| Max CVSS | 7.5 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2018-3741 | 4.3 |
There is a possible XSS vulnerability in all rails-html-sanitizer gem versions below 1.0.4 for Ruby. The gem allows non-whitelisted attributes to be present in sanitized output when input with specially-crafted HTML fragments, and these attributes ca
|
30-01-2023 - 16:10 | 30-03-2018 - 19:29 | |
| CVE-2018-7750 | 7.5 |
transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 does not properly check whether authentication is co
|
18-04-2022 - 17:30 | 13-03-2018 - 18:29 | |
| CVE-2012-6685 | 5.0 |
Nokogiri before 1.5.4 is vulnerable to XXE attacks
|
25-02-2020 - 18:35 | 19-02-2020 - 15:15 | |
| CVE-2018-8048 | 4.3 |
In the Loofah gem through 2.2.0 for Ruby, non-whitelisted HTML attributes may occur in sanitized output by republishing a crafted HTML fragment.
|
22-11-2019 - 09:15 | 27-03-2018 - 17:29 | |
| CVE-2018-1104 | 6.5 |
Ansible Tower through version 3.2.3 has a vulnerability that allows users only with access to define variables for a job template to execute arbitrary code on the Tower server.
|
09-10-2019 - 23:38 | 02-05-2018 - 19:29 | |
| CVE-2018-1101 | 6.5 |
Ansible Tower before version 3.2.4 has a flaw in the management of system and organization administrators that allows for privilege escalation. System administrators that are members of organizations can have their passwords reset by organization adm
|
09-10-2019 - 23:38 | 02-05-2018 - 18:29 | |
| CVE-2018-11627 | 4.3 |
Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception.
|
26-02-2019 - 15:03 | 31-05-2018 - 19:29 |