Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 35

Export CSV
CVE-2013-0256

rubygem-rdoc: Cross-site scripting in the documentation created by Darkfish Rdoc HTML generator / template

darkfish.js in RDoc 2.3.0 through 3.12 and 4.x before 4.0.0.preview2.1, as used in Ruby, does not properly generate documents, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted URL.

CVSS 2.0 · 4.3 Medium EPSS 3.0% KEV · Not listed
Vendors
Canonical Cloudforms Cloudengine Redhat and 2 more
Products
Ubuntu Linux 1 Openshift and 3 more
CVE-2013-0263

rubygem-rack: Timing attack in cookie sessions

Rack::Session::Cookie in Rack 1.5.x before 1.5.2, 1.4.x before 1.4.5, 1.3.x before 1.3.10, 1.2.x before 1.2.8, and 1.1.x before 1.1.6 allows remote attackers to guess the session cookie, gain privileges, and execute arbitrary code via a timing attack involving an HMAC comparison function that does not run in constant time.

CVSS 2.0 · 5.1 Medium EPSS 5.4% KEV · Not listed
Vendors
Rack Project Redhat Rhel Sam
Products
Rack Openshift 1.2
CVE-2013-0269

rubygem-json: Denial of Service and SQL Injection

The JSON gem before 1.5.5, 1.6.x before 1.6.8, and 1.7.x before 1.7.7 for Ruby allows remote attackers to cause a denial of service (resource consumption) or bypass the mass assignment protection mechanism via a crafted JSON document that triggers the creation of arbitrary Ruby symbols or certain internal objects, as demonstrated by conducting a SQL injection attack against Ruby on Rails, aka "Unsafe Object Creation Vulnerability."

CVSS 2.0 · 7.5 High EPSS 13.9% KEV · Not listed
Vendors
Redhat Rhel Sam Rubygems
Products
Fuse Esb Enterprise Jboss Enterprise Soa Platform Jboss Fuse and 3 more
CVE-2013-0276

rubygem-activerecord/rubygem-activemodel: circumvention of attr_protected

ActiveRecord in Ruby on Rails before 2.3.17, 3.1.x before 3.1.11, and 3.2.x before 3.2.12 allows remote attackers to bypass the attr_protected protection mechanism and modify protected model attributes via a crafted request.

CVSS 2.0 · 4.3 Medium EPSS 3.0% KEV · Not listed
Vendors
Redhat Rhel Sam Rubyonrails
Products
Openshift 1.2 Rails
CVE-2013-0333

rubygem-activesupport: json to yaml parsing

lib/active_support/json/backends/yaml.rb in Ruby on Rails 2.3.x before 2.3.16 and 3.0.x before 3.0.20 does not properly convert JSON data to YAML data for processing by a YAML parser, which allows remote attackers to execute arbitrary code, conduct SQL injection attacks, or bypass authentication via crafted data that triggers unsafe decoding, a different vulnerability than CVE-2013-0156.

CVSS 2.0 · 7.5 High EPSS 95.6% KEV · Not listed
Vendors
Cloudforms Cloudengine Redhat Rhel Sam and 1 more
Products
1 Openshift 1.1 and 2 more
CVE-2013-1823

Katello: Notifications page Username XSS

Cross-site scripting (XSS) vulnerability in the Notifications form in Red Hat Subscription Asset Manager before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the username field.

CVSS 2.0 · 4.3 Medium EPSS 1.9% KEV · Not listed
Vendors
Redhat Rhel Sam
Products
Subscription Asset Manager 1.2
CVE-2013-1854

rubygem-activerecord: attribute_dos Symbol DoS vulnerability

The Active Record component in Ruby on Rails 2.3.x before 2.3.18, 3.1.x before 3.1.12, and 3.2.x before 3.2.13 processes certain queries by converting hash keys to symbols, which allows remote attackers to cause a denial of service via crafted input to a where method.

CVSS 2.0 · 5.0 Medium EPSS 3.5% KEV · Not listed
Vendors
Redhat Rhel Sam Rubyonrails
Products
Enterprise Linux Openshift 1.4 and 2 more
CVE-2013-1855

rubygem-actionpack: css_sanitization: XSS vulnerability in sanitize_css

The sanitize_css method in lib/action_controller/vendor/html-scanner/html/sanitizer.rb in the Action Pack component in Ruby on Rails before 2.3.18, 3.0.x and 3.1.x before 3.1.12, and 3.2.x before 3.2.13 does not properly handle \n (newline) characters, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via crafted Cascading Style Sheets (CSS) token sequences.

