https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 06:53:36 +0000 https://cve.radiocsirt.org/vuln/bdu:2016-00577 bdu:2016-00577 https://cve.radiocsirt.org/vuln/bdu:2016-00577 https://cve.radiocsirt.org/vuln/certfr-2016-avi-037 certfr-2016-avi-037 https://cve.radiocsirt.org/vuln/certfr-2016-avi-037 https://cve.radiocsirt.org/vuln/cnvd-2016-00968 cnvd-2016-00968 https://cve.radiocsirt.org/vuln/cnvd-2016-00968 https://cve.radiocsirt.org/vuln/euvd-2026-256406 EUVD-2026-256406 https://cve.radiocsirt.org/vuln/euvd-2026-256406 https://cve.radiocsirt.org/vuln/fkie_cve-2016-0752 <p>Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application&#39;s unrestricted use of the render method and providing a .. (dot dot) in a pathname.</p> <p>Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application&#39;s unrestricted use of the render method and providing a .. (dot dot) in a pathname.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-0752 https://cve.radiocsirt.org/vuln/ghsa-xrr4-p6fq-hjg7 <p><strong>Affected:</strong> RubyGems: actionview, RubyGems: actionpack</p> <p>Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application&#39;s unrestricted use of the render method and providing a `..` (dot dot) in a pathname.</p> <p><strong>Affected:</strong> RubyGems: actionview, RubyGems: actionpack</p> <p>Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application&#39;s unrestricted use of the render method and providing a `..` (dot dot) in a pathname.</p> https://cve.radiocsirt.org/vuln/ghsa-xrr4-p6fq-hjg7 https://cve.radiocsirt.org/vuln/gsd-2016-0752 gsd-2016-0752 https://cve.radiocsirt.org/vuln/gsd-2016-0752 https://cve.radiocsirt.org/vuln/rhsa-2016:0296 <p>rubygem-actionpack: Timing attack vulnerability in basic authentication in Action Controller rubygem-activerecord: Nested attributes rejection proc bypass in Active Record rubygem-actionpack: Object leak vulnerability for wildcard controller routes in Action Pack rubygem-actionpack: possible object leak and denial of service attack in Action Pack rubygem-actionpack: directory traversal flaw in Action View rubygem-activerecord: possible input validation circumvention in Active Model</p> <p>rubygem-actionpack: Timing attack vulnerability in basic authentication in Action Controller rubygem-activerecord: Nested attributes rejection proc bypass in Active Record rubygem-actionpack: Object leak vulnerability for wildcard controller routes in Action Pack rubygem-actionpack: possible object leak and denial of service attack in Action Pack rubygem-actionpack: directory traversal flaw in Action View rubygem-activerecord: possible input validation circumvention in Active Model</p> https://cve.radiocsirt.org/vuln/rhsa-2016:0296 https://cve.radiocsirt.org/vuln/suse-su-2016:0456-1 <p>Security update for rubygem-actionview-4_2</p> <p>Security update for rubygem-actionview-4_2</p> https://cve.radiocsirt.org/vuln/suse-su-2016:0456-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-0752 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: rails</p> <p>Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application&#39;s unrestricted use of the render method and providing a .. (dot dot) in a pathname.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: rails</p> <p>Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application&#39;s unrestricted use of the render method and providing a .. (dot dot) in a pathname.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-0752 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1085 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Ruby on Rails ausnutzen, um Sicherheitsfunktionen zu umgehen, um Dateien zu manipulieren oder um einen Denial of Service Zustand herbeizuführen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Ruby on Rails ausnutzen, um Sicherheitsfunktionen zu umgehen, um Dateien zu manipulieren oder um einen Denial of Service Zustand herbeizuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1085