Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

mass assignment vulnerabilities and exploits

(subscribe to this query)

NA
CVE-2012-2054
Redmine before 1.3.2 does not properly restrict the use of a hash to provide values for a model's attributes, which allows remote attackers to set attributes in the (1) Comment, (2) Document, (3) IssueCategory, (4) MembersController, (5) Message, (6) News, (7) TimeEntry,...
Redmine Redmine 0.6.0Redmine Redmine 0.5.1Redmine Redmine 0.9.3Redmine Redmine 0.7.0Redmine Redmine 0.7.1Redmine Redmine 0.8.0Redmine Redmine 1.1.1Redmine Redmine 0.8.4Redmine Redmine 0.3.0Redmine Redmine 0.2.2Redmine Redmine 0.7.3Redmine Redmine 1.2.1Redmine Redmine 1.1.3Redmine Redmine 0.9.1Redmine Redmine 0.9.2Redmine Redmine 0.6.4Redmine Redmine 1.0.0Redmine Redmine 1.0.4Redmine Redmine 1.0.1Redmine Redmine 1.0.2Redmine Redmine 0.1.0Redmine Redmine 0.8.5Redmine Redmine 0.8.7Redmine Redmine 1.3.0Redmine Redmine 1.2.3Redmine Redmine 1.2.2Redmine Redmine 0.6.2Redmine Redmine 0.6.3Redmine Redmine 0.4.1Redmine Redmine 0.4.2Redmine Redmine 0.9.6Redmine Redmine 0.9.0Redmine Redmine 1.1.0Redmine Redmine 1.0.5Redmine Redmine 0.4.0Redmine Redmine 0.8.1Redmine Redmine 0.2.1Redmine Redmine 0.8.6Redmine RedmineRedmine Redmine 0.6.1Redmine Redmine 0.5.0Redmine Redmine 0.7.2Redmine Redmine 0.9.4Redmine Redmine 0.9.5Redmine Redmine 1.1.2Redmine Redmine 1.0.3Redmine Redmine 0.8.3Redmine Redmine 0.8.2Redmine Redmine 0.7.4Redmine Redmine 1.2.0
NA
CVE-2013-0269
The JSON gem before 1.5.5, 1.6.x before 1.6.8, and 1.7.x before 1.7.7 for Ruby allows remote attackers to cause a denial of service (resource consumption) or bypass the mass assignment protection mechanism via a crafted JSON document that triggers the creation of arbitrary Ruby...
Rubygems Json Gem 1.7.1Rubygems Json Gem 1.7.0Rubygems Json Gem 1.6.1Rubygems Json Gem 1.6.0Rubygems Json Gem 1.7.6Rubygems Json Gem 1.7.5Rubygems Json Gem 1.6.5Rubygems Json Gem 1.6.4Rubygems Json Gem 1.5.2Rubygems Json Gem 1.5.1Rubygems Json Gem 1.7.4Rubygems Json Gem 1.7.3Rubygems Json Gem 1.7.2Rubygems Json Gem 1.6.3Rubygems Json Gem 1.6.2Rubygems Json Gem 1.5.0Rubygems Json Gem 1.6.7Rubygems Json Gem 1.6.6Rubygems Json Gem 1.5.4Rubygems Json Gem 1.5.3
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
arbitrary CVE-2022-2257CVE-2013-4585CVE-2013-4493CVE-2022-26134brute forceSQLCVE-2022-30333CVE-2022-33327
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook