检索 GitHub Advisory Database 中的已审查与未审查安全公告。
| 公告编号 | 摘要 | 级别 | 生态 / 软件包 | 审查状态 | 发布时间 | 修改时间 |
|---|---|---|---|---|---|---|
| GHSA-GPPP-5XC5-WFPX CVE-2013-0155 | Active Record allows bypassing of database-query restrictions | 中危 | RubyGemsactiverecord | 已审查 | 2017-10-25 02:33 | 2023-08-26 07:11 |
| GHSA-GH2W-J7CX-2664 CVE-2012-6496 | Active Record contains SQL Injection |
当前筛选结果 35,190 条 · 时间按北京时间显示
| 高危 |
RubyGemsactiverecord |
| 已审查 |
| 2017-10-25 02:33 |
| 2025-01-22 00:47 |
| GHSA-G89M-3WJW-H857 CVE-2012-3865 | Puppet vulnerable to Path Traversal | 低危 | RubyGemspuppet | 已审查 | 2017-10-25 02:33 | 2023-05-13 01:09 |
| GHSA-G266-3CRH-H7GJ CVE-2013-1911 | ldoce Gem Arbitrary Command Execution | 中危 | RubyGemsldoce | 已审查 | 2017-10-25 02:33 | 2023-08-30 00:28 |
| GHSA-FHJ9-CJJH-27VM CVE-2013-0277 | Active Record contains deserialization of arbitrary YAML | 严重 | RubyGemsactiverecord | 已审查 | 2017-10-25 02:33 | 2023-03-15 06:15 |
| GHSA-FGMX-8H93-26FH CVE-2012-6134 | omniauth-oauth2 Cross-Site Request Forgery vulnerability | 中危 | RubyGemsomniauth-oauth2 | 已审查 | 2017-10-25 02:33 | 2023-01-26 07:20 |
| GHSA-F7P5-W2CR-7CP7 CVE-2013-3567 | Puppet Improper Input Validation vulnerability | 高危 | RubyGemspuppet | 已审查 | 2017-10-25 02:33 | 2023-05-13 01:27 |
| GHSA-CJ43-9H3W-V976 CVE-2013-4761 | Puppet allows remote attackers to execute arbitrary Ruby programs from the master via the resource_type service | 中危 | RubyGemspuppet | 已审查 | 2017-10-25 02:33 | 2022-10-05 05:44 |
| GHSA-CF36-985G-V73C CVE-2013-4562 | omniauth-facebook Cross-Site Request Forgery vulnerability | 中危 | RubyGemsomniauth-facebook | 已审查 | 2017-10-25 02:33 | 2023-01-24 05:12 |
| GHSA-C43V-HRMG-56R4 CVE-2013-4457 | Cocaine Gem OS Command Injection vulnerability | 中危 | RubyGemscocaine | 已审查 | 2017-10-25 02:33 | 2023-09-06 05:12 |
| GHSA-9QJ7-JVG4-QR2X CVE-2013-2119 | Phusion Passenger Denial of Service | 中危 | RubyGemspassenger | 已审查 | 2017-10-25 02:33 | 2023-07-06 02:50 |
| GHSA-9HX9-W2J6-RW76 CVE-2013-2105 | Script Injection in Show In Browser gem | 中危 | RubyGemsshow_in_browser | 已审查 | 2017-10-25 02:33 | 2025-04-14 07:26 |
| GHSA-9H36-4JF2-HX53 CVE-2013-1802 | extlib does not properly restrict casts of string values | 高危 | RubyGemsextlib | 已审查 | 2017-10-25 02:33 | 2023-01-24 04:56 |
| GHSA-9C2J-593Q-3G82 CVE-2013-1856 | activesupport Improper Input Validation vulnerability | 中危 | RubyGemsactivesupport | 已审查 | 2017-10-25 02:33 | 2023-06-02 03:51 |
| GHSA-99CH-8MVP-G7M5 CVE-2013-1948 | md2pdf allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename | 严重 | RubyGemsmd2pdf | 已审查 | 2017-10-25 02:33 | 2023-01-24 00:37 |
| GHSA-98MF-8F57-64QF CVE-2012-3463 | actionpack Cross-site Scripting vulnerability | 中危 | RubyGemsactionpack | 已审查 | 2017-10-25 02:33 | 2023-01-24 00:34 |
| GHSA-8JXJ-9R5F-W3M2 CVE-2012-3866 | Puppet allows local users to obtain sensitive configuration information | 低危 | RubyGemspuppet | 已审查 | 2017-10-25 02:33 | 2023-05-13 01:05 |
| GHSA-85R7-W5MV-C849 CVE-2013-0262 | Rack Vulnerable to Path Traversal | 中危 | RubyGemsrack | 已审查 | 2017-10-25 02:33 | 2023-08-26 07:30 |
| GHSA-7G65-GHRG-HPF5 CVE-2012-3465 | actionpack Cross-site Scripting vulnerability | 中危 | RubyGemsactionpack | 已审查 | 2017-10-25 02:33 | 2025-01-21 23:21 |
| GHSA-7FQJ-CG79-F2PV CVE-2013-1898 | Thumbshooter vulnerable to Code Injection | 高危 | RubyGemsthumbshooter | 已审查 | 2017-10-25 02:33 | 2023-08-28 21:54 |
| GHSA-78J3-7WPM-QHVP CVE-2013-1947 | Shell Metacharacter Injection in kelredd-pruview | 严重 | RubyGemskelredd-pruview | 已审查 | 2017-10-25 02:33 | 2023-07-06 03:12 |
| GHSA-6C8P-QPHV-668V CVE-2013-1812 | Denial of service in ruby-openid | 中危 | RubyGemsruby-openid | 已审查 | 2017-10-25 02:33 | 2023-06-10 04:18 |
| GHSA-699M-MCJM-9CW8 CVE-2013-4491 | actionpack vulnerable to Cross-site Scripting | 中危 | RubyGemsactionpack | 已审查 | 2017-10-25 02:33 | 2023-08-26 03:05 |
| GHSA-574Q-FXFJ-WV6H CVE-2013-1655 | Puppet Improper Input Validation vulnerability | 高危 | RubyGemspuppet | 已审查 | 2017-10-25 02:33 | 2023-05-13 01:26 |
| GHSA-4936-RJ25-6WM6 CVE-2013-0285 | nori contains Improper Input Validation | 高危 | RubyGemsnori | 已审查 | 2017-10-25 02:33 | 2023-01-21 06:08 |