Most recent entries from all

bdu:2016-00814

certfr-2016-avi-037 — De multiples vulnérabilités ont été corrigées dans Ruby On Rails. Certaines d'entre elles p…

certfr-2016-avi-037

cnvd-2016-00965

EUVD-2026-95074

fkie_cve-2015-7577

activerecord/lib/active_record/nested_attributes.rb in Active Record in Ruby on Rails 3.1.x and 3.2.x before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 does not properly implement a certain destroy option, which allows remote attackers to bypass intended change restrictions by leveraging use of the nested attributes feature.

GHSA-xrr6-3pc4-m447 — Active Record Improper Access Control

Affected: RubyGems: activerecord

`activerecord/lib/active_record/nested_attributes.rb` in Active Record in Ruby on Rails 3.1.x and 3.2.x before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 does not properly implement a certain destroy option, which allows remote attackers to bypass intended change restrictions by leveraging use of the nested attributes feature.

gsd-2015-7577

RHSA-2016:0296 — Red Hat Security Advisory: rh-ror41 security update

rubygem-actionpack: Timing attack vulnerability in basic authentication in Action Controller rubygem-activerecord: Nested attributes rejection proc bypass in Active Record rubygem-actionpack: Object leak vulnerability for wildcard controller routes in Action Pack rubygem-actionpack: possible object leak and denial of service attack in Action Pack rubygem-actionpack: directory traversal flaw in Action View rubygem-activerecord: possible input validation circumvention in Active Model

SUSE-SU-2016:0458-1 — Security update for rubygem-activerecord-4_2

Security update for rubygem-activerecord-4_2

Withdrawn: UBUNTU-CVE-2015-7577

Withdrawn by the publisher.

Affected: Ubuntu:16.04:LTS: rails

WID-SEC-W-2025-1085 — Ruby on Rails: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Ruby on Rails ausnutzen, um Sicherheitsfunktionen zu umgehen, um Dateien zu manipulieren oder um einen Denial of Service Zustand herbeizuführen.