Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:11217
HistoryJan 15, 2019 - 8:58 a.m.

Multiple Cross-site Scripting (XSS) Vulnerabilities

2019-01-1508:58:42
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
14

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

JSON

Multiple cross-site scripting (XSS) vulnerabilities in actionpack/lib/action_view/helpers/number_helper.rb in Ruby on Rails before 3.2.17, 4.0.x before 4.0.3, and 4.1.x before 4.1.0.beta2 allow remote attackers to inject arbitrary web script or HTML via the (1) format, (2) negative_format, or (3) units parameter to the (a) number_to_currency, (b) number_to_percentage, or © number_to_human helper

Related

osv 2
github 1
ubuntucve 1
cve 1
debiancve 1
prion 1
rubygems 1
nessus 5
redhat 2
centos 1
openvas 12
fedora 6
mageia 1
securityvulns 2
debian 1
veracode 1
osv
osv
Rails vulnerable to Cross-site Scripting
2017-10-24 18:33:36
ruby-actionpack-3.2 - security update
2014-05-16 00:00:00
github
github
Rails vulnerable to Cross-site Scripting
2017-10-24 18:33:36
ubuntucve
ubuntucve
CVE-2014-0081
2014-02-20 00:00:00
cve
cve
CVE-2014-0081
2014-02-20 15:27:00
debiancve
debiancve
CVE-2014-0081
2014-02-20 15:27:00
prion
prion
Cross site scripting
2014-02-20 15:27:00
rubygems
rubygems
CVE-2014-0081 rubygem-actionpack: number_to_currency, number_to_percentage and number_to_human XSS vulnerability
2014-02-17 20:00:00
nessus
nessus
CentOS 6 : ruby193-rubygem-actionpack (CESA-2014:0306)
2014-03-18 00:00:00
openSUSE Security Update : rubygem-actionpack-3_2 (openSUSE-SU-2014:0295-1)
2014-06-13 00:00:00
Fedora 20 : rubygem-actionpack-4.0.0-3.fc20 / rubygem-activerecord-4.0.0-2.fc20 (2014-3169)
2014-03-11 00:00:00
redhat
redhat
(RHSA-2014:0306) Moderate: ruby193-rubygem-actionpack security update
2014-03-17 00:00:00
(RHSA-2014:0215) Critical: cfme security, bug fix, and enhancement update
2014-03-11 00:00:00
centos
centos
ruby193 security update
2014-03-17 21:55:16
openvas
openvas
Fedora Update for rubygem-activerecord FEDORA-2014-3169
2014-03-12 00:00:00
Fedora Update for rubygem-activerecord FEDORA-2014-3169
2014-03-12 00:00:00
Mageia: Security Advisory (MGASA-2014-0191)
2022-01-28 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: rubygem-activerecord-4.0.0-2.fc20
2014-03-11 04:00:14
[SECURITY] Fedora 20 Update: rubygem-actionpack-4.0.0-3.fc20
2014-03-11 04:00:14
[SECURITY] Fedora 20 Update: rubygem-actionpack-4.0.0-4.fc20
2014-05-23 18:56:34
mageia
mageia
Updated ruby-rails and associated packages fix multiple vulnerabilities
2014-04-24 23:02:23
securityvulns
securityvulns
[SECURITY] [DSA 2929-1] ruby-actionpack-3.2 security update
2014-06-14 00:00:00
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2014-06-14 00:00:00
debian
debian
[SECURITY] [DSA 2929-1] ruby-actionpack-3.2 security update
2014-05-16 08:15:07
veracode
veracode
Arbitrary Code Execution
2019-05-02 05:01:21

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

JSON
Related for VERACODE:11217
osv2github1ubuntucve1cve1debiancve1prion1rubygems1nessus5redhat2centos1openvas12fedora6mageia1securityvulns2debian1veracode1