Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Cross-Site Scripting in jquery CVE-2012-6708, GHSA-2pqj-h3vj-pqgw | Medium | 8.6% | 18 Jan, 2018 | Maven org.webjars.npm:jquery NuGet jQuery RubyGems jquery-rails npm jquery |
Radiant CMS vulnerable to Cross-site Scripting CVE-2018-5216, GHSA-mvw8-v767-qhjm | Medium | Not scored | 06 Jan, 2018 | RubyGems radiant |
net-ldap Improper Certificate Validation vulnerability CVE-2017-17718, GHSA-m7p8-9w66-9frm | Medium | Not scored | 06 Jan, 2018 | RubyGems net-ldap |
private_address_check vulnerable to bypass of Resolv.getaddresses method CVE-2017-0904, GHSA-hxhj-hp9m-qwc4 | Medium | Not scored | 29 Nov, 2017 | RubyGems private_address_check |
Geminabox contains Cross-site Scripting CVE-2017-16792, GHSA-653m-r33x-39ff | Medium | Not scored | 29 Nov, 2017 | RubyGems geminabox |
Gemirro Stored XSS in Gemspec "homepage" value CVE-2017-16833, GHSA-x7p2-x2j6-mwhr | Medium | Not scored | 29 Nov, 2017 | RubyGems gemirro |
cairo is vulnerable to denial of service due to a null pointer dereference CVE-2017-7475, GHSA-5v3f-73gv-x7x5 | Medium | Not scored | 15 Nov, 2017 | RubyGems cairo |
Moderate severity vulnerability that affects rails CVE-2007-3227, GHSA-gm25-fpmr-43fj | Medium | Not scored | 24 Oct, 2017 | RubyGems rails |
Moderate severity vulnerability that affects rails CVE-2007-5379, GHSA-fjfg-q662-gm6j | Medium | Not scored | 24 Oct, 2017 | RubyGems rails |
Session fixation vulnerability in Rails CVE-2007-5380, GHSA-jwhv-rgqc-fqj5 | Medium | Not scored | 24 Oct, 2017 | RubyGems rails |
session fixation protection mechanism in cgi_process.rb in Rails CVE-2007-6077, GHSA-p4c6-77gc-694x | Medium | Not scored | 24 Oct, 2017 | RubyGems rails |
gtk2 vulnerable to Use of Externally-Controlled Format String CVE-2007-6183, GHSA-xgj6-pgrm-x4r2 | Medium | Not scored | 24 Oct, 2017 | RubyGems gtk2 |
rails is vulnerable to CRLF injection CVE-2008-5189, GHSA-jmgf-p46x-982h | Medium | Not scored | 24 Oct, 2017 | RubyGems rails |
Improper Input Validation in actionpack CVE-2008-7248, GHSA-8fqx-7pv4-3jwm | Medium | Not scored | 24 Oct, 2017 | RubyGems actionpack |
Cross site scripting that affects rails CVE-2009-3009, GHSA-8qrh-h9m2-5fvf | Medium | Not scored | 24 Oct, 2017 | RubyGems actionpack RubyGems activesupport |
actionpack and activesupport vulnerable to information leaks CVE-2009-3086, GHSA-fg9w-g6m4-557j | Medium | Not scored | 24 Oct, 2017 | RubyGems actionpack RubyGems activesupport |
Moderate severity vulnerability that affects rails CVE-2009-4214, GHSA-9p3v-wf2w-v29c | Medium | Not scored | 24 Oct, 2017 | RubyGems rails |
WEBrick Improper Input Validation vulnerability CVE-2009-4492, GHSA-6mq2-37j5-w6r6 | Medium | Not scored | 24 Oct, 2017 | RubyGems webrick |
Rails activerecord gem has Improper Input Validation vulnerability CVE-2010-3933, GHSA-gjxw-5w2q-7grf | Medium | Not scored | 24 Oct, 2017 | RubyGems activerecord |
Rails actionpack gem vulnerable to Cross-site Scripting CVE-2011-0446, GHSA-75w6-p6mg-vh8j | Medium | Not scored | 24 Oct, 2017 | RubyGems actionpack RubyGems actionview |
actionpack Cross-Site Request Forgery vulnerability CVE-2011-0447, GHSA-24fg-p96v-hxh8 | Medium | Not scored | 24 Oct, 2017 | RubyGems actionpack |
Mail Improper Input Validation vulnerability CVE-2011-0739, GHSA-cpjc-p7fc-j9xh | Medium | Not scored | 24 Oct, 2017 | RubyGems mail |
rails Cross-site Scripting vulnerability CVE-2011-2197, GHSA-v9v4-7jp6-8c73 | Medium | Not scored | 24 Oct, 2017 | RubyGems actionpack RubyGems activesupport |
actionpack Improper Input Validation vulnerability CVE-2011-2929, GHSA-r7q2-5gqg-6c7q | Medium | Not scored | 24 Oct, 2017 | RubyGems actionpack |
actionpack Cross-site Scripting vulnerability CVE-2011-2931, GHSA-v5jg-558j-q67c | Medium | Not scored | 24 Oct, 2017 | RubyGems actionpack |
