Skip to content
OpenAdvisories

Archive

20 February 2014

Vulnerabilities first published on this day (UTC), newest first.

← January 2014 2014 / February /20 March 2014 →
  1. 19
  2. 27
  3. 35
  4. 424
  5. 523
  6. 648
  7. 77
  8. 810
  9. 9 
  10. 1019
  11. 1111
  12. 1235
  13. 1316
  14. 1436
  15. 1520
  16. 16 
  17. 1710
  18. 1812
  19. 19 
  20. 2010
  21. 214
  22. 2224
  23. 23 
  24. 2414
  25. 256
  26. 2623
  27. 2749
  28. 2820
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium —
    CVE-2014-0082

    actionpack Improper Input Validation vulnerability

    actionpack/lib/action_view/template/text.rb in Action View in Ruby on Rails 3.x before 3.2.17 converts MIME type strings to symbols during use of the :text option to the render method, which allows remote attackers to cause a denial of service (memory consump…

    rails actionpack Debian RubyGems
  • Medium —
    CVE-2014-0081

    Rails vulnerable to Cross-site Scripting

    Multiple cross-site scripting (XSS) vulnerabilities in actionview/lib/action_view/helpers/number_helper.rb in Ruby on Rails before 3.2.17, 4.0.x before 4.0.3, and 4.1.x before 4.1.0.beta2 allow remote attackers to inject arbitrary web script or HTML via the (…

    rails actionpack rails Debian RubyGems
  • Medium —
    CVE-2014-0080

    Array data injection vulnerability in activerecord

    SQL injection vulnerability in activerecord/lib/active_record/connection_adapters/postgresql/cast.rb in Active Record in Ruby on Rails 4.0.x before 4.0.3, and 4.1.0.beta1, when PostgreSQL is used, allows remote attackers to execute "add data" SQL commands via…

    activerecord RubyGems