Feed live

rails CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,499

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

707

Newly disclosed

Feed last synced

5 hrs ago

Data freshness

Showing 31–37 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2022-23519	high	7.2/10	Possible XSS vulnerability with certain configurations of rails-html-sanitizer	Dec 14, 2022 3y ago
CVE-2022-23518	medium	6.1/10	Improper neutralization of data URIs allows XSS in rails-html-sanitizer	Dec 14, 2022 3y ago
CVE-2022-23517	high	7.5/10	Inefficient Regular Expression Complexity in rails-html-sanitizer	Dec 14, 2022 3y ago
CVE-2022-41923	critical	9.1/10	Grails Spring Security Core plugin vulnerable to privilege escalation	Nov 23, 2022 3y ago
CVE-2022-3704	low	3.5/10	Ruby on Rails _table.html.erb cross site scripting	Oct 26, 2022 3y ago
CVE-2022-23634	high	8.0/10	Information Exposure when using Puma with Rails	Feb 11, 2022 4y ago
CVE-2021-41263	high	8.3/10	Secure/signed cookies share secrets between sites in rails_multisite	Nov 15, 2021 4y ago