Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
VULNERABILITYAFFECTSTYPEPUBLISHED
  • H
Directory Traversal		openc3<5.19.0RubyGems6 Oct 2024
  • M
Cross-site Scripting (XSS)		openc3<5.19.0RubyGems6 Oct 2024
  • M
Cross-site Scripting (XSS)		decidim-proposals<0.27.8RubyGems2 Oct 2024
  • M
Cross-site Scripting (XSS)		decidim-meetings<0.27.8RubyGems2 Oct 2024
  • M
Cross-site Scripting (XSS)		decidim-initiatives<0.27.8RubyGems2 Oct 2024
  • M
Cross-site Scripting (XSS)		decidim-sortitions<0.27.8RubyGems2 Oct 2024
  • M
Cross-site Scripting (XSS)		decidim-core<0.27.8RubyGems2 Oct 2024
  • M
Cross-site Scripting (XSS)		decidim-debates<0.27.8RubyGems2 Oct 2024
  • M
Cross-site Scripting (XSS)		decidim<0.27.8RubyGems2 Oct 2024
  • M
HTTP Request Smuggling		webrick<1.8.2RubyGems22 Sept 2024
  • H
HTTP Request Smuggling		puma<5.6.9>=6.0.0, <6.4.3RubyGems20 Sept 2024
  • M
Cross-site Scripting (XSS)		camaleon_cms<2.8.1RubyGems19 Sept 2024
  • H
Path Traversal		camaleon_cms<2.8.1RubyGems19 Sept 2024
  • H
Path Traversal		camaleon_cms<2.8.1RubyGems19 Sept 2024
  • H
Path Traversal		camaleon_cms>=2.8.0, <2.8.1RubyGems19 Sept 2024
  • M
Insufficient Entropy		devise-two-factor>=2.2.0, <6.0.0RubyGems18 Sept 2024
  • M
Cross-site Scripting (XSS)		decidim-admin<0.27.7>=0.28.0, <0.28.2RubyGems17 Sept 2024
  • M
Cross-site Scripting (XSS)		sidekiq-unique-jobs<7.1.33>=8.0.0, <8.0.7RubyGems17 Sept 2024
  • M
Cross-site Scripting (XSS)		decidim-core<0.27.7RubyGems17 Sept 2024
  • M
Cross-site Scripting (XSS)		decidim-admin<0.27.7RubyGems17 Sept 2024
  • H
Improper Verification of Cryptographic Signature		omniauth-saml<1.10.5>=2.0.0, <2.1.2>=2.2.0, <2.2.1RubyGems11 Sept 2024
  • H
Improper Verification of Cryptographic Signature		ruby-saml<1.12.3>=1.13.0, <1.17.0RubyGems11 Sept 2024
  • H
Incorrect Default Permissions		request_store>=1.3.2, <1.4.0RubyGems25 Aug 2024
  • H
Improper Restriction of XML External Entity Reference ('XXE')		rexml<3.3.6RubyGems23 Aug 2024
  • M
Uncontrolled Resource Consumption ('Resource Exhaustion')		fugit<1.11.1RubyGems20 Aug 2024
  • C
Command Injection		sequenceserver<3.1.2RubyGems14 Aug 2024
  • M
Expected Behavior Violation		grpc<1.58.3>=1.59.0, <1.59.5>=1.60.0, <1.60.2>=1.61.0, <1.61.3>=1.62.0, <1.62.3>=1.63.0, <1.63.2>=1.64.0, <1.64.3>=1.65.0, <1.65.4RubyGems6 Aug 2024
  • M
Cross-site Scripting (XSS)		bootstrap-sass>=2.0.0RubyGems6 Aug 2024
  • M
Cross-site Scripting (XSS)		bootstrap<5.0.0-beta1RubyGems6 Aug 2024
  • M
Cross-site Scripting (XSS)		bootstrap-sass>=2.0.0RubyGems6 Aug 2024