Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
VULNERABILITYAFFECTSTYPEPUBLISHED
  • H
Remote Code Execution (RCE)		git>=1.2.0, <1.13.0RubyGems10 Jan 2023
  • L
Cross-site Scripting (XSS)		inline_svg<1.7.2RubyGems8 Jan 2023
  • M
Information Exposure		pghero>=0.1.1, <3.1.0RubyGems5 Jan 2023
  • M
External Control of Assumed-Immutable Web Parameter		httparty<0.21.0RubyGems4 Jan 2023
  • L
Cross-site Scripting (XSS)		keynote<1.0.0RubyGems1 Jan 2023
  • C
Arbitrary Command Injection		printer>=0.1.0RubyGems1 Jan 2023
  • L
Cross-site Scripting (XSS)		oxidized-web<0.14.0RubyGems28 Dec 2022
  • M
Incorrect Privilege Assignment		text_helpers<1.1.0RubyGems22 Dec 2022
  • L
Regular Expression Denial of Service (ReDoS)		active_attr<0.15.3RubyGems19 Dec 2022
  • H
Uncontrolled Recursion		loofah>=2.2.0, <2.19.1RubyGems14 Dec 2022
  • M
Cross-site Scripting (XSS)		rails-html-sanitizer<1.4.4RubyGems14 Dec 2022
  • M
Cross-site Scripting (XSS)		rails-html-sanitizer>=1.0.3, <1.4.4RubyGems14 Dec 2022
  • H
Regular Expression Denial of Service (ReDoS)		rails-html-sanitizer<1.4.4RubyGems14 Dec 2022
  • H
Regular Expression Denial of Service (ReDoS)		loofah<2.19.1RubyGems14 Dec 2022
  • M
Cross-site Scripting (XSS)		rails-html-sanitizer<1.4.4RubyGems14 Dec 2022
  • M
Cross-site Scripting (XSS)		loofah>=2.1.0, <2.19.1RubyGems14 Dec 2022
  • H
Denial of Service (DoS)		google-protobuf>=3.16.0, <3.19.6>=3.20.0-rc-1, <3.20.3>=3.21.0-rc-1, <3.21.7RubyGems13 Dec 2022
  • H
Unchecked Return Value		nokogiri>=1.13.8, <1.13.10RubyGems8 Dec 2022
  • H
Resources Downloaded over Insecure Protocol		sinatra<2.2.3>=3.0.0, <3.0.4RubyGems29 Nov 2022
  • H
Improper Input Validation		cgi<0.1.0.2>=0.2.1, <0.2.2>=0.3.3, <0.3.5RubyGems20 Nov 2022
  • L
Improper Neutralization		dalli<3.2.3RubyGems20 Nov 2022
  • C
Integer Overflow or Wraparound		sha3<1.0.5RubyGems6 Nov 2022
  • L
Information Exposure		fluentd>=1.13.2, <1.15.3RubyGems2 Nov 2022
  • H
NULL Pointer Dereference		nokogiri<1.13.9RubyGems19 Oct 2022
  • M
Denial of Service (DoS)		sqlite3>=1.5.0, <1.5.1RubyGems19 Oct 2022
  • H
Privilege Escalation		vagrant>=0.0.0, <2.4.4RubyGems12 Oct 2022
  • M
Denial of Service (DoS)		fat_free_crm<0.20.1RubyGems9 Oct 2022
  • M
Denial of Service (DoS)		google-protobuf<3.16.3>=3.17.0.rc.1, <3.19.6>=3.20.0.rc.1, <3.20.3>=3.21.0.rc.1, <3.21.7RubyGems5 Oct 2022
  • M
Heap-based Buffer Overflow		psych<2.0.17RubyGems29 Sept 2022
  • M
Open Redirect		actionpack>=7.0.3, <7.0.4RubyGems28 Sept 2022