https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 17:17:46 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-182378 EUVD-2026-182378 https://cve.radiocsirt.org/vuln/euvd-2026-182378 https://cve.radiocsirt.org/vuln/fkie_cve-2013-0233 <p>Devise gem 2.2.x before 2.2.3, 2.1.x before 2.1.3, 2.0.x before 2.0.5, and 1.5.x before 1.5.4 for Ruby, when using certain databases, does not properly perform type conversion when performing database queries, which might allow remote attackers to cause incorrect results to be returned and bypass security checks via unknown vectors, as demonstrated by resetting passwords of arbitrary accounts.</p> <p>Devise gem 2.2.x before 2.2.3, 2.1.x before 2.1.3, 2.0.x before 2.0.5, and 1.5.x before 1.5.4 for Ruby, when using certain databases, does not properly perform type conversion when performing database queries, which might allow remote attackers to cause incorrect results to be returned and bypass security checks via unknown vectors, as demonstrated by resetting passwords of arbitrary accounts.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2013-0233 https://cve.radiocsirt.org/vuln/ghsa-jxhw-mg8m-2pj8 <p><strong>Affected:</strong> RubyGems: devise</p> <p>Devise gem 2.2.x before 2.2.3, 2.1.x before 2.1.3, 2.0.x before 2.0.5, and 1.5.x before 1.5.4 for Ruby, when using certain databases, does not properly perform type conversion when performing database queries, which might allow remote attackers to cause incorrect results to be returned and bypass security checks via unknown vectors, as demonstrated by resetting passwords of arbitrary accounts.</p> <p><strong>Affected:</strong> RubyGems: devise</p> <p>Devise gem 2.2.x before 2.2.3, 2.1.x before 2.1.3, 2.0.x before 2.0.5, and 1.5.x before 1.5.4 for Ruby, when using certain databases, does not properly perform type conversion when performing database queries, which might allow remote attackers to cause incorrect results to be returned and bypass security checks via unknown vectors, as demonstrated by resetting passwords of arbitrary accounts.</p> https://cve.radiocsirt.org/vuln/ghsa-jxhw-mg8m-2pj8 https://cve.radiocsirt.org/vuln/gsd-2013-0233 gsd-2013-0233 https://cve.radiocsirt.org/vuln/gsd-2013-0233 https://cve.radiocsirt.org/vuln/ubuntu-cve-2013-0233 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: ruby-devise, Ubuntu:18.04:LTS: ruby-devise</p> <p>Devise gem 2.2.x before 2.2.3, 2.1.x before 2.1.3, 2.0.x before 2.0.5, and 1.5.x before 1.5.4 for Ruby, when using certain databases, does not properly perform type conversion when performing database queries, which might allow remote attackers to cause incorrect results to be returned and bypass security checks via unknown vectors, as demonstrated by resetting passwords of arbitrary accounts.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: ruby-devise, Ubuntu:18.04:LTS: ruby-devise</p> <p>Devise gem 2.2.x before 2.2.3, 2.1.x before 2.1.3, 2.0.x before 2.0.5, and 1.5.x before 1.5.4 for Ruby, when using certain databases, does not properly perform type conversion when performing database queries, which might allow remote attackers to cause incorrect results to be returned and bypass security checks via unknown vectors, as demonstrated by resetting passwords of arbitrary accounts.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2013-0233