Skip to content
OpenAdvisories

Archive

7 September 2016

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 7.5
    CVE-2016-6317 Public exploit

    ActiveRecord in Ruby on Rails allows database-query bypass

    Action Record in Ruby on Rails 4.2.x before 4.2.7.1 does not properly consider differences in parameter handling between the Active Record component and the JSON implementation, which allows remote attackers to bypass intended database-query restrictions and …

  • Unscored —
    CVE-2016-6855 Public exploit EPSS 18%

    Eye of GNOME (aka eog) 3.16.5, 3.17.x, 3.18.x before 3.18.3, 3.19.x, and 3.20.x before 3.20.4, when used with glib befo…