Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Shell command injection in command_wrap CVE-2013-1875, GHSA-p673-hjf2-pwfr | High | Not scored | 24 Oct, 2017 | RubyGems command_wrap |
Thumbshooter vulnerable to Code Injection CVE-2013-1898, GHSA-7fqj-cg79-f2pv | High | Not scored | 24 Oct, 2017 | RubyGems thumbshooter |
fastreader Gem for Ruby URI Handling Arbitrary Command Injection CVE-2013-2615, GHSA-w248-xr37-jx8m | High | Not scored | 24 Oct, 2017 | RubyGems fastreader |
MiniMagick Gem for Ruby URI Handling Arbitrary Command Injection CVE-2013-2616, GHSA-w754-gq8r-pf5f | High | Not scored | 24 Oct, 2017 | RubyGems mini_magick |
Curl Gem insufficient URL escaping command injection CVE-2013-2617, GHSA-hxx6-p24v-wg8c | High | Not scored | 24 Oct, 2017 | RubyGems curl |
Puppet Improper Input Validation vulnerability CVE-2013-3567, GHSA-f7p5-w2cr-7cp7 | High | Not scored | 24 Oct, 2017 | RubyGems puppet |
rgpg Code Injection vulnerability CVE-2013-4203, GHSA-jg4m-q6w8-vrjp | High | Not scored | 24 Oct, 2017 | RubyGems rgpg |
Sounder Contains Arbitrary Command Execution Vulnerability CVE-2013-5647, GHSA-rfmf-rx8w-935w | High | Not scored | 24 Oct, 2017 | RubyGems sounder |
Code injection in dragonfly gem CVE-2013-5671, GHSA-qrgf-jqqm-x7xv | High | Not scored | 24 Oct, 2017 | RubyGems dragonfly RubyGems fog-dragonfly |
sprout Arbitrary Code Execution vulnerability CVE-2013-6421, GHSA-229r-pqp6-8w6g | High | Not scored | 24 Oct, 2017 | RubyGems sprout |
Webbynode Code Injection vulnerability CVE-2013-7086, GHSA-p65m-qr5x-rrqq | High | Not scored | 24 Oct, 2017 | RubyGems webbynode |
Aescrypt does not sufficiently use random values CVE-2013-7463, GHSA-4c4w-3q45-hp9j | High | Not scored | 24 Oct, 2017 | RubyGems aescrypt |
Arabic Prawn allows remote attackers to execute arbitrary commands via shell metacharacters CVE-2014-2322, GHSA-hgmw-x865-hf9x | High | Not scored | 24 Oct, 2017 | RubyGems Arabic-Prawn |
sfpagent Command Injection vulnerability CVE-2014-2888, GHSA-vm28-mrm7-fpjq | High | Not scored | 24 Oct, 2017 | RubyGems sfpagent |
SQL Injection in Active Record CVE-2014-3482, GHSA-mhwp-qhpc-h3jm | High | Not scored | 24 Oct, 2017 | RubyGems activerecord |
Active Record contains SQL Injection via improper range quoting CVE-2014-3483, GHSA-r8fh-hq2p-7qhq | High | Not scored | 24 Oct, 2017 | RubyGems activerecord |
Active Record subject to strong parameters protection bypass CVE-2014-3514, GHSA-9rf5-jm6f-2fmm | High | Not scored | 24 Oct, 2017 | RubyGems activerecord |
actionpack is vulnerable to denial of service because of a wildcard controller route CVE-2015-7581, GHSA-9h6g-gp95-x3q5 | High | Not scored | 24 Oct, 2017 | RubyGems actionpack |
actionpack is vulnerable to denial of service via a crafted HTTP Accept header CVE-2016-0751, GHSA-ffpv-c4hm-3x6v | High | Not scored | 24 Oct, 2017 | RubyGems actionpack |
archive-tar-minitar and minitar vulnerable to Path Traversal CVE-2016-10173, GHSA-h5g2-38x9-4gv3 | High | Not scored | 24 Oct, 2017 | RubyGems archive-tar-minitar RubyGems minitar |
actionpack allows remote code execution via application's unrestricted use of render method CVE-2016-2098, GHSA-78rc-8c29-p45g | High | Not scored | 24 Oct, 2017 | RubyGems actionpack |
safemode gem allows context-dependent attackers to obtain sensitive information via the inspect method CVE-2016-3693, GHSA-c92m-rrrc-q5wf | High | Not scored | 24 Oct, 2017 | RubyGems safemode |
ActiveRecord in Ruby on Rails allows database-query bypass CVE-2016-6317, GHSA-pr3r-4wrp-r2pv | High | Not scored | 24 Oct, 2017 | RubyGems activerecord |
OpenSSL gem for Ruby using inadequate encryption strength CVE-2016-7798, GHSA-6h88-qjpv-p32m | High | Not scored | 24 Oct, 2017 | RubyGems openssl |
Directory traversal vulnerability in Action View in Ruby on Rails CVE-2016-0752, GHSA-xrr4-p6fq-hjg7 | HighExploited | 95.5% | 16 Feb, 2016 | RubyGems actionpack RubyGems actionview |
actionpack Path Traversal vulnerability CVE-2014-0130, GHSA-6x85-j5j2-27jx | HighExploited | 53.7% | 07 May, 2014 | RubyGems actionpack |