OSV.dev (GitHub Advisories, PyPA, Go, RustSec…)

124 results · Clear filters · Feed

• High 8.1
  CVE-2018-7602 Exploited · Ransomware Public exploit EPSS 99%

  Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004

  A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being compromised. This vulnerability is relat…

  Drupal Core drupal/core drupal/drupal Ubuntu Alpine Packagist
  Jul 19, 2018

  KEV Apr 13, 2022
• Critical 9.8
  CVE-2018-7600 Exploited · Ransomware Public exploit EPSS 100%

  Drupal Core Remote Code Execution Vulnerability

  Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbitrary code because of an issue affecting multiple subsystems with default or common module configurations.

  drupal/core drupal/drupal drupal7 drupal7 Web / CMS Ubuntu Alpine Packagist
  Mar 29, 2018

  KEV Nov 3, 2021
• High 7.5
  CVE-2014-0130 Exploited Public exploit EPSS 54%

  actionpack Path Traversal vulnerability

  Directory traversal vulnerability in actionpack/lib/abstract_controller/base.rb in the implicit-render implementation in Ruby on Rails before 3.2.18, 4.0.x before 4.0.5, and 4.1.x before 4.1.1, when certain route globbing configurations are enabled, allows re…

  actionpack RubyGems
  May 7, 2014

  KEV Mar 25, 2022
• High 7.5
  CVE-2016-0752 Exploited Public exploit EPSS 96%

  Directory traversal vulnerability in Action View in Ruby on Rails

  Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application's unrestricted …

  rails actionpack actionview Debian RubyGems
  Feb 16, 2016

  KEV Mar 25, 2022