Skip to content
OpenAdvisories

Archive

June 2012

Vulnerabilities first published in this month (UTC), newest first.

← May 2012 2012 / June July 2012 →
  1. 13
  2. 22
  3. 3 
  4. 422
  5. 526
  6. 6 
  7. 717
  8. 812
  9. 912
  10. 10 
  11. 112
  12. 1224
  13. 1332
  14. 1416
  15. 156
  16. 1630
  17. 1713
  18. 181
  19. 1914
  20. 2020
  21. 2137
  22. 2211
  23. 23 
  24. 24 
  25. 257
  26. 263
  27. 2763
  28. 28 
  29. 2926
  30. 306
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium —
    CVE-2012-2661 Public exploit

    Active Record vulnerable to SQL Injection via nested query parameters

    The Active Record component in Ruby on Rails 3.0.x before 3.0.13, 3.1.x before 3.1.5, and 3.2.x before 3.2.4 does not properly implement the passing of request data to a where method in an ActiveRecord class, which allows remote attackers to conduct certain S…

    activerecord RubyGems