İçeriğe atla
Noroxi

rack project kayıtları

rack project üreticisine ait 13 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
1
Düzeltme kaydı olan
%100
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18
  2. 20
  3. 22

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

13 kayıt
  • CVE-2022-30123
    41Planlayın

    A sequence injection vulnerability exists in Rack <2.0.9.1, <2.1.4.1 and <2.2.3.1 which could allow is a possible shell escape in the Lint a

    KritikCVSS 10,0İstismar yokEPSS %2

    rack project · rack5 Ara 2022

  • CVE-2020-8161
    35İzleyin

    A directory traversal vulnerability exists in rack < 2.2.0 that allows an attacker perform directory traversal vulnerability in the Rack::Di

    YüksekCVSS 8,6İstismar yokEPSS %3

    rack project · rack2 Tem 2020

  • CVE-2020-8184
    31İzleyin

    A reliance on cookies without validation/integrity check security vulnerability exists in rack < 2.2.3, rack < 2.1.4 that makes it is possib

    YüksekCVSS 7,5İstismar yokEPSS %3

    rack project · rack19 Haz 2020

  • CVE-2022-30122
    31İzleyin

    A possible denial of service vulnerability exists in Rack <2.0.9.1, <2.1.4.1 and <2.2.3.1 in the multipart parsing component of Rack.

    YüksekCVSS 7,5İstismar yokEPSS %2

    rack project · rack5 Ara 2022

  • CVE-2018-16470
    31İzleyin

    There is a possible DoS vulnerability in the multipart parser in Rack before 2.0.6.

    YüksekCVSS 7,5İstismar yokEPSS %2

    rack project · rack13 Kas 2018

  • CVE-2018-16471
    25İzleyin

    There is a possible XSS vulnerability in Rack before 2.0.6 and 1.6.11.

    OrtaCVSS 6,1İstismar yokEPSS %2

    rack project · rack13 Kas 2018

  • CVE-2015-3225
    22İzleyin

    lib/rack/utils.rb in Rack before 1.5.4 and 1.6.x before 1.6.2, as used with Ruby on Rails 3.x and 4.x and other products, allows remote atta

    OrtaCVSS 5,0İstismar yokEPSS %8

    rack project · rack26 Tem 2015

  • CVE-2013-0263
    22İzleyin

    Rack::Session::Cookie in Rack 1.5.x before 1.5.2, 1.4.x before 1.4.5, 1.3.x before 1.3.10, 1.2.x before 1.2.8, and 1.1.x before 1.1.6 allows

    OrtaCVSS 5,1İstismar yokEPSS %5

    rack project · rack8 Şub 2013

  • CVE-2011-5036
    21İzleyin

    Rack before 1.1.3, 1.2.x before 1.2.5, and 1.3.x before 1.3.6 computes hash values for form parameters without restricting the ability to tr

    OrtaCVSS 5,0İstismar yokEPSS %4

    rack project · rack29 Ara 2011

  • CVE-2013-0183
    21İzleyin

    multipart/parser.rb in Rack 1.3.x before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to cause a denial of service (memory consumpti

    OrtaCVSS 5,0İstismar yokEPSS %4

    rack project · rack1 Mar 2013

  • CVE-2013-0262
    18İzleyin

    rack/file.rb (Rack::File) in Rack 1.5.x before 1.5.2 and 1.4.x before 1.4.5 allows attackers to access arbitrary files outside the intended

    OrtaCVSS 4,3İstismar yokEPSS %3

    rack project · rack8 Şub 2013

  • CVE-2012-6109
    18İzleyin

    lib/rack/multipart.rb in Rack before 1.1.4, 1.2.x before 1.2.6, 1.3.x before 1.3.7, and 1.4.x before 1.4.2 uses an incorrect regular express

    OrtaCVSS 4,3İstismar yokEPSS %3

    rack project · rack1 Mar 2013

  • CVE-2013-0184
    18İzleyin

    Unspecified vulnerability in Rack::Auth::AbstractRequest in Rack 1.1.x before 1.1.5, 1.2.x before 1.2.7, 1.3.x before 1.3.9, and 1.4.x befor

    OrtaCVSS 4,3İstismar yokEPSS %2

    rack project · rack1 Mar 2013