https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 02:14:04 +0000 https://cve.radiocsirt.org/vuln/certa-2013-avi-024 certa-2013-avi-024 https://cve.radiocsirt.org/vuln/certa-2013-avi-024 https://cve.radiocsirt.org/vuln/euvd-2026-104531 EUVD-2026-104531 https://cve.radiocsirt.org/vuln/euvd-2026-104531 https://cve.radiocsirt.org/vuln/fkie_cve-2013-0155 <p>Ruby on Rails 3.0.x before 3.0.19, 3.1.x before 3.1.10, and 3.2.x before 3.2.11 does not properly consider differences in parameter handling between the Active Record component and the JSON implementation, which allows remote attackers to bypass intended database-query restrictions and perform NULL checks or trigger missing WHERE clauses via a crafted request, as demonstrated by certain &#34;[nil]&#34; values, a related issue to CVE-2012-2660 and CVE-2012-2694.</p> <p>Ruby on Rails 3.0.x before 3.0.19, 3.1.x before 3.1.10, and 3.2.x before 3.2.11 does not properly consider differences in parameter handling between the Active Record component and the JSON implementation, which allows remote attackers to bypass intended database-query restrictions and perform NULL checks or trigger missing WHERE clauses via a crafted request, as demonstrated by certain &#34;[nil]&#34; values, a related issue to CVE-2012-2660 and CVE-2012-2694.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2013-0155 https://cve.radiocsirt.org/vuln/ghsa-gppp-5xc5-wfpx <p><strong>Affected:</strong> RubyGems: activerecord</p> <p>Ruby on Rails 3.0.x before 3.0.19, 3.1.x before 3.1.10, and 3.2.x before 3.2.11 does not properly consider differences in parameter handling between the Active Record component and the JSON implementation, which allows remote attackers to bypass intended database-query restrictions and perform NULL checks or trigger missing WHERE clauses via a crafted request, as demonstrated by certain &#34;[nil]&#34; values, a related issue to CVE-2012-2660 and CVE-2012-2694.</p> <p><strong>Affected:</strong> RubyGems: activerecord</p> <p>Ruby on Rails 3.0.x before 3.0.19, 3.1.x before 3.1.10, and 3.2.x before 3.2.11 does not properly consider differences in parameter handling between the Active Record component and the JSON implementation, which allows remote attackers to bypass intended database-query restrictions and perform NULL checks or trigger missing WHERE clauses via a crafted request, as demonstrated by certain &#34;[nil]&#34; values, a related issue to CVE-2012-2660 and CVE-2012-2694.</p> https://cve.radiocsirt.org/vuln/ghsa-gppp-5xc5-wfpx https://cve.radiocsirt.org/vuln/gsd-2013-0155 gsd-2013-0155 https://cve.radiocsirt.org/vuln/gsd-2013-0155 https://cve.radiocsirt.org/vuln/rhsa-2013:0154 <p>rubygem-actionpack: Unsafe query generation rubygem-activerecord: SQL injection when processing nested query paramaters rubygem-actionpack: Unsafe query generation (a different flaw than CVE-2012-2660) rubygem-activerecord: SQL injection when processing nested query paramaters (a different flaw than CVE-2012-2661) rubygem-actionpack: DoS vulnerability in authenticate_or_request_with_http_digest rubygem-actionpack: potential XSS vulnerability in select_tag prompt rubygem-actionpack: potential XSS vulnerability rubygem-actionpack: XSS Vulnerability in strip_tags rubygem-activerecord: find_by_* SQL Injection rubygem-activerecord: Unsafe Query Generation Risk in Ruby on Rails rubygem-activesupport: Multiple vulnerabilities in parameter parsing in ActionPack</p> <p>rubygem-actionpack: Unsafe query generation rubygem-activerecord: SQL injection when processing nested query paramaters rubygem-actionpack: Unsafe query generation (a different flaw than CVE-2012-2660) rubygem-activerecord: SQL injection when processing nested query paramaters (a different flaw than CVE-2012-2661) rubygem-actionpack: DoS vulnerability in authenticate_or_request_with_http_digest rubygem-actionpack: potential XSS vulnerability in select_tag prompt rubygem-actionpack: potential XSS vulnerability rubygem-actionpack: XSS Vulnerability in strip_tags rubygem-activerecord: find_by_* SQL Injection rubygem-activerecord: Unsafe Query Generation Risk in Ruby on Rails rubygem-activesupport: Multiple vulnerabilities in parameter parsing in ActionPack</p> https://cve.radiocsirt.org/vuln/rhsa-2013:0154