Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
activerecord vulnerable to SQL Injection CVE-2011-2930, GHSA-h6w6-xmqv-7q78 | High | 2.3% | 29 Aug, 2011 | RubyGems activerecord |
actionpack Improper Input Validation vulnerability CVE-2011-2929, GHSA-r7q2-5gqg-6c7q | Medium | 1.8% | 29 Aug, 2011 | RubyGems actionpack |
rails Cross-site Scripting vulnerability CVE-2011-2197, GHSA-v9v4-7jp6-8c73 | Medium | 2.0% | 30 Jun, 2011 | RubyGems actionpack RubyGems activesupport |
sqlite3-ruby uses weak permissions for unspecified files, which allows local users to gain privileges CVE-2011-0995, GHSA-6x46-7rrv-m4h8 | Low | 0.4% | 13 May, 2011 | RubyGems sqlite3-ruby |
actionpack allows remote attackers to bypass intended access restrictions CVE-2011-0449, GHSA-4ww3-3rxj-8v6q | High | 2.5% | 21 Feb, 2011 | RubyGems actionpack |
activerecord vulnerable to SQL Injection CVE-2011-0448, GHSA-jmm9-2p29-vh2w | High | 2.2% | 21 Feb, 2011 | RubyGems activerecord |
actionpack Cross-Site Request Forgery vulnerability CVE-2011-0447, GHSA-24fg-p96v-hxh8 | Medium | 1.4% | 14 Feb, 2011 | RubyGems actionpack |
Rails actionpack gem vulnerable to Cross-site Scripting CVE-2011-0446, GHSA-75w6-p6mg-vh8j | Medium | 2.4% | 14 Feb, 2011 | RubyGems actionpack RubyGems actionview |
Mail Improper Input Validation vulnerability CVE-2011-0739, GHSA-cpjc-p7fc-j9xh | Medium | 2.7% | 02 Feb, 2011 | RubyGems mail |
Spree allows remote attackers to obtain sensitive information CVE-2010-3978, GHSA-hwrx-wc75-mgh7 | Medium | 2.5% | 17 Nov, 2010 | RubyGems spree |
Rails activerecord gem has Improper Input Validation vulnerability CVE-2010-3933, GHSA-gjxw-5w2q-7grf | Medium | 2.2% | 28 Oct, 2010 | RubyGems activerecord |
Puppet arbitrary files overwrite via a symlink attack CVE-2010-0156, GHSA-vrh7-99jh-3fmm | Low | 0.3% | 03 Mar, 2010 | RubyGems puppet |
WEBrick Improper Input Validation vulnerability CVE-2009-4492, GHSA-6mq2-37j5-w6r6 | High | 16.2% | 13 Jan, 2010 | RubyGems webrick |
Improper Input Validation in actionpack CVE-2008-7248, GHSA-8fqx-7pv4-3jwm | Medium | 8.1% | 16 Dec, 2009 | RubyGems actionpack |
Moderate severity vulnerability that affects rails CVE-2009-4214, GHSA-9p3v-wf2w-v29c | Medium | 3.0% | 07 Dec, 2009 | RubyGems rails |
High severity vulnerability that affects thin CVE-2009-3287, GHSA-j24p-r6wx-r79w | High | 1.4% | 22 Sep, 2009 | RubyGems thin |
actionpack and activesupport vulnerable to information leaks CVE-2009-3086, GHSA-fg9w-g6m4-557j | Medium | 2.2% | 08 Sep, 2009 | RubyGems actionpack RubyGems activesupport |
Cross site scripting that affects rails CVE-2009-3009, GHSA-8qrh-h9m2-5fvf | Medium | 3.0% | 08 Sep, 2009 | RubyGems actionpack RubyGems activesupport |
rails vulnerable to improper authentication CVE-2009-2422, GHSA-rxq3-gm4p-5fj4 | Critical | 3.4% | 10 Jul, 2009 | RubyGems rails |
WEBrick Denial of Service Vulnerability CVE-2008-4310, GHSA-wfrc-r6c6-7j9r | High | 13.6% | 09 Dec, 2008 | RubyGems webrick |
rails is vulnerable to CRLF injection CVE-2008-5189, GHSA-jmgf-p46x-982h | Medium | 1.5% | 21 Nov, 2008 | RubyGems rails |
Rails ActiveRecord gem vulnerable to SQL injection CVE-2008-4094, GHSA-xf96-32q2-9rw2 | High | 3.0% | 30 Sep, 2008 | RubyGems activerecord |
Mongrel vulnerable to directory traversal via double-encoded sequences CVE-2007-6612, GHSA-m7r6-43v2-49vf | Medium | 3.0% | 03 Jan, 2008 | RubyGems mongrel |
gtk2 vulnerable to Use of Externally-Controlled Format String CVE-2007-6183, GHSA-xgj6-pgrm-x4r2 | Medium | 3.4% | 30 Nov, 2007 | RubyGems gtk2 |
session fixation protection mechanism in cgi_process.rb in Rails CVE-2007-6077, GHSA-p4c6-77gc-694x | Medium | 2.5% | 21 Nov, 2007 | RubyGems rails |
Moderate severity vulnerability that affects rails CVE-2007-5379, GHSA-fjfg-q662-gm6j | Medium | 4.0% | 19 Oct, 2007 | RubyGems rails |
Session fixation vulnerability in Rails CVE-2007-5380, GHSA-jwhv-rgqc-fqj5 | Medium | 3.6% | 19 Oct, 2007 | RubyGems rails |
Moderate severity vulnerability that affects rails CVE-2007-3227, GHSA-gm25-fpmr-43fj | Medium | 3.7% | 14 Jun, 2007 | RubyGems rails |
RubyGems file overwrite vulnerability CVE-2007-0469, GHSA-95vx-q4c2-64gr | High | 4.9% | 24 Jan, 2007 | RubyGems rubygems-update |
Ruby on Rails vulnerable to code injection CVE-2006-4111, GHSA-rvpq-5xqx-pfpp | High | 2.3% | 14 Aug, 2006 | RubyGems rails |
Rails Denial of Service vulnerability CVE-2006-4112, GHSA-9wrq-xvmp-xjc8 | High | 3.1% | 14 Aug, 2006 | RubyGems rails |
Remote code execution in rwiki CVE-2006-2582, GHSA-wwmf-6p58-6vj2 | High | 1.6% | 25 May, 2006 | RubyGems rwiki |