Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownRapid7 Analysis: KindaRails2Shell (CVE-2026-66066)Patch nowKEVEPSS 32.90%Aug 3, 2026
- Low2.3Active Storage allows users to attach cloud and local files in Rails applications.Check if you run itEPSS 0.45%Mar 26, 2026
- Medium6.6Active Storage allows users to attach cloud and local files in Rails applications.Check if you run itEPSS 0.67%Mar 24, 2026
- High8.0Active Storage allows users to attach cloud and local files in Rails applications.Check if you run itEPSS 0.58%Mar 24, 2026
- Medium6.6Active Support is a toolkit of support libraries and Ruby core extensions extracted from the Rails framework.Check if you run itEPSS 0.86%Mar 24, 2026
- Medium6.6Active Storage allows users to attach cloud and local files in Rails applications.Check if you run itEPSS 0.62%Mar 24, 2026
- Medium5.3Active Storage allows users to attach cloud and local files in Rails applications.Check if you run itEPSS 0.40%Mar 24, 2026
- Medium5.3Active Support is a toolkit of support libraries and Ruby core extensions extracted from the Rails framework.Check if you run itEPSS 0.34%Mar 24, 2026
- Medium6.9Active Support is a toolkit of support libraries and Ruby core extensions extracted from the Rails framework.Check if you run itEPSS 0.66%Mar 24, 2026
- Low1.3Action Pack is a Rubygem for building web applications on the Rails framework.Check if you run itEPSS 0.26%Mar 23, 2026
- Critical9.2# Active Storage allowed transformation methods potentially unsafe Active Storage attempts to prevent the use of potentially unsafe image transformation methods and parameters by dCheck if you run itEPSS 5.58%Jan 30, 2026
- Low2.7Active Record connects classes to relational database tables.Check if you run itEPSS 0.64%Aug 13, 2025
- Medium6.1Action Text brings rich text content and editing to Rails.Check if you run itEPSS 0.43%Jun 4, 2024
- Critical9.8CVE-2024-28103 is listed by Action Pack is a framework for handling and responding to web requests..Check if you run itEPSS 0.66%Jun 4, 2024
- Medium5.3CVE-2024-26144 is listed by Rails is a web-application framework..Check if you run itEPSS 1.25%Feb 27, 2024
- Medium6.1CVE-2024-26143 is listed by Rails is a web-application framework..Check if you run itEPSS 1.03%Feb 27, 2024
- High7.5CVE-2024-26142 is listed by Rails is a web-application framework..Check if you run itEPSS 1.50%Feb 27, 2024
- High7.5A regular expression based DoS vulnerability in Action Dispatch <6.1.7.1 and <7.0.4.1 related to the If-None-Match header.Check if you run itEPSS 2.28%Feb 9, 2023
- High7.5A regular expression based DoS vulnerability in Action Dispatch <6.0.6.1,< 6.1.7.1, and <7.0.4.1.Check if you run itEPSS 1.70%Feb 9, 2023
- Medium5.4A vulnerability classified as problematic has been found in Ruby on Rails.Check if you run itEPSS 0.90%Oct 26, 2022
- Medium5.9CVE-2022-23633 is listed by Action Pack is a framework for handling and responding to web requests..Check if you run itEPSS 2.22%Feb 11, 2022
- Medium6.1A open redirect vulnerability exists in Action Pack >= 6.0.0 that could allow an attacker to craft a "X-Forwarded-Host" headers in combination with certain "allowed ho…Check if you run itEPSS 4.42%Jan 10, 2022
- Medium6.1A cross-site scripting vulnerability flaw was found in the auto_link function in Rails before version 3.0.6.Check if you run itEPSS 1.29%Oct 19, 2021
- Medium6.1A possible open redirect vulnerability in the Host Authorization middleware in Action Pack >= 6.0.0 that could allow attackers to redirect users to a malicious website.Check if you run itEPSS 1.70%Oct 18, 2021
- High7.5The actionpack ruby gem before 6.1.3.2, 6.0.3.7, 5.2.4.6, 5.2.6 suffers from a possible denial of service vulnerability in the Token Authentication logic in Action Con…Check if you run itEPSS 4.87%Jun 11, 2021
Sort