230 matches found
[SECURITY] Fedora 14 Update: rubygem-actionpack-2.3.8-3.fc14
Eases web-request routing, handling, and response as a half-way front, half-way page controller. Implemented with specific emphasis on enabling ea sy unit/integration testing that doesn't require a browser...
openSUSE Security Update : rubygem-actionpack-2_3 (rubygem-actionpack-2_3-1934)
This update of rubygems fixes two vulnerabilities : - CVE-2008-7248: CVSS v2 Base Score: 4.3 Rails CSRF protection can be bypassed by using special content-types for a HTTP request. - CVE-2009-4214: CVSS v2 Base Score: 4.3 The method striptags does not completely protect against XSS attacks...
openSUSE Security Update : rubygem-actionpack (rubygem-actionpack-1946)
This update of rubygems fixes two vulnerabilities : - CVE-2008-7248: CVSS v2 Base Score: 4.3 Rails CSRF protection can be bypassed by using special content-types for a HTTP request. - CVE-2009-4214: CVSS v2 Base Score: 4.3 The method striptags does not completely protect against XSS attacks...
openSUSE Security Update : rubygem-actionpack (rubygem-actionpack-1946)
This update of rubygems fixes two vulnerabilities : - CVE-2008-7248: CVSS v2 Base Score: 4.3 Rails CSRF protection can be bypassed by using special content-types for a HTTP request. - CVE-2009-4214: CVSS v2 Base Score: 4.3 The method striptags does not completely protect against XSS attacks...
Fedora Core 11 FEDORA-2009-13361 (rubygem-actionpack)
The remote host is missing an update to rubygem-actionpack announced via advisory FEDORA-2009-13361. OpenVAS Vulnerability Test $Id: fcore200913361.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-13361 rubygem-actionpack Authors: Thomas Reinke...
Fedora Core 11 FEDORA-2009-13361 (rubygem-actionpack)
The remote host is missing an update to rubygem-actionpack announced via advisory FEDORA-2009-13361. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are...
Fedora Core 12 FEDORA-2009-13393 (rubygem-actionpack)
The remote host is missing an update to rubygem-actionpack announced via advisory FEDORA-2009-13393. OpenVAS Vulnerability Test $Id: fcore200913393.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-13393 rubygem-actionpack Authors: Thomas Reinke...
Fedora Core 12 FEDORA-2009-13393 (rubygem-actionpack)
The remote host is missing an update to rubygem-actionpack announced via advisory FEDORA-2009-13393. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are...
Fedora 11 : rubygem-actionpack-2.3.2-4.fc11 (2009-13361)
Fix CVE-2009-4214 bz 542786 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...
Fedora Core 10 FEDORA-2009-12966 (rubygem-actionpack)
The remote host is missing an update to rubygem-actionpack announced via advisory FEDORA-2009-12966. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are...
Fedora Core 10 FEDORA-2009-12966 (rubygem-actionpack)
The remote host is missing an update to rubygem-actionpack announced via advisory FEDORA-2009-12966. OpenVAS Vulnerability Test $Id: fcore200912966.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-12966 rubygem-actionpack Authors: Thomas Reinke...
Fedora 10 : rubygem-actionpack-2.1.1-5.fc10 (2009-12966)
Two security issues are found on activepack shipped on Fedora 10. One bug is that there is a weakness in the striptags function in ruby on rails bug 542786, CVE-2009-4214. Another one is a possibility to circumvent protection against cross-site request forgery CSRF attacks bug 544329. This new rp...
openSUSE Security Update : rubygem-actionpack-2_1 (rubygem-actionpack-2_1-1320)
This update improves the escaping in the helper code of Ruby on Rails to protect against XSS attacks CVE-2009-3009 and an information leak CVE-2009-3086. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Securi...
[SECURITY] Fedora 11 Update: rubygem-actionpack-2.3.2-2.fc11
Eases web-request routing, handling, and response as a half-way front, half-way page controller. Implemented with specific emphasis on enabling ea sy unit/integration testing that doesn't require a browser...
Fedora Core 11 FEDORA-2009-9922 (rubygem-actionpack)
The remote host is missing an update to rubygem-actionpack announced via advisory FEDORA-2009-9922. OpenVAS Vulnerability Test $Id: fcore20099922.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-9922 rubygem-actionpack Authors: Thomas Reinke Copyrigh...
openSUSE Security Update : rubygem-actionpack (rubygem-actionpack-327)
Missing input sanitation in rubygem-actionpack allowed remote attackers to inject arbitrary HTTP headers via specially crafted URLs CVE-2008-5189. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Upda...
Fedora 10 : rubygem-actionpack-2.1.1-2.fc10 (2009-2149)
CVE-2008-5189: CGI header injection vulnerability Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
Fedora Core 10 FEDORA-2009-2149 (rubygem-actionpack)
The remote host is missing an update to rubygem-actionpack announced via advisory FEDORA-2009-2149. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are...
Fedora Core 9 FEDORA-2009-2179 (rubygem-actionpack)
The remote host is missing an update to rubygem-actionpack announced via advisory FEDORA-2009-2179. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are...
Fedora 9 : rubygem-actionpack-2.1.1-2.fc9 (2009-2179)
CVE-2008-5189: CGI header injection vulnerability Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...