Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

rubyonrails rails 4.1.3 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2015-3227
The (1) jdom.rb and (2) rexml.rb components in Active Support in Ruby on Rails prior to 4.1.11 and 4.2.x prior to 4.2.2, when JDOM or REXML is enabled, allow remote malicious users to cause a denial of service (SystemStackError) via a large XML document depth.
Opensuse Opensuse 13.2Opensuse Opensuse 13.1Rubyonrails Rails 4.1.6Rubyonrails Rails 4.1.5Rubyonrails Rails 4.1.4Rubyonrails Rails 4.1.3Rubyonrails Rails 4.1.8Rubyonrails Rails 4.1.7Rubyonrails Rails 4.2.0Rubyonrails Rails 4.2.1Rubyonrails Rails 4.1.2Rubyonrails Rails 4.1.1Rubyonrails Rails 4.1.0
NA
CVE-2015-3226
Cross-site scripting (XSS) vulnerability in json/encoding.rb in Active Support in Ruby on Rails 3.x and 4.1.x prior to 4.1.11 and 4.2.x prior to 4.2.2 allows remote malicious users to inject arbitrary web script or HTML via a crafted Hash that is mishandled during JSON encoding.
Rubyonrails Rails 4.1.7Rubyonrails Rails 4.1.6Rubyonrails Rails 3.2.17Rubyonrails Rails 3.2.16Rubyonrails Rails 4.2.1Rubyonrails Rails 4.1.3Rubyonrails Rails 4.1.2Rubyonrails Rails 3.2.12Rubyonrails Rails 3.2.11Rubyonrails Rails 3.2.8Rubyonrails Rails 3.2.7Rubyonrails Rails 3.2.0Rubyonrails Rails 3.1.0Rubyonrails Rails 3.2.4Rubyonrails Rails 3.2.3Rubyonrails Rails 4.1.5Rubyonrails Rails 4.1.4Rubyonrails Rails 3.2.15Rubyonrails Ruby On Rails 3.2.14Rubyonrails Rails 3.2.13Rubyonrails Rails 3.2.6Rubyonrails Rails 3.2.5
5.3
CVSSv3
CVE-2016-2097
Directory traversal vulnerability in Action View in Ruby on Rails prior to 3.2.22.2 and 4.x prior to 4.1.14.2 allows remote malicious users to read arbitrary files by leveraging an application's unrestricted use of the render method and providing a .. (dot dot) in a pathname...
Rubyonrails Rails 4.0.4Rubyonrails Rails 4.1.9Rubyonrails Rails 4.1.4Rubyonrails Rails 4.1.3Rubyonrails Rails 4.1.12Rubyonrails Rails 4.1.10Rubyonrails Rails 4.1.0Rubyonrails Rails 4.0.6Rubyonrails Rails 4.0.5Rubyonrails Rails 4.0.1Rubyonrails Ruby On RailsRubyonrails Rails 4.1.6Rubyonrails Rails 4.1.5Rubyonrails Rails 4.1.14Rubyonrails Rails 4.1.13Rubyonrails Rails 4.0.10Rubyonrails Rails 4.0.0Rubyonrails Rails 4.1.7Rubyonrails Rails 4.1.2Rubyonrails Rails 4.1.1Rubyonrails Rails 4.0.8Rubyonrails Rails 4.0.7
7.3
CVSSv3
CVE-2016-2098
Action Pack in Ruby on Rails prior to 3.2.22.2, 4.x prior to 4.1.14.2, and 4.2.x prior to 4.2.5.2 allows remote malicious users to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method.
Debian Debian Linux 8.0Rubyonrails Rails 4.2.4Rubyonrails Rails 4.2.3Rubyonrails Rails 4.2.1Rubyonrails Rails 4.2.0Rubyonrails Rails 4.0.0Rubyonrails Rails 4.1.9Rubyonrails Rails 4.1.3Rubyonrails Rails 4.1.2Rubyonrails Rails 4.1.12Rubyonrails Rails 4.1.10Rubyonrails Rails 4.1.0Rubyonrails Rails 4.0.6Rubyonrails Rails 4.0.5Rubyonrails Rails 4.0.1Rubyonrails Ruby On RailsRubyonrails Rails 4.2.5Rubyonrails Rails 4.1.5Rubyonrails Rails 4.1.4Rubyonrails Rails 4.1.14Rubyonrails Rails 4.1.13Rubyonrails Rails 4.0.10
NA
CVE-2014-7818
Directory traversal vulnerability in actionpack/lib/action_dispatch/middleware/static.rb in Action Pack in Ruby on Rails 3.x prior to 3.2.20, 4.0.x prior to 4.0.11, 4.1.x prior to 4.1.7, and 4.2.x prior to 4.2.0.beta3, when serve_static_assets is enabled, allows remote malicious ...
Rubyonrails Rails 3.0.0Rubyonrails Rails 3.0.10Rubyonrails Rails 3.0.16Rubyonrails Rails 3.0.17Rubyonrails Rails 3.0.4Rubyonrails Rails 3.0.7Rubyonrails Rails 3.0.9Rubyonrails Rails 3.1.0Rubyonrails Rails 3.1.1Rubyonrails Rails 3.1.4Rubyonrails Rails 3.1.5Rubyonrails Rails 3.2.0Rubyonrails Rails 3.0.1Rubyonrails Rails 3.0.13Rubyonrails Rails 3.0.14Rubyonrails Rails 3.0.3Rubyonrails Ruby On Rails 3.0.4Rubyonrails Rails 3.0.6Rubyonrails Rails 3.0.8Rubyonrails Rails 3.2.1Rubyonrails Rails 3.2.16Rubyonrails Rails 3.2.17
NA
CVE-2014-7829
Directory traversal vulnerability in actionpack/lib/action_dispatch/middleware/static.rb in Action Pack in Ruby on Rails 3.x prior to 3.2.21, 4.0.x prior to 4.0.12, 4.1.x prior to 4.1.8, and 4.2.x prior to 4.2.0.beta4, when serve_static_assets is enabled, allows remote malicious ...
Opensuse Opensuse 12.3Opensuse Opensuse 13.1Opensuse Opensuse 13.2Rubyonrails Rails 3.0.0Rubyonrails Rails 3.0.1Rubyonrails Rails 3.0.10Rubyonrails Rails 3.0.14Rubyonrails Rails 3.0.16Rubyonrails Ruby On Rails 3.0.4Rubyonrails Rails 3.0.4Rubyonrails Rails 3.0.7Rubyonrails Rails 3.0.9Rubyonrails Rails 3.1.0Rubyonrails Rails 3.1.1Rubyonrails Rails 3.1.4Rubyonrails Rails 3.1.5Rubyonrails Rails 3.2.0Rubyonrails Rails 3.2.15Rubyonrails Rails 3.2.16Rubyonrails Rails 3.2.3Rubyonrails Rails 4.0.0Rubyonrails Rails 4.0.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-30924CVE-2024-3400overflowCVE-2024-23528CVE-2024-21338CVE-2024-3818CVE-2024-23535NULL pointer dereferenceelevation of privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook