Known vulnerabilities in ruby-actionmailer (Alpine package)

Software CPE: cpe:2.3:o:alpine:ruby-actionmailer_alpine_package:*:*:*:*:*:alpine_linux:*:*
Total vulnerabilities: 9
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 7.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ruby-actionmailer (Alpine package) ruby-actionmailer (Alpine package) is affected by 9 known vulnerabilities: 8 medium, 1 low Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU658 - Insufficient Verification of Data Authenticity
CVE-2013-0334
CWE-345 Medium
No
No
4.0.12-r0 26.09.2016 SB2014082001
SB2016092601
SB2015111901
and 2 more
#VU32465 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2014-7819
CWE-22 Medium
No
No
4.0.12-r0 08.11.2014 SB2014110802
SB2014120852
SB2014120853
and 1 more
#VU32464 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2014-7818
CWE-22 Medium
No
No
4.0.12-r0 08.11.2014 SB2014110801
SB2014120850
SB2014120851
#VU32466 - Permissions, Privileges, and Access Controls
CVE-2014-3514
CWE-264 Medium
No
No
4.0.12-r0 20.08.2014 SB2014082002
SB2014120855
#VU32462 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2014-3482
CWE-89 Medium
No
No
4.0.12-r0 07.07.2014 SB2014070701
SB2014072909
SB2014072910
and 4 more
#VU32463 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2014-3483
CWE-89 Medium
No
No
4.0.7-r0, 4.0.12-r0 07.07.2014 SB2014070702
SB2014072915
SB2014072916
and 4 more
#VU32543 - Improper input validation
CVE-2013-6414
CWE-20 Medium
Available
No
4.0.4-r0 07.12.2013 SB2013120703
SB2014042101
#VU32544 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2013-6415
CWE-79 Low
No
No
4.0.4-r0 07.12.2013 SB2013120704
SB2014042102
#VU32545 - Permissions, Privileges, and Access Controls
CVE-2013-6417
CWE-264 Medium
No
No
4.0.4-r0 07.12.2013 SB2013120705
SB2014042103