Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 28 Oct 2026 00:46:30 +0000 certa-2011-avi-083 — Plusieurs vulnérabilités présentes dans Ruby on Rails permettent à un utilisateur distant de contourner la politique de… https://cve.radiocsirt.org/vuln/certa-2011-avi-083 certa-2011-avi-083 https://cve.radiocsirt.org/vuln/certa-2011-avi-083 EUVD-2026-114041 https://cve.radiocsirt.org/vuln/euvd-2026-114041 EUVD-2026-114041 https://cve.radiocsirt.org/vuln/euvd-2026-114041 fkie_cve-2011-0448 https://cve.radiocsirt.org/vuln/fkie_cve-2011-0448 <p>Ruby on Rails 3.0.x before 3.0.4 does not ensure that arguments to the limit function specify integer values, which makes it easier for remote attackers to conduct SQL injection attacks via a non-numeric argument.</p> <p>Ruby on Rails 3.0.x before 3.0.4 does not ensure that arguments to the limit function specify integer values, which makes it easier for remote attackers to conduct SQL injection attacks via a non-numeric argument.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2011-0448 GHSA-jmm9-2p29-vh2w — activerecord vulnerable to SQL Injection https://cve.radiocsirt.org/vuln/ghsa-jmm9-2p29-vh2w <p><strong>Affected:</strong> RubyGems: activerecord</p> <p>Ruby on Rails 3.0.x before 3.0.4 does not ensure that arguments to the limit function specify integer values, which makes it easier for remote attackers to conduct SQL injection attacks via a non-numeric argument.</p> <p><strong>Affected:</strong> RubyGems: activerecord</p> <p>Ruby on Rails 3.0.x before 3.0.4 does not ensure that arguments to the limit function specify integer values, which makes it easier for remote attackers to conduct SQL injection attacks via a non-numeric argument.</p> https://cve.radiocsirt.org/vuln/ghsa-jmm9-2p29-vh2w gsd-2011-0448 https://cve.radiocsirt.org/vuln/gsd-2011-0448 gsd-2011-0448 https://cve.radiocsirt.org/vuln/gsd-2011-0448