Lucene search
SuseSUSE-SU-2012:1012-1HistoryAug 21, 2012 - 7:08 p.m.
Security update for rubygem-actionpack (important)
2012-08-2119:08:38
lists.opensuse.org
17
0.294 Low
EPSS
Percentile
96.4%
This update to rubygem-actionpack fixes two unsafe query
generations with "IS NULL" in the WHERE clause.
(CVE-2012-2660
<<a href=βhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2660β>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2660</a>
> , CVE-2012-2694
<<a href=βhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2694β>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2694</a>
> )
Related
openvas
openvas
FreeBSD Ports: rubygem-activemodel
2012-08-10 00:00:00
FreeBSD Ports: rubygem-activemodel
2012-08-10 00:00:00
suse
suse
Security update for rubygem-activerecord (important)
2012-08-21 20:08:28
rubygem-actionpack/activerecord-2_3 (important)
2012-08-09 18:08:34
Security update for rubygem-actionpack (important)
2012-08-21 20:08:29
nessus
nessus
fedora
fedora
[SECURITY] Fedora 17 Update: rubygem-activerecord-3.0.11-3.fc17
2012-06-30 08:27:28
[SECURITY] Fedora 16 Update: rubygem-activerecord-3.0.10-3.fc16
2012-06-30 08:25:19
[SECURITY] Fedora 17 Update: rubygem-actionpack-3.0.11-5.fc17
2012-06-30 08:25:56
github
github
activerecord vulnerable to SQL Injection
2017-10-24 18:33:38
Active Record vulnerable to SQL Injection via nested query parameters
2017-10-24 18:33:38
Action Pack contains database-query restrictions bypass
2017-10-24 18:33:38
freebsd
freebsd
rubygem-activerecord -- multiple vulnerabilities
2012-05-31 00:00:00
Rails 4 -- Unsafe Query Generation Risk in Active Record
2016-08-11 00:00:00
prion
prion
ubuntucve
ubuntucve
cve
cve
osv
osv
activerecord vulnerable to SQL Injection
2017-10-24 18:33:38
Active Record vulnerable to SQL Injection via nested query parameters
2017-10-24 18:33:38
Action Pack contains database-query restrictions bypass
2017-10-24 18:33:38
debiancve
debiancve
gitlab
gitlab
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
2017-10-24 00:00:00
Moderate severity vulnerability that affects actionpack
2017-10-24 00:00:00
Moderate severity vulnerability that affects actionpack
2017-10-24 00:00:00
veracode
veracode
Database-query Authentication Bypass
2019-01-15 08:53:36
seebug
seebug
Ruby on Railsε΅ε₯εζ°SQL注ε
₯ζΌζ΄
2012-06-16 00:00:00
SQL Injection Vulnerability in Ruby on Rails
2012-06-01 00:00:00
rubygems
rubygems
CVE-2012-2661 rubygem-activerecord: SQL injection when processing nested query paramaters
2012-05-30 20:00:00
CVE-2012-2660 rubygem-actionpack: Unsafe query generation
2012-05-30 20:00:00
redhat
redhat
(RHSA-2013:0154) Critical: Ruby on Rails security update
2013-01-10 20:37:00
(RHSA-2013:0582) Moderate: Red Hat OpenShift Enterprise 1.1.1 update
2013-02-28 00:00:00
hackerone
hackerone
silentrobots
silentrobots
Searching Through Git Commits
2014-10-06 04:00:00
Searching Through Git Commits
2014-10-06 04:00:00
ibm
ibm
checkpoint_advisories
checkpoint_advisories
Ruby on Rails Hash SQL Injection (CVE-2012-2695)
2012-10-14 00:00:00