Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
VULNERABILITYAFFECTSTYPEPUBLISHED
  • H
Regression in JWT Signature Validation		omniauth-auth0>=2.3.0, <2.4.1RubyGems23 Oct 2020
  • H
Authentication Bypass		spree>=3.7.0, <3.7.11>=4.0.0, <4.0.4>=4.1.0, <4.1.11RubyGems21 Oct 2020
  • H
Cross-site Scripting (XSS)		actionpack>=6.0.0, <6.0.3.4RubyGems8 Oct 2020
  • M
Timing Attack		shrine<3.3.0RubyGems6 Oct 2020
  • H
HTTP Request Smuggling		webrick<1.5.1>=1.6.0, <1.6.1RubyGems29 Sept 2020
  • H
Man-in-the-Middle (MitM)		oauth<0.5.5RubyGems25 Sept 2020
  • H
Cross-site Scripting (XSS)		gon<6.4.0RubyGems24 Sept 2020
  • M
Cross-site Scripting (XSS)		actionview<5.2.4.4>=6.0.0.0, <6.0.3.3RubyGems10 Sept 2020
  • M
Improper Input Validation		personnummer<3.0.1RubyGems10 Sept 2020
  • H
Directory Traversal		rubygems-update>=2.7.6, <2.7.9>=3.0.0, <3.0.3RubyGems19 Aug 2020
  • H
Arbitrary Code Injection		rubygems-update>=2.6.0, <2.7.9>=3.0.0, <3.0.2RubyGems19 Aug 2020
  • H
Arbitrary Code Injection		rubygems-update>=2.6.0, <2.7.9>=3.0.0, <3.0.3RubyGems19 Aug 2020
  • H
Arbitrary Code Injection		rubygems-update>=2.6.0, <2.7.9>=3.0.0, <3.0.3RubyGems18 Aug 2020
  • H
CSS Injection		chartkick<3.4.0RubyGems6 Aug 2020
  • H
Cross-site Request Forgery (CSRF)		field_test<0.4.0RubyGems5 Aug 2020
  • H
Cross-site Request Forgery (CSRF)		pghero<2.7.0RubyGems5 Aug 2020
  • H
Improper Input Validation		solidus_frontend>=2.8.0, <2.8.6>=2.9.0, <2.9.6>=2.10.0, <2.10.2RubyGems5 Aug 2020
  • H
Improper Input Validation		solidus_api>=2.8.0, <2.8.6>=2.9.0, <2.9.6>=2.10.0, <2.10.2RubyGems5 Aug 2020
  • H
Improper Certificate Validation		faye-websocket<0.11.0RubyGems2 Aug 2020
  • H
Remote Code Execution (RCE)		kramdown<2.3.0RubyGems19 Jul 2020
  • H
Improper Authorization		actionpack>=6.0.0, <6.0.3.2RubyGems17 Jun 2020
  • C
Cross-site Scripting (XSS)		sanitize>=3.0.0, <5.2.1RubyGems17 Jun 2020
  • M
Cross-site Request Forgery (CSRF)		rack<2.1.4>=2.2.0, <2.2.3RubyGems16 Jun 2020
  • M
HTTP Request Smuggling		iodine<0.7.39RubyGems8 Jun 2020
  • M
Cross-site Scripting (XSS)		elastic-app-search<7.7.0RubyGems4 Jun 2020
  • M
HTTP Request Smuggling		agoo<2.14.0RubyGems3 Jun 2020
  • M
HTTP Request Smuggling		goliath>=0.0.0RubyGems3 Jun 2020
  • H
Regular Expression Denial of Service (ReDoS)		websocket-extensions<0.1.5RubyGems2 Jun 2020
  • M
Cross-site Scripting (XSS)		kaminari<1.2.1RubyGems29 May 2020
  • H
HTTP Request Smuggling		reel>=0.0.0RubyGems29 May 2020