Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
VULNERABILITYAFFECTSTYPEPUBLISHED
  • M
Information Exposure		railties>=5.2.0, <6.1.7.5>=7.0.0, <7.0.7.1RubyGems23 Aug 2023
  • H
HTTP Request Smuggling		puma<5.6.7>=6.0.0, <6.3.1RubyGems19 Aug 2023
  • H
Excessive Iteration		grpc<1.53.2>=1.54.0, <1.54.3>=1.55.0, <1.55.2>=1.56.0, <1.56.2RubyGems9 Aug 2023
  • M
HTTP Request Smuggling		protocol-http1<0.15.1RubyGems4 Aug 2023
  • M
Cross-site Scripting (XSS)		alchemy_cms>=0.0.0RubyGems2 Aug 2023
  • M
Information Exposure		logstash-core<5.0.1RubyGems1 Aug 2023
  • M
Information Exposure		logstash-core<2.3.4RubyGems1 Aug 2023
  • M
Regular Expression Denial of Service (ReDoS)		uri<0.10.3>=0.11.0, <0.11.2>=0.12.0, <0.12.2RubyGems16 Jul 2023
  • H
Directory Traversal		rswag<2.10.1RubyGems16 Jul 2023
  • H
Insecure Defaults		ransack<4.0.0RubyGems14 Jul 2023
  • M
Denial of Service (DoS)		commonmarker<0.23.10RubyGems14 Jul 2023
  • H
Cross-site Scripting (XSS)		decidim-core>=0.14.0, <0.26.6>=0.27.0, <0.27.3RubyGems12 Jul 2023
  • H
Cross-site Scripting (XSS)		decidim>=0.14.0, <0.26.6>=0.27.0, <0.27.3RubyGems12 Jul 2023
  • H
Information Exposure		decidim-meetings>=0.27.0, <0.27.3RubyGems12 Jul 2023
  • H
Information Exposure		decidim>=0.27.0, <0.27.3RubyGems12 Jul 2023
  • H
Cross-site Scripting (XSS)		decidim>=0.25.0, <0.26.6>=0.27.0, <0.27.3RubyGems12 Jul 2023
  • H
Cross-site Scripting (XSS)		decidim-core>=0.25.0, <0.26.6>=0.27.0, <0.27.3RubyGems12 Jul 2023
  • H
Cross-site Scripting (XSS)		sanitize>=3.0.0, <6.0.2RubyGems7 Jul 2023
  • L
Cross-site Scripting (XSS)		spina<2.15.1RubyGems29 Jun 2023
  • M
Cross-site Scripting (XSS)		actionpack<6.1.7.4>=7.0.0.0, <7.0.5.1RubyGems28 Jun 2023
  • M
Improper Authentication		doorkeeper<5.6.6RubyGems13 Jun 2023
  • H
Deserialization of Untrusted Data		kredis<1.3.0.1RubyGems11 Jun 2023
  • H
Information Exposure		logstash-core<1.5.3RubyGems8 Jun 2023
  • L
Information Exposure		facter>=1.6.0, <2.4.1RubyGems8 Jun 2023
  • M
Improper Certificate Validation		logstash-core<1.5.4RubyGems8 Jun 2023
  • M
Regular Expression Denial of Service (ReDoS)		redcloth<4.3.3RubyGems7 Jun 2023
  • M
Cross-site Scripting (XSS)		avo<2.33.3RubyGems6 Jun 2023
  • H
Improper Input Validation		avo<2.33.3RubyGems6 Jun 2023
  • C
Arbitrary Code Execution		zipruby<1.3.1RubyGems28 May 2023
  • C
Remote Code Execution (RCE)		camaleon_cms<2.7.4RubyGems28 May 2023