activesupport Cross-site Scripting vulnerability CVE-2011-2932, GHSA-9fh3-vh3h-q4g3 | Medium | Not scored | 24 Oct, 2017 | RubyGems activesupport |
actionpack CRLF injection vulnerability CVE-2011-3186, GHSA-fcqf-h4h4-695m | Medium | Not scored | 24 Oct, 2017 | RubyGems actionpack |
actionpack Improper Input Validation vulnerability CVE-2011-3187, GHSA-3vfw-7rcp-3xgm | Medium | Not scored | 24 Oct, 2017 | RubyGems actionpack |
Cross-site Scripting vulnerability in i18n translations helper method CVE-2011-4319, GHSA-xxr8-833v-c7wc | Medium | Not scored | 24 Oct, 2017 | RubyGems actionpack |
activesupport Cross-site Scripting vulnerability CVE-2012-1098, GHSA-qv8p-v9qw-wc7g | Medium | Not scored | 24 Oct, 2017 | RubyGems activesupport |
Cross-site Scripting in actionpack CVE-2012-1099, GHSA-2xjj-5x6h-8vmf | Medium | Not scored | 24 Oct, 2017 | RubyGems actionpack |
Mail Gem Path Traversal vulnerability CVE-2012-2139, GHSA-cj92-c4fj-w9c5 | Medium | Not scored | 24 Oct, 2017 | RubyGems mail |
Action Pack contains database-query restrictions bypass CVE-2012-2660, GHSA-hgpp-pp89-4fgf | Medium | Not scored | 24 Oct, 2017 | RubyGems actionpack |
Active Record vulnerable to SQL Injection via nested query parameters CVE-2012-2661, GHSA-fh39-v733-mxfr | Medium | Not scored | 24 Oct, 2017 | RubyGems activerecord |
actionpack allows remote attackers to bypass database-query restrictions, perform NULL checks via crafted request CVE-2012-2694, GHSA-q34c-48gc-m9g8 | Medium | Not scored | 24 Oct, 2017 | RubyGems actionpack |
actionpack Improper Authentication vulnerability CVE-2012-3424, GHSA-92w9-2pqw-rhjj | Medium | Not scored | 24 Oct, 2017 | RubyGems actionpack |
actionpack Cross-site Scripting vulnerability CVE-2012-3463, GHSA-98mf-8f57-64qf | Medium | Not scored | 24 Oct, 2017 | RubyGems actionpack |
activesupport Cross-site Scripting vulnerability CVE-2012-3464, GHSA-h835-75hw-pj89 | Medium | Not scored | 24 Oct, 2017 | RubyGems activesupport |
actionpack Cross-site Scripting vulnerability CVE-2012-3465, GHSA-7g65-ghrg-hpf5 | Medium | Not scored | 24 Oct, 2017 | RubyGems actionpack |
Pupper does not properly restrict characters in Common Name field of Certificate Signing Request CVE-2012-3867, GHSA-q44r-f2hm-v76v | Medium | Not scored | 24 Oct, 2017 | RubyGems puppet |
Rack vulnerable to REDoS CVE-2012-6109, GHSA-h77x-m5q8-c29h | Medium | Not scored | 24 Oct, 2017 | RubyGems rack |
omniauth-oauth2 Cross-Site Request Forgery vulnerability CVE-2012-6134, GHSA-fgmx-8h93-26fh | Medium | Not scored | 24 Oct, 2017 | RubyGems omniauth-oauth2 |
RedCloth Cross-site Scripting vulnerability CVE-2012-6684, GHSA-r23g-3qw4-gfh2 | Medium | Not scored | 24 Oct, 2017 | RubyGems RedCloth |
Active Record allows bypassing of database-query restrictions CVE-2013-0155, GHSA-gppp-5xc5-wfpx | Medium | Not scored | 24 Oct, 2017 | RubyGems activerecord |
Rack rubygems receiving excessively long lines triggers out-of-memory error CVE-2013-0183, GHSA-3pxh-h8hw-mj8w | Medium | Not scored | 24 Oct, 2017 | RubyGems rack |
Devise does not properly perform type conversion when performing database queries CVE-2013-0233, GHSA-jxhw-mg8m-2pj8 | Medium | Not scored | 24 Oct, 2017 | RubyGems devise |
RDoc contains XSS vulnerability CVE-2013-0256, GHSA-v2r9-c84j-v7xm | Medium | Not scored | 24 Oct, 2017 | RubyGems rdoc |
Rack Vulnerable to Path Traversal CVE-2013-0262, GHSA-85r7-w5mv-c849 | Medium | Not scored | 24 Oct, 2017 | RubyGems rack |
ActiveRecord vulnerable to modification of protected model attributes CVE-2013-0276, GHSA-gr44-7grc-37vq | Medium | Not scored | 24 Oct, 2017 | RubyGems activerecord |
newrelic_rpm Gem Discloses Sensitive Information CVE-2013-0284, GHSA-q6cw-2553-7837 | Medium | Not scored | 24 Oct, 2017 | RubyGems newrelic_rpm |