Vulnerability index

Browse CVEs

5 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

MEDIUM 5.4 CVE-2016-3098 Cross-site request forgery (CSRF) vulnerability in administrate 0.1.4 and earlier allows remote attackers to hijack the user's OAuth autorization cod…

Administrate 0.1.5+ Fix from $1,6002022-08-05 MEDIUM 6.1 CVE-2021-23435 This affects the package clearance before 2.5.0. The vulnerability can be possible when users are able to set the value of session[:return_to]. If th… Clearance 2.5.0+ Fix from $1,6002021-09-12 HIGH 8.1 CVE-2020-5257 In Administrate (rubygem) before version 0.13.0, when sorting by attributes on a dashboard, the direction parameter was not validated before being in…

Administrate 0.13.0+ Fix from $1,9502020-03-13 CRITICAL 9.8 CVE-2017-0889 Paperclip ruby gem version 3.1.4 and later suffers from a Server-SIde Request Forgery (SSRF) vulnerability in the Paperclip::UriAdapter class. Attack…

Paperclip 5.2.0+ Fix from $2,3002017-11-13 MEDIUM 6.8 CVE-2013-4457 The Cocaine gem 0.4.0 through 0.5.2 for Ruby allows context-dependent attackers to execute arbitrary commands via a crafted has object, related to re…

Cocaine Mitigation only Fix from $1,6002013-11-02