem-activerecord-32 fixes the following issues: - CVE-2015-7577: rubygem-activerecord: Nested attributes rejection proc bypass bsc963330...

5.3CVSS6AI score0.01209EPSS
Exploits0References3
OSV
OSV
added 2016/02/15 1:25 p.m.6 views

SUSE-SU-2016:0458-1 Security update for rubygem-activerecord-4_2

This update for rubygem-activerecord-42 fixes the following issues: - CVE-2016-0753: Input Validation Circumvention bsc963334 - CVE-2015-7577: Nested attributes rejection proc bypass bsc963330...

5.3CVSS5.5AI score0.02328EPSS
Exploits0References5
Rows per page
Query Builder