CVSS 2.0 · 4.3 Medium EPSS 2.6% KEV · Not listed
Vendors
Redhat Rhel Sam Rubyonrails
Products
Enterprise Linux Openshift 1.4 and 2 more
CVE-2013-1857

rubygem-actionpack: sanitize_protocol: XSS Vulnerability in the helper of Ruby on Rails

The sanitize helper in lib/action_controller/vendor/html-scanner/html/sanitizer.rb in the Action Pack component in Ruby on Rails before 2.3.18, 3.0.x and 3.1.x before 3.1.12, and 3.2.x before 3.2.13 does not properly handle encoded : (colon) characters in URLs, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted scheme name, as demonstrated by including a : sequence.

CVSS 2.0 · 4.3 Medium EPSS 1.9% KEV · Not listed
Vendors
Redhat Rhel Sam Rubyonrails
Products
Enterprise Linux Openshift 1.4 and 2 more
CVE-2013-4491

rubygem-actionpack: i18n missing translation XSS

Cross-site scripting (XSS) vulnerability in actionpack/lib/action_view/helpers/translation_helper.rb in the internationalization component in Ruby on Rails 3.x before 3.2.16 and 4.x before 4.0.2 allows remote attackers to inject arbitrary web script or HTML via a crafted string that triggers generation of a fallback string by the i18n gem.

CVSS 2.0 · 4.3 Medium EPSS 2.2% KEV · Not listed
Vendors
Redhat Rhel Sam Rubyonrails
Products
Openstack Rhel Software Collections 1.4 and 2 more
CVE-2013-6414

rubygem-actionpack: Action View DoS

actionpack/lib/action_view/lookup_context.rb in Action View in Ruby on Rails 3.x before 3.2.16 and 4.x before 4.0.2 allows remote attackers to cause a denial of service (memory consumption) via a header containing an invalid MIME type that leads to excessive caching.

CVSS 2.0 · 5.0 Medium EPSS 20.7% KEV · Not listed
Vendors
Redhat Rhel Sam Rubyonrails
Products
Openstack Rhel Software Collections 1.4 and 2 more
CVE-2013-6415

rubygem-actionpack: number_to_currency XSS

Cross-site scripting (XSS) vulnerability in the number_to_currency helper in actionpack/lib/action_view/helpers/number_helper.rb in Ruby on Rails before 3.2.16 and 4.x before 4.0.2 allows remote attackers to inject arbitrary web script or HTML via the unit parameter.

CVSS 2.0 · 4.3 Medium EPSS 3.2% KEV · Not listed
Vendors
Redhat Rhel Sam Rubyonrails
Products
Openstack Rhel Software Collections 1.4 and 2 more
CVE-2013-6439

candlepin: insecure authentication enabled by default

Candlepin in Red Hat Subscription Asset Manager 1.0 through 1.3 uses a weak authentication scheme when the configuration file does not specify a scheme, which has unspecified impact and attack vectors.

CVSS 2.0 · 9.3 Critical EPSS 1.6% KEV · Not listed
Vendors
Redhat Rhel Sam
Products
Subscription Asset Manager 1.3
CVE-2013-0156

rubygem-activesupport: Multiple vulnerabilities in parameter parsing in ActionPack

active_support/core_ext/hash/conversions.rb in Ruby on Rails before 2.3.15, 3.0.x before 3.0.19, 3.1.x before 3.1.10, and 3.2.x before 3.2.11 does not properly restrict casts of string values, which allows remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service (memory and CPU consumption) involving nested XML entity references, by leveraging Action Pack support for (1) YAML type conversion or (2) Symbol type conversion.

CVSS 2.0 · 7.5 High EPSS 99.0% KEV · Not listed
Vendors
Cloudforms Cloudengine Debian Redhat and 2 more
Products
1 Debian Linux Openshift and 3 more
CVE-2012-2661

rubygem-activerecord: SQL injection when processing nested query paramaters

The Active Record component in Ruby on Rails 3.0.x before 3.0.13, 3.1.x before 3.1.5, and 3.2.x before 3.2.4 does not properly implement the passing of request data to a where method in an ActiveRecord class, which allows remote attackers to conduct certain SQL injection attacks via nested query parameters that leverage unintended recursion, a related issue to CVE-2012-2695.

CVSS 2.0 · 5.0 Medium EPSS 4.0% KEV · Not listed
Vendors
Cloudforms Cloudengine Redhat Rhel Sam and 1 more
Products
1 Openshift 1.1 and 2 more