Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

rubyonrails rails 3.2.16 vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2015-3226
Cross-site scripting (XSS) vulnerability in json/encoding.rb in Active Support in Ruby on Rails 3.x and 4.1.x prior to 4.1.11 and 4.2.x prior to 4.2.2 allows remote malicious users to inject arbitrary web script or HTML via a crafted Hash that is mishandled during JSON encoding.
Rubyonrails Rails 4.1.7Rubyonrails Rails 4.1.6Rubyonrails Rails 3.2.17Rubyonrails Rails 3.2.16Rubyonrails Rails 4.2.1Rubyonrails Rails 4.1.3Rubyonrails Rails 4.1.2Rubyonrails Rails 3.2.12Rubyonrails Rails 3.2.11Rubyonrails Rails 3.2.8Rubyonrails Rails 3.2.7Rubyonrails Rails 3.2.0Rubyonrails Rails 3.1.0Rubyonrails Rails 3.2.4Rubyonrails Rails 3.2.3Rubyonrails Rails 4.1.5Rubyonrails Rails 4.1.4Rubyonrails Rails 3.2.15Rubyonrails Ruby On Rails 3.2.14Rubyonrails Rails 3.2.13Rubyonrails Rails 3.2.6Rubyonrails Rails 3.2.5
4.3
CVSSv2
CVE-2014-7818
Directory traversal vulnerability in actionpack/lib/action_dispatch/middleware/static.rb in Action Pack in Ruby on Rails 3.x prior to 3.2.20, 4.0.x prior to 4.0.11, 4.1.x prior to 4.1.7, and 4.2.x prior to 4.2.0.beta3, when serve_static_assets is enabled, allows remote malicious ...
Rubyonrails Rails 3.0.0Rubyonrails Rails 3.0.10Rubyonrails Rails 3.0.16Rubyonrails Rails 3.0.17Rubyonrails Rails 3.0.4Rubyonrails Rails 3.0.7Rubyonrails Rails 3.0.9Rubyonrails Rails 3.1.0Rubyonrails Rails 3.1.1Rubyonrails Rails 3.1.4Rubyonrails Rails 3.1.5Rubyonrails Rails 3.2.0Rubyonrails Rails 3.0.1Rubyonrails Rails 3.0.13Rubyonrails Rails 3.0.14Rubyonrails Rails 3.0.3Rubyonrails Ruby On Rails 3.0.4Rubyonrails Rails 3.0.6Rubyonrails Rails 3.0.8Rubyonrails Rails 3.2.1Rubyonrails Rails 3.2.16Rubyonrails Rails 3.2.17
5
CVSSv2
CVE-2014-7829
Directory traversal vulnerability in actionpack/lib/action_dispatch/middleware/static.rb in Action Pack in Ruby on Rails 3.x prior to 3.2.21, 4.0.x prior to 4.0.12, 4.1.x prior to 4.1.8, and 4.2.x prior to 4.2.0.beta4, when serve_static_assets is enabled, allows remote malicious ...
Opensuse Opensuse 12.3Opensuse Opensuse 13.1Opensuse Opensuse 13.2Rubyonrails Rails 3.0.0Rubyonrails Rails 3.0.1Rubyonrails Rails 3.0.10Rubyonrails Rails 3.0.14Rubyonrails Rails 3.0.16Rubyonrails Ruby On Rails 3.0.4Rubyonrails Rails 3.0.4Rubyonrails Rails 3.0.7Rubyonrails Rails 3.0.9Rubyonrails Rails 3.1.0Rubyonrails Rails 3.1.1Rubyonrails Rails 3.1.4Rubyonrails Rails 3.1.5Rubyonrails Rails 3.2.0Rubyonrails Rails 3.2.15Rubyonrails Rails 3.2.16Rubyonrails Rails 3.2.3Rubyonrails Rails 4.0.0Rubyonrails Rails 4.0.1
4.3
CVSSv2
CVE-2013-4389
Multiple format string vulnerabilities in log_subscriber.rb files in the log subscriber component in Action Mailer in Ruby on Rails 3.x prior to 3.2.15 allow remote malicious users to cause a denial of service via a crafted e-mail address that is improperly handled during constru...
Rubyonrails RailsOpensuse Opensuse 12.3Opensuse Opensuse 12.2Opensuse Opensuse 13.1Debian Debian Linux 7.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook