Search for packages
| purl | pkg:rpm/redhat/ruby193-rubygem-amq-protocol@1.9.2-3?arch=el6cf |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 3.1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-1bdw-9rs5-6ycg
Aliases: CVE-2013-4164 GHSA-j98q-m2w8-57rc OSV-100113 |
several | There are no reported fixed by versions. |
|
VCID-3wtf-uu89-2qe5
Aliases: CVE-2014-0081 GHSA-m46p-ggm5-5j83 OSV-103439 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Multiple cross-site scripting (XSS) vulnerabilities in actionview/lib/action_view/helpers/number_helper.rb in Ruby on Rails beta2 allow remote attackers to inject arbitrary web script or HTML via the (1) format, (2) negative_format, or (3) units parameter to the (a) number_to_currency, (b) number_to_percentage, or (c) number_to_human helper. | There are no reported fixed by versions. |
|
VCID-5sfa-s7xw-cyeg
Aliases: CVE-2014-0140 |
CFME: default routes expose controllers and actions | There are no reported fixed by versions. |
|
VCID-bv8s-3wu9-mfa8
Aliases: CVE-2014-0057 |
CFME: Dangerous send in ServiceController | There are no reported fixed by versions. |
|
VCID-er1e-c57c-t3fk
Aliases: CVE-2013-0186 |
EVM: Stored XSS | There are no reported fixed by versions. |
|
VCID-mep3-6sub-ykdk
Aliases: CVE-2014-0082 GHSA-7cgp-c3g7-qvrw OSV-103440 |
Denial of Service Vulnerability when using render :text Strings sent in specially crafted headers will be converted to symbols. | There are no reported fixed by versions. |
|
VCID-wyku-upny-vuhk
Aliases: CVE-2014-3642 |
CFME: dangerous send method in performance.rb | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||