Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 35

Export CSV
CVE-2014-3120

elasticsearch: remote code execution flaw via dynamic scripting

The default configuration in Elasticsearch before 1.2 enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code via the source parameter to _search. NOTE: this only violates the vendor's intended security policy if the user does not run Elasticsearch in its own independent virtual machine.

CVSS 3.1 · 8.1 High EPSS 88.6% KEV · Listed
Vendors
Elastic Redhat Rhel Sam
Products
Elasticsearch Fuse Esb Enterprise Fuse Management Console and 4 more
CVE-2014-0130

rubygem-actionpack: directory traversal issue

Directory traversal vulnerability in actionpack/lib/abstract_controller/base.rb in the implicit-render implementation in Ruby on Rails before 3.2.18, 4.0.x before 4.0.5, and 4.1.x before 4.1.1, when certain route globbing configurations are enabled, allows remote attackers to read arbitrary files via a crafted request.

CVSS 3.1 · 7.5 High EPSS 53.7% KEV · Listed
Vendors
Redhat Rhel Sam Rubyonrails
Products
Cloudforms Managementengine Enterprise Linux Server Rhel Software Collections and 3 more
CVE-2012-2694

rubygem-actionpack: Unsafe query generation (a different flaw than CVE-2012-2660)

actionpack/lib/action_dispatch/http/request.rb in Ruby on Rails before 3.0.14, 3.1.x before 3.1.6, and 3.2.x before 3.2.6 does not properly consider differences in parameter handling between the Active Record component and the Rack interface, which allows remote attackers to bypass intended database-query restrictions and perform NULL checks via a crafted request, as demonstrated by certain "['xyz', nil]" values, a related issue to CVE-2012-2660.

CVSS 2.0 · 4.3 Medium EPSS 3.9% KEV · Not listed
Vendors
Cloudforms Cloudengine Redhat Rhel Sam and 1 more
Products
1 Openshift 1.1 and 2 more
CVE-2012-2695

rubygem-activerecord: SQL injection when processing nested query paramaters (a different flaw than CVE-2012-2661)

The Active Record component in Ruby on Rails before 3.0.14, 3.1.x before 3.1.6, and 3.2.x before 3.2.6 does not properly implement the passing of request data to a where method in an ActiveRecord class, which allows remote attackers to conduct certain SQL injection attacks via nested query parameters that leverage improper handling of nested hashes, a related issue to CVE-2012-2661.

CVSS 2.0 · 7.5 High EPSS 2.9% KEV · Not listed
Vendors
Cloudforms Cloudengine Redhat Rhel Sam and 1 more
Products
1 Openshift 1.1 and 2 more
CVE-2012-3424

rubygem-actionpack: DoS vulnerability in authenticate_or_request_with_http_digest

The decode_credentials method in actionpack/lib/action_controller/metal/http_authentication.rb in Ruby on Rails 3.x before 3.0.16, 3.1.x before 3.1.7, and 3.2.x before 3.2.7 converts Digest Authentication strings to symbols, which allows remote attackers to cause a denial of service by leveraging access to an application that uses a with_http_digest helper method, as demonstrated by the authenticate_or_request_with_http_digest method.

CVSS 2.0 · 5.0 Medium EPSS 1.9% KEV · Not listed
Vendors
Cloudforms Cloudengine Redhat Rhel Sam and 1 more
Products
1 Openshift 1.1 and 2 more
CVE-2012-3463

rubygem-actionpack: potential XSS vulnerability in select_tag prompt

Cross-site scripting (XSS) vulnerability in actionpack/lib/action_view/helpers/form_tag_helper.rb in Ruby on Rails 3.x before 3.0.17, 3.1.x before 3.1.8, and 3.2.x before 3.2.8 allows remote attackers to inject arbitrary web script or HTML via the prompt field to the select_tag helper.

CVSS 2.0 · 4.3 Medium EPSS 1.3% KEV · Not listed
Vendors
Cloudforms Cloudengine Redhat Rhel Sam and 1 more
Products
1 Openshift 1.1 and 2 more
CVE-2012-3464

rubygem-actionpack: potential XSS vulnerability

Cross-site scripting (XSS) vulnerability in activesupport/lib/active_support/core_ext/string/output_safety.rb in Ruby on Rails before 3.0.17, 3.1.x before 3.1.8, and 3.2.x before 3.2.8 might allow remote attackers to inject arbitrary web script or HTML via vectors involving a ' (quote) character.

CVSS 2.0 · 4.3 Medium EPSS 2.6% KEV · Not listed
Vendors
Cloudforms Cloudengine Redhat Rhel Sam and 1 more
Products
1 Openshift 1.1 and 2 more
CVE-2012-3465

rubygem-actionpack: XSS Vulnerability in strip_tags

Cross-site scripting (XSS) vulnerability in actionpack/lib/action_view/helpers/sanitize_helper.rb in the strip_tags helper in Ruby on Rails before 3.0.17, 3.1.x before 3.1.8, and 3.2.x before 3.2.8 allows remote attackers to inject arbitrary web script or HTML via malformed HTML markup.

CVSS 2.0 · 4.3 Medium EPSS 2.0% KEV · Not listed
Vendors
Cloudforms Cloudengine Redhat Rhel Sam and 1 more
Products
1 Openshift 1.1 and 2 more
CVE-2012-3503

Katello: Application.config.secret_token is not generated properly

The installation script in Katello 1.0 and earlier does not properly generate the Application.config.secret_token value, which causes each default installation to have the same secret token, and allows remote attackers to authenticate to the CloudForms System Engine web interface as an arbitrary user by creating a cookie using the default secret_token.

