Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:11217
HistoryJan 15, 2019 - 8:58 a.m.

Multiple Cross-site Scripting (XSS) Vulnerabilities

2019-01-1508:58:42
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
15

0.002 Low

EPSS

Percentile

59.0%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in actionpack/lib/action_view/helpers/number_helper.rb in Ruby on Rails before 3.2.17, 4.0.x before 4.0.3, and 4.1.x before 4.1.0.beta2 allow remote attackers to inject arbitrary web script or HTML via the (1) format, (2) negative_format, or (3) units parameter to the (a) number_to_currency, (b) number_to_percentage, or © number_to_human helper

Related

cvelist 1
github 1
cve 1
nvd 1
ubuntucve 1
debiancve 1
prion 1
osv 2
rubygems 1
nessus 5
redhat 2
centos 1
fedora 6
openvas 12
mageia 1
securityvulns 2
debian 1
veracode 1
cvelist
cvelist
CVE-2014-0081
2014-02-20 11:00:00
github
github
Rails vulnerable to Cross-site Scripting
2017-10-24 18:33:36
cve
cve
CVE-2014-0081
2014-02-20 15:27:09
nvd
nvd
CVE-2014-0081
2014-02-20 15:27:09
ubuntucve
ubuntucve
CVE-2014-0081
2014-02-20 00:00:00
debiancve
debiancve
CVE-2014-0081
2014-02-20 15:27:09
prion
prion
Cross site scripting
2014-02-20 15:27:00
osv
osv
Rails vulnerable to Cross-site Scripting
2017-10-24 18:33:36
ruby-actionpack-3.2 - security update
2014-05-16 00:00:00
rubygems
rubygems
CVE-2014-0081 rubygem-actionpack: number_to_currency, number_to_percentage and number_to_human XSS vulnerability
2014-02-17 20:00:00
nessus
nessus
openSUSE Security Update : rubygem-actionpack-3_2 (openSUSE-SU-2014:0295-1)
2014-06-13 00:00:00
CentOS 6 : ruby193-rubygem-actionpack (CESA-2014:0306)
2014-03-18 00:00:00
Fedora 20 : rubygem-actionpack-4.0.0-3.fc20 / rubygem-activerecord-4.0.0-2.fc20 (2014-3169)
2014-03-11 00:00:00
redhat
redhat
(RHSA-2014:0306) Moderate: ruby193-rubygem-actionpack security update
2014-03-17 00:00:00
(RHSA-2014:0215) Critical: cfme security, bug fix, and enhancement update
2014-03-11 00:00:00
centos
centos
ruby193 security update
2014-03-17 21:55:16
fedora
fedora
[SECURITY] Fedora 20 Update: rubygem-activerecord-4.0.0-2.fc20
2014-03-11 04:00:14
[SECURITY] Fedora 20 Update: rubygem-actionpack-4.0.0-3.fc20
2014-03-11 04:00:14
[SECURITY] Fedora 20 Update: rubygem-actionpack-4.0.0-4.fc20
2014-05-23 18:56:34
openvas
openvas
Fedora Update for rubygem-activerecord FEDORA-2014-3169
2014-03-12 00:00:00
Fedora Update for rubygem-activerecord FEDORA-2014-3169
2014-03-12 00:00:00
Mageia: Security Advisory (MGASA-2014-0191)
2022-01-28 00:00:00
mageia
mageia
Updated ruby-rails and associated packages fix multiple vulnerabilities
2014-04-24 23:02:23
securityvulns
securityvulns
[SECURITY] [DSA 2929-1] ruby-actionpack-3.2 security update
2014-06-14 00:00:00
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2014-06-14 00:00:00
debian
debian
[SECURITY] [DSA 2929-1] ruby-actionpack-3.2 security update
2014-05-16 08:15:07
veracode
veracode
Arbitrary Code Execution
2019-05-02 05:01:21

0.002 Low

EPSS

Percentile

59.0%

JSON
Related for VERACODE:11217
cvelist1github1cve1nvd1ubuntucve1debiancve1prion1osv2rubygems1nessus5redhat2centos1fedora6openvas12mageia1securityvulns2debian1veracode1