Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 07:27:13 +0000 certa-2011-avi-459 — De multiples vulnérabilités présentes dans le produit <span class="textit">Ruby on Rails</span> ont été corrigées. Elle… https://cve.radiocsirt.org/vuln/certa-2011-avi-459 certa-2011-avi-459 https://cve.radiocsirt.org/vuln/certa-2011-avi-459 EUVD-2026-115910 https://cve.radiocsirt.org/vuln/euvd-2026-115910 EUVD-2026-115910 https://cve.radiocsirt.org/vuln/euvd-2026-115910 fkie_cve-2011-2929 https://cve.radiocsirt.org/vuln/fkie_cve-2011-2929 <p>The template selection functionality in actionpack/lib/action_view/template/resolver.rb in Ruby on Rails 3.0.x before 3.0.10 and 3.1.x before 3.1.0.rc6 does not properly handle glob characters, which allows remote attackers to render arbitrary views via a crafted URL, related to a &#34;filter skipping vulnerability.&#34;</p> <p>The template selection functionality in actionpack/lib/action_view/template/resolver.rb in Ruby on Rails 3.0.x before 3.0.10 and 3.1.x before 3.1.0.rc6 does not properly handle glob characters, which allows remote attackers to render arbitrary views via a crafted URL, related to a &#34;filter skipping vulnerability.&#34;</p> https://cve.radiocsirt.org/vuln/fkie_cve-2011-2929 GHSA-r7q2-5gqg-6c7q — actionpack Improper Input Validation vulnerability https://cve.radiocsirt.org/vuln/ghsa-r7q2-5gqg-6c7q <p><strong>Affected:</strong> RubyGems: actionpack</p> <p>The template selection functionality in `actionpack/lib/action_view/template/resolver.rb` in Ruby on Rails 3.0.x before 3.0.10 and 3.1.x before 3.1.0.rc6 does not properly handle glob characters, which allows remote attackers to render arbitrary views via a crafted URL, related to a &#34;filter skipping vulnerability.&#34;</p> <p><strong>Affected:</strong> RubyGems: actionpack</p> <p>The template selection functionality in `actionpack/lib/action_view/template/resolver.rb` in Ruby on Rails 3.0.x before 3.0.10 and 3.1.x before 3.1.0.rc6 does not properly handle glob characters, which allows remote attackers to render arbitrary views via a crafted URL, related to a &#34;filter skipping vulnerability.&#34;</p> https://cve.radiocsirt.org/vuln/ghsa-r7q2-5gqg-6c7q gsd-2011-2929 https://cve.radiocsirt.org/vuln/gsd-2011-2929 gsd-2011-2929 https://cve.radiocsirt.org/vuln/gsd-2011-2929