CVSS 3.1 · 9.8 Critical EPSS 3.0% KEV · Not listed
Vendors
Cloudforms Systemengine Redhat Rhel Sam and 1 more
Products
1 Enterprise Linux Server 1.1 and 1 more
CVE-2012-5561

Katello: /etc/katello/secure/passphrase is world readable

script/katello-generate-passphrase in Katello 1.1 uses world-readable permissions for /etc/katello/secure/passphrase, which allows local users to obtain the passphrase by reading the file.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Cloudforms Systemengine Katello Rhel Sam
Products
1 Katello 1.2
CVE-2012-5603

Katello: lack of authorization in proxies_controller.rb

proxies_controller.rb in Katello in Red Hat CloudForms before 1.1 does not properly check permissions, which allows remote authenticated users to read consumer certificates or change arbitrary users' settings via unspecified vectors related to the "consumer UUID" of a system.

CVSS 2.0 · 5.5 Medium EPSS 1.0% KEV · Not listed
Vendors
Cloudforms Tools Redhat Rhel Sam
Products
1 Cloudforms 1.2
CVE-2012-6109

rubygem-rack: parsing Content-Disposition header DoS

lib/rack/multipart.rb in Rack before 1.1.4, 1.2.x before 1.2.6, 1.3.x before 1.3.7, and 1.4.x before 1.4.2 uses an incorrect regular expression, which allows remote attackers to cause a denial of service (infinite loop) via a crafted Content-Disposion header.

CVSS 2.0 · 4.3 Medium EPSS 2.7% KEV · Not listed
Vendors
Cloudforms Cloudengine Rack Project Rhel Sam
Products
1 Rack 1.2
CVE-2012-6116

Candlepin: bootstrap RPM deploys CA certificate file with mode 666

modules/certs/manifests/config.pp in katello-configure before 1.3.3.pulpv2 in Katello uses weak permissions (666) for the Candlepin bootstrap RPM, which allows local users to modify the Candlepin CA certificate by writing to this file.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Cloudforms Systemengine Katello Rhel Sam
Products
1 Katello Katello-configure and 1 more
CVE-2012-6496

rubygem-activerecord: find_by_* SQL Injection

SQL injection vulnerability in the Active Record component in Ruby on Rails before 3.0.18, 3.1.x before 3.1.9, and 3.2.x before 3.2.10 allows remote attackers to execute arbitrary SQL commands via a crafted request that leverages incorrect behavior of dynamic finders in applications that can use unexpected data types in certain find_by_ method calls.

CVSS 2.0 · 7.5 High EPSS 4.6% KEV · Not listed
Vendors
Cloudforms Cloudengine Redhat Rhel Sam and 1 more
Products
1 Openshift 1.1 and 2 more
CVE-2013-0162

rubygem-ruby_parser: incorrect temporary file usage

The diff_pp function in lib/gauntlet_rubyparser.rb in the ruby_parser gem 3.1.1 and earlier for Ruby allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Cloudforms Cloudengine Redhat Rhel Sam and 1 more
Products
1 Openshift 1.2 and 1 more
CVE-2013-0155

rubygem-activerecord: Unsafe Query Generation Risk in Ruby on Rails

Ruby on Rails 3.0.x before 3.0.19, 3.1.x before 3.1.10, and 3.2.x before 3.2.11 does not properly consider differences in parameter handling between the Active Record component and the JSON implementation, which allows remote attackers to bypass intended database-query restrictions and perform NULL checks or trigger missing WHERE clauses via a crafted request, as demonstrated by certain "[nil]" values, a related issue to CVE-2012-2660 and CVE-2012-2694.

CVSS 2.0 · 6.4 Medium EPSS 8.2% KEV · Not listed
Vendors
Cloudforms Cloudengine Debian Redhat and 2 more
Products
1 Debian Linux Openshift and 3 more
CVE-2012-2660

rubygem-actionpack: Unsafe query generation

actionpack/lib/action_dispatch/http/request.rb in Ruby on Rails before 3.0.13, 3.1.x before 3.1.5, and 3.2.x before 3.2.4 does not properly consider differences in parameter handling between the Active Record component and the Rack interface, which allows remote attackers to bypass intended database-query restrictions and perform NULL checks via a crafted request, as demonstrated by certain "[nil]" values, a related issue to CVE-2012-2694.

CVSS 2.0 · 6.4 Medium EPSS 4.5% KEV · Not listed
Vendors
Cloudforms Cloudengine Redhat Rhel Sam and 1 more
Products
1 Openshift 1.1 and 2 more
CVE-2013-0183

rubygem-rack: receiving excessively long lines triggers out-of-memory error

multipart/parser.rb in Rack 1.3.x before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to cause a denial of service (memory consumption and out-of-memory error) via a long string in a Multipart HTTP packet.

CVSS 2.0 · 5.0 Medium EPSS 3.8% KEV · Not listed
Vendors
Cloudforms Cloudengine Rack Project Rhel Sam
Products
1 Rack 1.2
CVE-2013-0184

rubygem-rack: Rack::Auth:: AbstractRequest DoS

Unspecified vulnerability in Rack::Auth::AbstractRequest in Rack 1.1.x before 1.1.5, 1.2.x before 1.2.7, 1.3.x before 1.3.9, and 1.4.x before 1.4.4 allows remote attackers to cause a denial of service via unknown vectors related to "symbolized arbitrary strings."

CVSS 2.0 · 4.3 Medium EPSS 2.4% KEV · Not listed
Vendors
Cloudforms Cloudengine Rack Project Rhel Sam
Products
1 Rack 1.2