Skip to content
OpenAdvisories

Source

OSV.dev (GitHub Advisories, PyPA, Go, RustSec…)

Source: https://osv.dev/

All Critical High Medium Low Exploited only Public exploit

962 results · Clear filters · Feed

  • High 7.5
    CVE-2016-6317 Public exploit

    ActiveRecord in Ruby on Rails allows database-query bypass

    Action Record in Ruby on Rails 4.2.x before 4.2.7.1 does not properly consider differences in parameter handling between the Active Record component and the JSON implementation, which allows remote attackers to bypass intended database-query restrictions and …

    rails activerecord Debian RubyGems
  • High 7.3
    CVE-2016-2098 Public exploit EPSS 81%

    actionpack allows remote code execution via application's unrestricted use of render method

    Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method.

    rails actionpack Debian RubyGems