SQL Injection

Every one of the 14 is a mark on the map. Named now: 1 to 14, most at risk first.

1. SQL injection vulnerability in the Active Record component in Ruby on Rails before 3.0.18, 3.1.x before 3.1.9, and 3.2.x before 3.2.10 allows remote attackers to execute arbitrary…CVE-2012-6496Rubyonrails · 4.6% likely

   CWE-89

2. SQL injection vulnerability in activerecord/lib/active_record/connection_adapters/postgresql_adapter.rb in the PostgreSQL adapter for Active Record in Ruby on Rails 2.x and 3.x be…CVE-2014-3482Rubyonrails · 4.3% likely

   CWE-891 bounty report

3. SQL injection vulnerability in activerecord/lib/active_record/connection_adapters/postgresql/quoting.rb in the PostgreSQL adapter for Active Record in Ruby on Rails 4.x before 4.0…CVE-2014-3483Rubyonrails · 4.2% likely

   CWE-891 bounty report

4. The Active Record component in Ruby on Rails 3.0.x before 3.0.13, 3.1.x before 3.1.5, and 3.2.x before 3.2.4 does not properly implement the passing of request data to a where met…CVE-2012-2661Rubyonrails · 4.0% likely

   CWE-89

5. Multiple SQL injection vulnerabilities in Ruby on Rails before 2.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) :limit and (2) :offset parameters, relate…CVE-2008-4094Rubyonrails · 3.0% likely

   CWE-89

6. The Active Record component in Ruby on Rails before 3.0.14, 3.1.x before 3.1.6, and 3.2.x before 3.2.6 does not properly implement the passing of request data to a where method in…CVE-2012-2695Rubyonrails · 2.9% likely

   CWE-89

7. The Authlogic gem for Ruby on Rails, when used with certain versions before 3.2.10, makes potentially unsafe find_by_id method calls, which might allow remote attackers to conduct…CVE-2012-6497Rubyonrails · 2.7% likely

   CWE-89

8. Multiple SQL injection vulnerabilities in the quote_table_name method in the ActiveRecord adapters in activerecord/lib/active_record/connection_adapters/ in Ruby on Rails before 2…CVE-2011-2930Rubyonrails · 2.3% likely

   CWE-89

9. SQL injection vulnerability in the 'where' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 'id' parameter. NOTE: The ve…CVE-2017-17917Rubyonrails · 2.3% likely

   CWE-89

10. Ruby on Rails 3.0.x before 3.0.4 does not ensure that arguments to the limit function specify integer values, which makes it easier for remote attackers to conduct SQL injection a…CVE-2011-0448Rubyonrails · 2.2% likely

    CWE-89

11. SQL injection vulnerability in the 'find_by' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 'name' parameter. NOTE: Th…CVE-2017-17916Rubyonrails · 1.5% likely

    CWE-89

12. SQL injection vulnerability in the 'reorder' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 'name' parameter. NOTE: Th…CVE-2017-17920Rubyonrails · 1.5% likely

    CWE-89

13. SQL injection vulnerability in the 'order' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 'id desc' parameter. NOTE: T…CVE-2017-17919Rubyonrails · CVSS 8.1 · 1.5% likely

    CWE-89

14. SQL injection vulnerability in activerecord/lib/active_record/connection_adapters/postgresql/cast.rb in Active Record in Ruby on Rails 4.0.x before 4.0.3, and 4.1.0.beta1, when Po…CVE-2014-0080Rubyonrails · 1.3% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.