Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

rack project rack 1.3.5 vulnerabilities and exploits

(subscribe to this query)
5.1
CVSSv2
CVE-2013-0263
Rack::Session::Cookie in Rack 1.5.x prior to 1.5.2, 1.4.x prior to 1.4.5, 1.3.x prior to 1.3.10, 1.2.x prior to 1.2.8, and 1.1.x prior to 1.1.6 allows remote malicious users to guess the session cookie, gain privileges, and execute arbitrary code via a timing attack involving an ...
Rack Project Rack 1.5.1Rack Project Rack 1.5.0Rack Project Rack 1.4.4Rack Project Rack 1.4.2Rack Project Rack 1.4.3Rack Project Rack 1.4.0Rack Project Rack 1.4.1Rack Project Rack 1.3.1Rack Project Rack 1.3.7Rack Project Rack 1.3.8Rack Project Rack 1.3.2Rack Project Rack 1.3.5Rack Project Rack 1.3.9Rack Project Rack 1.3.6Rack Project Rack 1.3.0Rack Project Rack 1.3.4Rack Project Rack 1.3.3Rack Project Rack 1.2.6Rack Project Rack 1.2.3Rack Project Rack 1.2.0Rack Project Rack 1.2.7Rack Project Rack 1.2.1
5
CVSSv2
CVE-2013-0183
multipart/parser.rb in Rack 1.3.x prior to 1.3.8 and 1.4.x prior to 1.4.3 allows remote malicious users to cause a denial of service (memory consumption and out-of-memory error) via a long string in a Multipart HTTP packet.
Rack Project Rack 1.3.1Rack Project Rack 1.3.7Rack Project Rack 1.3.2Rack Project Rack 1.3.5Rack Project Rack 1.3.6Rack Project Rack 1.3.0Rack Project Rack 1.3.4Rack Project Rack 1.3.3Rack Project Rack 1.4.2Rack Project Rack 1.4.0Rack Project Rack 1.4.1
5
CVSSv2
CVE-2011-5036
Rack prior to 1.1.3, 1.2.x prior to 1.2.5, and 1.3.x prior to 1.3.6 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote malicious users to cause a denial of service (CPU consumption) by sending many ...
Rack Project Rack 1.3.0Rack Project Rack 1.3.1Rack Project Rack 1.2.0Rack Project Rack 1.2.1Rack Project Rack 1.3.4Rack Project Rack 1.3.5Rack Project Rack 1.2.2Rack Project Rack 1.2.3Rack Project Rack 1.2.4Rack Project RackRack Project Rack 1.3.2Rack Project Rack 1.3.3
4.3
CVSSv2
CVE-2013-0184
Unspecified vulnerability in Rack::Auth::AbstractRequest in Rack 1.1.x prior to 1.1.5, 1.2.x prior to 1.2.7, 1.3.x prior to 1.3.9, and 1.4.x prior to 1.4.4 allows remote malicious users to cause a denial of service via unknown vectors related to "symbolized arbitrary strings...
Rack Project Rack 1.1.2Rack Project Rack 1.1.0Rack Project Rack 1.1.4Rack Project Rack 1.1.3Rack Project Rack 1.2.6Rack Project Rack 1.2.3Rack Project Rack 1.2.0Rack Project Rack 1.2.1Rack Project Rack 1.2.4Rack Project Rack 1.2.2Rack Project Rack 1.3.1Rack Project Rack 1.3.7Rack Project Rack 1.3.8Rack Project Rack 1.3.2Rack Project Rack 1.3.5Rack Project Rack 1.3.6Rack Project Rack 1.3.0Rack Project Rack 1.3.4Rack Project Rack 1.3.3Rack Project Rack 1.4.2Rack Project Rack 1.4.3Rack Project Rack 1.4.0
4.3
CVSSv2
CVE-2012-6109
lib/rack/multipart.rb in Rack prior to 1.1.4, 1.2.x prior to 1.2.6, 1.3.x prior to 1.3.7, and 1.4.x prior to 1.4.2 uses an incorrect regular expression, which allows remote malicious users to cause a denial of service (infinite loop) via a crafted Content-Disposion header.
Rack Project Rack 0.4Rack Project Rack 1.1.2Rack Project Rack 0.2Rack Project Rack 0.1Rack Project Rack 1.1.0Rack Project Rack 0.9Rack Project Rack 1.0.1Rack Project RackRack Project Rack 0.3Rack Project Rack 0.9.1Rack Project Rack 1.0.0Rack Project Rack 1.2.3Rack Project Rack 1.2.0Rack Project Rack 1.2.1Rack Project Rack 1.2.4Rack Project Rack 1.2.2Rack Project Rack 1.3.1Rack Project Rack 1.3.2Rack Project Rack 1.3.5Rack Project Rack 1.3.6Rack Project Rack 1.3.0Rack Project Rack 1.3.4
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook