Login Request a demo
RO
Product
Ruby ON Rails
by Rubyonrails · last CVE Dec 29, 2017
49
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities49In the news0Timeline
Severity mix
Critical 1High 4Medium 3Low 1
Severity
All severities49Critical1High4Medium3Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Ruby ON Rails to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2017-17920
8.1
2%
Dec 29
SQL injection vulnerability in the 'reorder' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 'name' parameter
Affected: through 5.1.4
CVE-2017-17919
8.1
2%
Dec 29
SQL injection vulnerability in the 'order' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 'id desc' parameter
Affected: through 5.1.4
CVE-2016-0751
7.5
10%
Feb 16
actionpack/lib/action_dispatch/http/mime_type.rb in Action Pack in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before…
Affected: through 3.2.22; 4.0.10; 4.0.11; 4.0.11.1; 4.0.12; 4.0.13; +2 more
CVE-2016-2098
7.3
81%
Apr 7
Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's…
Affected: through 3.2.22.1; 4.1.14.1
Showing 4