Lucene search
K

2168 matches found

RubySec
RubySec
added 2014/03/05 12:0 a.m.15 views

CVE-2014-0036 rubygem-rbovirt: unsafe use of rest-client

The rbovirt gem before 0.0.24 for Ruby uses the rest-client gem with SSL verification disabled, which allows remote attackers to conduct man-in-the-middle attacks via unspecified vectors...

6.8CVSS6.4AI score0.00658EPSS
Exploits0References1Affected Software1
RubySec
RubySec
added 2014/02/18 12:0 a.m.29 views

CVE-2014-0080 rubygem-activerecord: PostgreSQL array data injection vulnerability

SQL injection vulnerability in activerecord/lib/activerecord/connectionadapters/postgresql/cast.rb in Active Record in Ruby on Rails 4.0.x before 4.0.3, and 4.1.0.beta1, when PostgreSQL is used, allows remote attackers to execute "add data" SQL commands via vectors involving \ backslash character...

6.8CVSS7.9AI score0.00248EPSS
Exploits0References1Affected Software1
RubySec
RubySec
added 2014/02/18 12:0 a.m.34 views

CVE-2014-0081 rubygem-actionpack: number_to_currency, number_to_percentage and number_to_human XSS vulnerability

Multiple cross-site scripting XSS vulnerabilities in actionview/lib/actionview/helpers/numberhelper.rb in Ruby on Rails before 3.2.17, 4.0.x before 4.0.3, and 4.1.x before 4.1.0.beta2 allow remote attackers to inject arbitrary web script or HTML via the 1 format, 2 negativeformat, or 3 units...

4.3CVSS5.9AI score0.00885EPSS
Exploits0References1Affected Software1
RubySec
RubySec
added 2014/02/18 12:0 a.m.45 views

CVE-2014-0082 rubygem-actionpack: Action View string handling denial of service

actionpack/lib/actionview/template/text.rb in Action View in Ruby on Rails 3.x before 3.2.17 converts MIME type strings to symbols during use of the :text option to the render method, which allows remote attackers to cause a denial of service memory consumption by including these strings in heade...

5CVSS6.1AI score0.06456EPSS
Exploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2014/01/27 12:0 a.m.43 views

Fedora 19 : rubygem-actionmailer-3.2.13-2.fc19 / rubygem-actionpack-3.2.13-4.fc19 / etc (2014-0970)

Avoid potential format string vulnerabilities where user-provided data is interpolated into the log message before String% is called. CVE-2013-4389. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted t...

4.3CVSS8.2AI score0.01333EPSS
Exploits1References5
OpenVAS
OpenVAS
added 2014/01/27 12:0 a.m.31 views

Fedora Update for rubygem-activesupport FEDORA-2014-0970

Check for the Version of rubygem-activesupport OpenVAS Vulnerability Test Fedora Update for rubygem-activesupport FEDORA-2014-0970 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

4.3CVSS0.01333EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2014/01/27 12:0 a.m.50 views

Fedora Update for rubygem-actionpack FEDORA-2014-0970

Check for the Version of rubygem-actionpack OpenVAS Vulnerability Test Fedora Update for rubygem-actionpack FEDORA-2014-0970 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

6.4CVSS0.1AI score0.70843EPSS
Exploits3References2
OpenVAS
OpenVAS
added 2014/01/27 12:0 a.m.36 views

Fedora Update for rubygem-actionmailer FEDORA-2014-0970

Check for the Version of rubygem-actionmailer OpenVAS Vulnerability Test Fedora Update for rubygem-actionmailer FEDORA-2014-0970 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

4.3CVSS7.5AI score0.01333EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2014/01/27 12:0 a.m.36 views

Fedora Update for rubygem-activesupport FEDORA-2014-0970

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.3CVSS6.5AI score0.01333EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2014/01/27 12:0 a.m.42 views

Fedora Update for rubygem-actionpack FEDORA-2014-0970

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.4CVSS6.5AI score0.70843EPSS
Exploits3References2
OpenVAS
OpenVAS
added 2014/01/27 12:0 a.m.38 views

Fedora Update for rubygem-actionmailer FEDORA-2014-0970

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.3CVSS6.5AI score0.01333EPSS
Exploits1References2
Fedora
Fedora
added 2014/01/24 7:50 a.m.47 views

[SECURITY] Fedora 19 Update: rubygem-activesupport-3.2.13-2.fc19

Utility library which carries commonly used classes and goodies from the Rails framework...

4.3CVSS2.3AI score0.01333EPSS
Exploits1
Fedora
Fedora
added 2014/01/21 5:55 a.m.29 views

[SECURITY] Fedora 20 Update: rubygem-will_paginate-3.0.4-5.fc20

The willpaginate library provides a simple, yet powerful and extensible API for ActiveRecord pagination and rendering of pagination links in ActionView templates...

4.3CVSS3.6AI score0.00257EPSS
Exploits1
Fedora
Fedora
added 2014/01/21 5:52 a.m.20 views

[SECURITY] Fedora 19 Update: rubygem-will_paginate-3.0.4-5.fc19

The willpaginate library provides a simple, yet powerful and extensible API for ActiveRecord pagination and rendering of pagination links in ActionView templates...

4.3CVSS3.6AI score0.00257EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2014/01/21 12:0 a.m.32 views

Fedora 20 : rubygem-will_paginate-3.0.4-5.fc20 (2014-0066)

Fix XSS vulnerabilities CVE-2013-6459. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

4.3CVSS7.7AI score0.00257EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2014/01/21 12:0 a.m.35 views

Fedora 19 : rubygem-will_paginate-3.0.4-5.fc19 (2014-0094)

Fix XSS vulnerabilities CVE-2013-6459. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

4.3CVSS7.7AI score0.00257EPSS
Exploits1References3
OpenVAS
OpenVAS
added 2013/12/23 12:0 a.m.26 views

Fedora Update for rubygem-i18n FEDORA-2013-23062

Check for the Version of rubygem-i18n OpenVAS Vulnerability Test Fedora Update for rubygem-i18n FEDORA-2013-23062 Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

4.3CVSS6AI score0.00445EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2013/12/23 12:0 a.m.33 views

Fedora Update for rubygem-i18n FEDORA-2013-23062

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.3CVSS5.7AI score0.00445EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2013/12/23 12:0 a.m.21 views

Fedora Update for rubygem-i18n FEDORA-2013-23068

Check for the Version of rubygem-i18n OpenVAS Vulnerability Test Fedora Update for rubygem-i18n FEDORA-2013-23068 Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

4.3CVSS6AI score0.00445EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2013/12/23 12:0 a.m.34 views

Fedora Update for rubygem-i18n FEDORA-2013-23068

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.3CVSS5.7AI score0.00445EPSS
Exploits0References2
Rows per page
Query Builder