https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T04:46:34.238691+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2014-avi-077 certfr-2014-avi-077 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Ruby On Rails</span>. Elles permettent à un att… 2026-10-04T04:46:34.310379+00:00 certfr-2014-avi-077 https://cve.radiocsirt.org/vuln/euvd-2026-96629 EUVD-2026-96629 2026-10-04T04:46:34.310435+00:00 EUVD-2026-96629 https://cve.radiocsirt.org/vuln/fkie_cve-2014-0080 fkie_cve-2014-0080 2026-10-04T04:46:34.310452+00:00

SQL injection vulnerability in activerecord/lib/active_record/connection_adapters/postgresql/cast.rb in Active Record in Ruby on Rails 4.0.x before 4.0.3, and 4.1.0.beta1, when PostgreSQL is used, allows remote attackers to execute "add data" SQL commands via vectors involving \ (backslash) characters that are not properly handled in operations on array columns.

 https://cve.radiocsirt.org/vuln/ghsa-hqf9-rc9j-5fmj GHSA-hqf9-rc9j-5fmj — Array data injection vulnerability in activerecord 2026-10-04T04:46:34.310529+00:00

Affected: RubyGems: activerecord

SQL injection vulnerability in `activerecord/lib/active_record/connection_adapters/postgresql/cast.rb` in Active Record in Ruby on Rails 4.0.x before 4.0.3, and 4.1.0.beta1, when PostgreSQL is used, allows remote attackers to execute "add data" SQL commands via vectors involving `\` (backslash) characters that are not properly handled in operations on array columns.

 https://cve.radiocsirt.org/vuln/gsd-2014-0080 gsd-2014-0080 2026-10-04T04:46:34.310558+00:00 gsd-2014-0080