Lucene search
+L

86 matches found

NVD
NVD
added 2011/08/29 6:55 p.m.22 views

CVE-2011-2929

The template selection functionality in actionpack/lib/actionview/template/resolver.rb in Ruby on Rails 3.0.x before 3.0.10 and 3.1.x before 3.1.0.rc6 does not properly handle glob characters, which allows remote attackers to render arbitrary views via a crafted URL, related to a "filter skipping...

5CVSS6.5AI score0.01813EPSS
SaveExploits0References12
UbuntuCve
UbuntuCve
added 2011/08/29 6:55 p.m.38 views

CVE-2011-2929

The template selection functionality in actionpack/lib/actionview/template/resolver.rb in Ruby on Rails 3.0.x before 3.0.10 and 3.1.x before 3.1.0.rc6 does not properly handle glob characters, which allows remote attackers to render arbitrary views via a crafted URL, related to a "filter skipping...

5CVSS6AI score0.01813EPSS
SaveExploits0References4
Prion
Prion
added 2011/08/29 6:55 p.m.27 views

Spoofing

The template selection functionality in actionpack/lib/actionview/template/resolver.rb in Ruby on Rails 3.0.x before 3.0.10 and 3.1.x before 3.1.0.rc6 does not properly handle glob characters, which allows remote attackers to render arbitrary views via a crafted URL, related to a "filter skipping...

5CVSS7AI score0.01813EPSS
SaveExploits0References12Affected Software2
CVE
CVE
added 2011/08/29 6:00 p.m.98 views

CVE-2011-2929

CVE-2011-2929 affects Ruby on Rails: the template selection in actionpack/lib/action_view/template/resolver.rb mishandles glob characters in Rails 3.0.x (pre-3.0.10) and 3.1.x (pre-3.1.0.rc6), enabling remote attackers to render arbitrary views via a crafted URL. This is due to a filter skipping ...

5CVSS6.4AI score0.01813EPSS
SaveExploits0References12Affected Software2
Cvelist
Cvelist
added 2011/08/29 6:00 p.m.49 views

CVE-2011-2929

The template selection functionality in actionpack/lib/actionview/template/resolver.rb in Ruby on Rails 3.0.x before 3.0.10 and 3.1.x before 3.1.0.rc6 does not properly handle glob characters, which allows remote attackers to render arbitrary views via a crafted URL, related to a "filter skipping...

6.3AI score0.01813EPSS
SaveExploits0References12
Tenable Nessus
Tenable Nessus
added 2009/06/28 12:00 a.m.27 views

Fedora 10 : deluge-1.1.9-1.fc10 (2009-6760)

Deluge 1.1.9 contains updated translations and fixes for a 'move torrent' issue now only happens when the torrent has data downloaded, a folder renaming bug renaming a parent folder into multiple folders, and an issue with adding a remote torrent in the WebUI. This update also includes all upstre...

5.8CVSS5.7AI score0.0201EPSS
SaveExploits1References4
Rows per page
Query Builder