Plataformatec records
4 published records for vendor plataformatec.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 1 · 25%
- Pre-auth RCE
- 0
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-20 Improper Input Validation1
- CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition1
- CWE-399 Resource Management Errors1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2013-0233Weaponized | Devise gem 2.2.x before 2.2.3, 2.1.x before 2.1.3, 2.0.x before 2.0.5, and 1.5.x before 1.5.4 for Ruby, when using certain databases, does nplataformatec · devise · CWE-399 | Medium6.8 | — | 14.1% | Apr 25, 2013 |
40Plan | CVE-2019-16676No exploit | Plataformatec Simple Form has Incorrect Access Control in file_method? in lib/simple_form/form_builder.rb, because a user-supplied string isplataformatec · simple form · CWE-20 | Critical9.8 | — | 3.4% | Sep 30, 2019 |
39Monitor | CVE-2019-5421No exploit | Plataformatec Devise version 4.5.0 and earlier, using the lockable module contains a CWE-367 vulnerability in The `Devise::Models::Lockable`plataformatec · devise · CWE-367 | Critical9.8 | — | 1.5% | Apr 3, 2019 |
22Monitor | CVE-2019-16109No exploit | An issue was discovered in Plataformatec Devise before 4.7.1.plataformatec · devise | Medium5.3 | — | 1.8% | Sep 8, 2019 |
- CVE-2013-023340Plan
Devise gem 2.2.x before 2.2.3, 2.1.x before 2.1.3, 2.0.x before 2.0.5, and 1.5.x before 1.5.4 for Ruby, when using certain databases, does n
MediumCVSS 6.8WeaponizedEPSS 14%plataformatec · deviseApr 25, 2013
- CVE-2019-1667640Plan
Plataformatec Simple Form has Incorrect Access Control in file_method? in lib/simple_form/form_builder.rb, because a user-supplied string is
CriticalCVSS 9.8No exploitEPSS 3%plataformatec · simple formSep 30, 2019
- CVE-2019-542139Monitor
Plataformatec Devise version 4.5.0 and earlier, using the lockable module contains a CWE-367 vulnerability in The `Devise::Models::Lockable`
CriticalCVSS 9.8No exploitEPSS 1%plataformatec · deviseApr 3, 2019
- CVE-2019-1610922Monitor
An issue was discovered in Plataformatec Devise before 4.7.1.
MediumCVSS 5.3No exploitEPSS 1%plataformatec · deviseSep 8, 2019