https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 13:49:32 +0000 https://cve.radiocsirt.org/vuln/bdu:2016-00664 bdu:2016-00664 https://cve.radiocsirt.org/vuln/bdu:2016-00664 https://cve.radiocsirt.org/vuln/certfr-2016-avi-037 certfr-2016-avi-037 https://cve.radiocsirt.org/vuln/certfr-2016-avi-037 https://cve.radiocsirt.org/vuln/cnvd-2016-00969 cnvd-2016-00969 https://cve.radiocsirt.org/vuln/cnvd-2016-00969 https://cve.radiocsirt.org/vuln/euvd-2026-81562 EUVD-2026-81562 https://cve.radiocsirt.org/vuln/euvd-2026-81562 https://cve.radiocsirt.org/vuln/fkie_cve-2016-0753 <p>Active Model in Ruby on Rails 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 supports the use of instance-level writers for class accessors, which allows remote attackers to bypass intended validation steps via crafted parameters.</p> <p>Active Model in Ruby on Rails 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 supports the use of instance-level writers for class accessors, which allows remote attackers to bypass intended validation steps via crafted parameters.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-0753 https://cve.radiocsirt.org/vuln/ghsa-543v-gj2c-r3ch <p><strong>Affected:</strong> RubyGems: activemodel</p> <p>Active Model in Ruby on Rails 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 supports the use of instance-level writers for class accessors, which allows remote attackers to bypass intended validation steps via crafted parameters.</p> <p><strong>Affected:</strong> RubyGems: activemodel</p> <p>Active Model in Ruby on Rails 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 supports the use of instance-level writers for class accessors, which allows remote attackers to bypass intended validation steps via crafted parameters.</p> https://cve.radiocsirt.org/vuln/ghsa-543v-gj2c-r3ch https://cve.radiocsirt.org/vuln/gsd-2016-0753 gsd-2016-0753 https://cve.radiocsirt.org/vuln/gsd-2016-0753 https://cve.radiocsirt.org/vuln/rhsa-2016:0296 <p>rubygem-actionpack: Timing attack vulnerability in basic authentication in Action Controller rubygem-activerecord: Nested attributes rejection proc bypass in Active Record rubygem-actionpack: Object leak vulnerability for wildcard controller routes in Action Pack rubygem-actionpack: possible object leak and denial of service attack in Action Pack rubygem-actionpack: directory traversal flaw in Action View rubygem-activerecord: possible input validation circumvention in Active Model</p> <p>rubygem-actionpack: Timing attack vulnerability in basic authentication in Action Controller rubygem-activerecord: Nested attributes rejection proc bypass in Active Record rubygem-actionpack: Object leak vulnerability for wildcard controller routes in Action Pack rubygem-actionpack: possible object leak and denial of service attack in Action Pack rubygem-actionpack: directory traversal flaw in Action View rubygem-activerecord: possible input validation circumvention in Active Model</p> https://cve.radiocsirt.org/vuln/rhsa-2016:0296 https://cve.radiocsirt.org/vuln/suse-su-2016:0432-1 <p>Security update for rubygem-activemodel-4_2</p> <p>Security update for rubygem-activemodel-4_2</p> https://cve.radiocsirt.org/vuln/suse-su-2016:0432-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-0753 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: rails</p> <p>Active Model in Ruby on Rails 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 supports the use of instance-level writers for class accessors, which allows remote attackers to bypass intended validation steps via crafted parameters.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: rails</p> <p>Active Model in Ruby on Rails 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 supports the use of instance-level writers for class accessors, which allows remote attackers to bypass intended validation steps via crafted parameters.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-0753 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1085 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Ruby on Rails ausnutzen, um Sicherheitsfunktionen zu umgehen, um Dateien zu manipulieren oder um einen Denial of Service Zustand herbeizuführen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Ruby on Rails ausnutzen, um Sicherheitsfunktionen zu umgehen, um Dateien zu manipulieren oder um einen Denial of Service Zustand herbeizuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1085