Search Vulnerability

Full List

Click to view full list.


Vulnerability Name Classifications Severity
Code Evaluation (RoR - JSON) PCI v3.1-6.5.1, PCI v3.2-6.5.1, CAPEC-356, WASC-23, OWASP 2013-A1 Critical
Code Evaluation (RoR) PCI v3.1-6.5.1, PCI v3.2-6.5.1, CAPEC-356, WASC-23, OWASP 2013-A1 Critical
Code Execution via SSTI (Ruby ERB) PCI v3.1-6.5.1, PCI v3.2-6.5.1, CAPEC-23, OWASP 2013-A1 Critical
Code Execution via SSTI (Ruby Slim) PCI v3.1-6.5.1, PCI v3.2-6.5.1, CAPEC-23, OWASP 2013-A1 Critical
Out of Band Code Evaluation (RoR - JSON) PCI v3.1-6.5.1, PCI v3.2-6.5.1, CAPEC-356, WASC-23, OWASP 2013-A1 Critical
Out of Band Code Evaluation (RoR) PCI v3.1-6.5.1, PCI v3.2-6.5.1, CAPEC-356, WASC-23, OWASP 2013-A1 Critical
Server-Side Template Injection (Ruby ERB) PCI v3.1-6.5.1, PCI v3.2-6.5.1, OWASP 2013-A1 Critical
Source Code Disclosure (Ruby) CAPEC-118, WASC-13, OWASP 2013-A5 Medium
Stack Trace Disclosure (RoR) PCI v3.1-6.5.5, PCI v3.2-6.5.5, CAPEC-214, WASC-14, OWASP 2013-A5 Medium
Stack Trace Disclosure (Ruby-Sinatra Framework) PCI v3.1-6.5.5, PCI v3.2-6.5.5, CAPEC-214, WASC-14, OWASP 2013-A5 Medium
Programming Error Message (Ruby) PCI v3.1-3.1 6.5.5, PCI v3.2-3.1 6.5.5, CAPEC-118, WASC-13, OWASP 2013-A5 Low
RoR Database Configuration File Detected WASC-15, OWASP 2013-A5 Low
RoR Development Mode Enabled PCI v3.1-6.5.5, PCI v3.2-6.5.5, CAPEC-214, WASC-14, OWASP 2013-A5 Low
Version Disclosure (RoR) CAPEC-170, WASC-45, OWASP 2013-A5 Low
Version Disclosure (Ruby) CAPEC-170, WASC-45, OWASP 2013-A5 Low
Version Disclosure (RubyGems) CAPEC-170, WASC-45, OWASP 2013-A5 Low
Out-of-date Version (RoR) PCI v3.1-6.2, PCI v3.2-6.2, CAPEC-310, OWASP PC-C1, OWASP 2013-A9 Information
Out-of-date Version (Ruby) PCI v3.1-6.2, PCI v3.2-6.2, CAPEC-310, OWASP PC-C1, OWASP 2013-A9 Information
Out-of-date Version (RubyGems) PCI v3.1-6.2, PCI v3.2-6.2, CAPEC-310, OWASP PC-C1, OWASP 2013-A9 Information
Netsparker

Dead accurate, fast & easy-to-use Web Application Security Scanner

GET A DEMO