10 matches found
rubygem-activerecord: Denial of Service
A flaw was found in the rubygem-activerecord. RubyGem's ActiveRecord is vulnerable to a denial of service caused by a flaw in the PostgreSQL adapter. By sending a specially-crafted request, a remote attacker can cause a slow sequential scan, resulting in a denial of service...
SUSE-SU-2023:0587-1 Security update for rubygem-activerecord-4_2
This update for rubygem-activerecord-42 contains the following fixes: - CVE-2022-44566: Fixed a potential denial of service due to an inefficient comparison between integer and numeric values. bsc1207450 - fixed regression caused by fix for CVE-2022-44566. bsc1207450...
SUSE-SU-2023:0518-1 Security update for rubygem-activerecord-4_2
This update for rubygem-activerecord-42 fixes the following issues: - CVE-2022-44566: Fixed a potential denial of service due to an inefficient comparison between integer and numeric values bsc1207450...
rubygem-activerecord SQL注入漏洞
rubygem-activerecord is an application of rubygems open source. A security vulnerability exists in rubygem-activerecord. An attacker exploited the vulnerability to perform SQL injection attacks...
OPENSUSE-SU-2023:0009-1 Security update for rubygem-activerecord-5.2
This update for rubygem-activerecord-5.2 fixes the following issues: - CVE-2022-32224: Fixed possible remote code execution when using YAML serialized columns in Active Record boo1201465...
OPENSUSE-SU-2021:1468-1 Security update for rubygem-activerecord-5_1
This update for rubygem-activerecord-51 fixes the following issues: - CVE-2021-22880: Fixed possible DoS vector in PostgreSQL money type bsc1182169. This update was imported from the SUSE:SLE-15:Update update project...
OPENSUSE-SU-2021:3634-1 Security update for rubygem-activerecord-5_1
This update for rubygem-activerecord-51 fixes the following issues: - CVE-2021-22880: Fixed possible DoS vector in PostgreSQL money type bsc1182169...
RHEL 6 : ruby193-rubygem-activerecord (RHSA-2013:0699)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2013:0699 advisory. - rubygem-activerecord: attributedos Symbol DoS vulnerability CVE-2013-1854 Note that Nessus has not tested for this issue but has instead relied onl...
SUSE-SU-2016:0619-1 Security update for rubygem-activerecord-3_2
This update for rubygem-activerecord-32 fixes the following issues: - CVE-2015-7577: rubygem-activerecord: Nested attributes rejection proc bypass bsc963330...
SUSE-SU-2016:0458-1 Security update for rubygem-activerecord-4_2
This update for rubygem-activerecord-42 fixes the following issues: - CVE-2016-0753: Input Validation Circumvention bsc963334 - CVE-2015-7577: Nested attributes rejection proc bypass bsc963330...