Product by Rubyonrails
Ruby On Rails
49 known vulnerabilities in Ruby On Rails (Rubyonrails), 0 of them actively exploited (CISA KEV).
Key figures
49
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2016-2098 | Ruby on Rails Rails: security vulnerability | 7.3 | |
| Critical | CVE-2009-2422 | Ruby On Rails: Authentication Bypass | 9.8 | |
| High | CVE-2016-0751 | Ruby on Rails Rails: Denial of Service | 7.5 | |
| Medium | CVE-2016-6316 | Ruby on Rails Rails: Cross-Site Scripting (XSS) | 6.1 | |
| Medium | CVE-2016-2097 | Ruby on Rails Rails: Path Traversal | 5.3 | |
| Medium | CVE-2015-7577 | Ruby on Rails Rails: security vulnerability | 5.3 | |
| Low | CVE-2015-7576 | Ruby on Rails Rails: Authentication Bypass | 3.7 | |
| High | CVE-2017-17919 | Ruby On Rails: SQL Injection | 8.1 | |
| High | CVE-2017-17920 | Ruby On Rails: SQL Injection | 8.1 | |
| Not rated | CVE-2013-0156 | Ruby On Rails: Denial of Service | — | |
| Not rated | CVE-2013-0333 | Ruby on Rails Rails: SQL Injection | — | |
| Not rated | CVE-2013-6414 | Ruby on Rails Rails: Denial of Service | — | |
| Not rated | CVE-2013-0155 | Ruby On Rails: security vulnerability | — | |
| Not rated | CVE-2013-0277 | Ruby on Rails Rails: Deserialization of Untrusted Data | — | |
| Not rated | CVE-2014-0082 | Ruby on Rails Rails: Denial of Service | — | |
| Not rated | CVE-2012-6496 | Ruby on Rails Rails: SQL Injection | — | |
| Not rated | CVE-2012-2660 | Ruby on Rails Rails: security vulnerability | — | |
| Not rated | CVE-2014-3482 | Ruby on Rails Rails: SQL Injection | — | |
| Not rated | CVE-2014-7829 | Ruby on Rails Rails: Path Traversal | — | |
| Not rated | CVE-2012-2661 | Ruby on Rails Rails: SQL Injection | — | |
| Not rated | CVE-2014-0081 | Ruby on Rails Rails: Cross-Site Scripting (XSS) | — | |
| Not rated | CVE-2012-2694 | Ruby on Rails Rails: security vulnerability | — | |
| Not rated | CVE-2013-1854 | Ruby on Rails Rails: Denial of Service | — | |
| Not rated | CVE-2014-7818 | Ruby on Rails Rails: Path Traversal | — | |
| Not rated | CVE-2013-6415 | Ruby on Rails Rails: Cross-Site Scripting (XSS) | — |