| Vulnerability Name |
CVE
CWE
|
CWE |
Severity |
|
Ruby on Rails Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2009-3086)
|
|
|
Medium
|
|
Ruby on Rails Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-6497)
|
|
|
Medium
|
|
Ruby on Rails Improper Access Control Vulnerability (CVE-2015-7577)
|
|
|
Medium
|
|
Ruby on Rails Improper Authentication Vulnerability (CVE-2012-3424)
|
|
|
Medium
|
|
Ruby on Rails Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2011-3186)
|
|
|
Medium
|
|
Ruby on Rails Improper Input Validation Vulnerability (CVE-2008-7248)
|
|
|
Medium
|
|
Ruby on Rails Improper Input Validation Vulnerability (CVE-2010-3933)
|
|
|
Medium
|
|
Ruby on Rails Improper Input Validation Vulnerability (CVE-2011-2929)
|
|
|
Medium
|
|
Ruby on Rails Improper Input Validation Vulnerability (CVE-2011-3187)
|
|
|
Medium
|
|
Ruby on Rails Improper Input Validation Vulnerability (CVE-2013-1854)
|
|
|
Medium
|
|
Ruby on Rails Improper Input Validation Vulnerability (CVE-2013-1856)
|
|
|
Medium
|
|
Ruby on Rails Improper Input Validation Vulnerability (CVE-2013-3221)
|
|
|
Medium
|
|
Ruby on Rails Improper Input Validation Vulnerability (CVE-2013-6414)
|
|
|
Medium
|
|
Ruby on Rails Improper Input Validation Vulnerability (CVE-2014-0082)
|
|
|
Medium
|
|
Ruby on Rails Improper Input Validation Vulnerability (CVE-2016-0753)
|
|
|
Medium
|
|
Ruby on Rails Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2014-0130)
|
|
|
Medium
|
|
Ruby on Rails Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2014-7818)
|
|
|
Medium
|
|
Ruby on Rails Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2014-7829)
|
|
|
Medium
|
|
Ruby on Rails Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2016-2097)
|
|
|
Medium
|
|
Ruby on Rails Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2007-3227)
|
|
|
Medium
|
|
Ruby on Rails Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-3009)
|
|
|
Medium
|
|
Ruby on Rails Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-4214)
|
|
|
Medium
|
|
Ruby on Rails Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-0446)
|
|
|
Medium
|
|
Ruby on Rails Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-1497)
|
|
|
Medium
|
|
Ruby on Rails Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-2197)
|
|
|
Medium
|
|
Ruby on Rails Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-2931)
|
|
|
Medium
|
|
Ruby on Rails Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-2932)
|
|
|
Medium
|
|
Ruby on Rails Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-4319)
|
|
|
Medium
|
|
Ruby on Rails Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-1098)
|
|
|
Medium
|
|
Ruby on Rails Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-1099)
|
|
|
Medium
|
|
Ruby on Rails Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-3463)
|
|
|
Medium
|
|
Ruby on Rails Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-3464)
|
|
|
Medium
|
|
Ruby on Rails Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-3465)
|
|
|
Medium
|
|
Ruby on Rails Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-1855)
|
|
|
Medium
|
|
Ruby on Rails Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-1857)
|
|
|
Medium
|
|
Ruby on Rails Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-4491)
|
|
|
Medium
|
|
Ruby on Rails Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-6415)
|
|
|
Medium
|
|
Ruby on Rails Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-6416)
|
|
|
Medium
|
|
Ruby on Rails Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-0081)
|
|
|
Medium
|
|
Ruby on Rails Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-3226)
|
|
|
Medium
|
|
Ruby on Rails Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-6316)
|
|
|
Medium
|
|
Ruby on Rails Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-8264)
|
|
|
Medium
|
|
Ruby on Rails Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-26143)
|
|
|
Medium
|
|
Ruby on Rails Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-32464)
|
|
|
Medium
|
|
Ruby on Rails Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-2661)
|
|
|
Medium
|
|
Ruby on Rails Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2014-0080)
|
|
|
Medium
|
|
Ruby on Rails Missing Encryption of Sensitive Data Vulnerability (CVE-2010-3299)
|
|
|
Medium
|
|
Ruby on Rails Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-2660)
|
|
|
Medium
|
|
Ruby on Rails Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-2694)
|
|
|
Medium
|
|
Ruby on Rails Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-0155)
|
|
|
Medium
|
|
Ruby on Rails Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-0276)
|
|
|
Medium
|
|
Ruby on Rails Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-6417)
|
|
|
Medium
|
|
Ruby on Rails Uncontrolled Resource Consumption Vulnerability (CVE-2020-8185)
|
|
|
Medium
|
|
Ruby on Rails URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2021-22881)
|
|
|
Medium
|
|
Ruby on Rails URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2021-22903)
|
|
|
Medium
|
|
Ruby on Rails URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2021-22942)
|
|
|
Medium
|
|
Ruby on Rails URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2021-44528)
|
|
|
Medium
|
|
Ruby on Rails URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2023-22797)
|
|
|
Medium
|
|
Ruby on Rails Use of Externally-Controlled Format String Vulnerability (CVE-2013-4389)
|
|
|
Medium
|
|
Ruby Other Vulnerability (CVE-2012-5380)
|
|
|
Medium
|
|
Ruby Other Vulnerability (CVE-2014-8080)
|
|
|
Medium
|
|
Ruby Other Vulnerability (CVE-2014-8090)
|
|
|
Medium
|
|
Ruby Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-1005)
|
|
|
Medium
|
|
Ruby Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-4464)
|
|
|
Medium
|
|
Ruby Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-4466)
|
|
|
Medium
|
|
Ruby Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-4481)
|
|
|
Medium
|
|
Ruby Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-4522)
|
|
|
Medium
|
|
Ruby Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-2065)
|
|
|
Medium
|
|
Ruby Resource Management Errors Vulnerability (CVE-2008-3443)
|
|
|
Medium
|
|
Ruby Resource Management Errors Vulnerability (CVE-2014-2734)
|
|
|
Medium
|
|
Rukovoditel Cleartext Storage of Sensitive Information Vulnerability (CVE-2020-11821)
|
|
|
Medium
|
|
Rukovoditel Cross-site Scripting (XSS) Vulnerability (CVE-2019-7541)
|
|
|
Medium
|
|
Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-7400)
|
|
|
Medium
|
|
Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-11813)
|
|
|
Medium
|
|
Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-11822)
|
|
|
Medium
|
