Feed live

rails CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,380

All time

Critical · Active

12,007

CVSS ≥ 9.0

New · 14 days

2,199

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 31–40 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2014-125054	medium	4.3/10	koroket RedditOnRails Vote access control	Jan 7, 2023 3y ago
CVE-2014-125033	low	3.5/10	rails-cv-app uploaded_files_controller.rb path traversal	Jan 2, 2023 3y ago
CVE-2022-23520	medium	6.1/10	rails-html-sanitizer contains an incomplete fix for an XSS vulnerability	Dec 14, 2022 3y ago
CVE-2022-23519	high	7.2/10	Possible XSS vulnerability with certain configurations of rails-html-sanitizer	Dec 14, 2022 3y ago
CVE-2022-23518	medium	6.1/10	Improper neutralization of data URIs allows XSS in rails-html-sanitizer	Dec 14, 2022 3y ago
CVE-2022-23517	high	7.5/10	Inefficient Regular Expression Complexity in rails-html-sanitizer	Dec 14, 2022 3y ago
CVE-2022-41923	critical	9.1/10	Grails Spring Security Core plugin vulnerable to privilege escalation	Nov 23, 2022 3y ago
CVE-2022-3704	low	3.5/10	Ruby on Rails _table.html.erb cross site scripting	Oct 26, 2022 3y ago
CVE-2022-23634	high	8.0/10	Information Exposure when using Puma with Rails	Feb 11, 2022 4y ago
CVE-2021-41263	high	8.3/10	Secure/signed cookies share secrets between sites in rails_multisite	Nov 15, 2021 4y ago