https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 14:55:34 +0000 https://cve.radiocsirt.org/vuln/bdu:2016-00811 bdu:2016-00811 https://cve.radiocsirt.org/vuln/bdu:2016-00811 https://cve.radiocsirt.org/vuln/certfr-2016-avi-037 certfr-2016-avi-037 https://cve.radiocsirt.org/vuln/certfr-2016-avi-037 https://cve.radiocsirt.org/vuln/cnvd-2016-00967 cnvd-2016-00967 https://cve.radiocsirt.org/vuln/cnvd-2016-00967 https://cve.radiocsirt.org/vuln/euvd-2026-81516 EUVD-2026-81516 https://cve.radiocsirt.org/vuln/euvd-2026-81516 https://cve.radiocsirt.org/vuln/fkie_cve-2016-0751 <p>actionpack/lib/action_dispatch/http/mime_type.rb in Action Pack in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 does not properly restrict use of the MIME type cache, which allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP Accept header.</p> <p>actionpack/lib/action_dispatch/http/mime_type.rb in Action Pack in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 does not properly restrict use of the MIME type cache, which allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP Accept header.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-0751 https://cve.radiocsirt.org/vuln/ghsa-ffpv-c4hm-3x6v <p><strong>Affected:</strong> RubyGems: actionpack</p> <p>actionpack/lib/action_dispatch/http/mime_type.rb in Action Pack in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 does not properly restrict use of the MIME type cache, which allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP Accept header.</p> <p><strong>Affected:</strong> RubyGems: actionpack</p> <p>actionpack/lib/action_dispatch/http/mime_type.rb in Action Pack in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 does not properly restrict use of the MIME type cache, which allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP Accept header.</p> https://cve.radiocsirt.org/vuln/ghsa-ffpv-c4hm-3x6v https://cve.radiocsirt.org/vuln/gsd-2016-0751 gsd-2016-0751 https://cve.radiocsirt.org/vuln/gsd-2016-0751 https://cve.radiocsirt.org/vuln/rhsa-2016:0296 <p>rubygem-actionpack: Timing attack vulnerability in basic authentication in Action Controller rubygem-activerecord: Nested attributes rejection proc bypass in Active Record rubygem-actionpack: Object leak vulnerability for wildcard controller routes in Action Pack rubygem-actionpack: possible object leak and denial of service attack in Action Pack rubygem-actionpack: directory traversal flaw in Action View rubygem-activerecord: possible input validation circumvention in Active Model</p> <p>rubygem-actionpack: Timing attack vulnerability in basic authentication in Action Controller rubygem-activerecord: Nested attributes rejection proc bypass in Active Record rubygem-actionpack: Object leak vulnerability for wildcard controller routes in Action Pack rubygem-actionpack: possible object leak and denial of service attack in Action Pack rubygem-actionpack: directory traversal flaw in Action View rubygem-activerecord: possible input validation circumvention in Active Model</p> https://cve.radiocsirt.org/vuln/rhsa-2016:0296 https://cve.radiocsirt.org/vuln/suse-su-2016:0457-1 <p>Security update for rubygem-actionpack-4_2</p> <p>Security update for rubygem-actionpack-4_2</p> https://cve.radiocsirt.org/vuln/suse-su-2016:0457-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-0751 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: rails</p> <p>actionpack/lib/action_dispatch/http/mime_type.rb in Action Pack in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 does not properly restrict use of the MIME type cache, which allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP Accept header.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: rails</p> <p>actionpack/lib/action_dispatch/http/mime_type.rb in Action Pack in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 does not properly restrict use of the MIME type cache, which allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP Accept header.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-0751 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1085 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Ruby on Rails ausnutzen, um Sicherheitsfunktionen zu umgehen, um Dateien zu manipulieren oder um einen Denial of Service Zustand herbeizuführen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Ruby on Rails ausnutzen, um Sicherheitsfunktionen zu umgehen, um Dateien zu manipulieren oder um einen Denial of Service Zustand herbeizuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1085