https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T20:07:21.685214+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/brew-travis-cve-2012-3464 BREW-travis-CVE-2012-3464 — activesupport Cross-site Scripting vulnerability 2026-10-02T20:07:21.706180+00:00

Affected: Homebrew: travis

Cross-site scripting (XSS) vulnerability in `activesupport/lib/active_support/core_ext/string/output_safety.rb` in Ruby on Rails before 2.3.16, 3.0.x before , 3.1.x before 3.1.8, and 3.2.x before 3.2.8 might allow remote attackers to inject arbitrary web script or HTML via vectors involving a ' (quote) character.

 https://cve.radiocsirt.org/vuln/euvd-2026-111828 EUVD-2026-111828 2026-10-02T20:07:21.706239+00:00 EUVD-2026-111828 https://cve.radiocsirt.org/vuln/fkie_cve-2012-3464 fkie_cve-2012-3464 2026-10-02T20:07:21.706256+00:00

Cross-site scripting (XSS) vulnerability in activesupport/lib/active_support/core_ext/string/output_safety.rb in Ruby on Rails before 3.0.17, 3.1.x before 3.1.8, and 3.2.x before 3.2.8 might allow remote attackers to inject arbitrary web script or HTML via vectors involving a ' (quote) character.

 https://cve.radiocsirt.org/vuln/ghsa-h835-75hw-pj89 GHSA-h835-75hw-pj89 — activesupport Cross-site Scripting vulnerability 2026-10-02T20:07:21.706280+00:00

Affected: RubyGems: activesupport

Cross-site scripting (XSS) vulnerability in `activesupport/lib/active_support/core_ext/string/output_safety.rb` in Ruby on Rails before 2.3.16, 3.0.x before , 3.1.x before 3.1.8, and 3.2.x before 3.2.8 might allow remote attackers to inject arbitrary web script or HTML via vectors involving a ' (quote) character.

 https://cve.radiocsirt.org/vuln/gsd-2012-3464 gsd-2012-3464 2026-10-02T20:07:21.706303+00:00 gsd-2012-3464 https://cve.radiocsirt.org/vuln/rhsa-2012:1542 RHSA-2012:1542 — Red Hat Security Advisory: CloudForms Commons 1.1 security update 2026-10-02T20:07:21.706315+00:00

puppet: Filebucket arbitrary file read puppet: Filebucket denial of service puppet: Filebucket arbitrary code execution rubygem-mail: directory traversal rubygem-mail: arbitrary command execution when using exim or sendmail from commandline rubygem-actionpack: Unsafe query generation rubygem-activerecord: SQL injection when processing nested query paramaters rubygem-actionpack: Unsafe query generation (a different flaw than CVE-2012-2660) rubygem-activerecord: SQL injection when processing nested query paramaters (a different flaw than CVE-2012-2661) rubygem-actionpack: DoS vulnerability in authenticate_or_request_with_http_digest rubygem-actionpack: potential XSS vulnerability in select_tag prompt rubygem-actionpack: potential XSS vulnerability rubygem-actionpack: XSS Vulnerability in strip_tags puppet: authenticated clients allowed to read arbitrary files from the puppet master puppet: authenticated clients allowed to delete arbitrary files on the puppet master puppet: insufficient validation of agent names in CN of SSL certificate requests