Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.
| CVE | Vendor | Product | Added | Due | Status |
|---|---|---|---|---|---|
|
CVE-2019-5418 — Rails Ruby on Rails Path Traversal Vulnerability
Rails Ruby on Rails contains a path traversal vulnerability in Action View. Specially crafted accept headers in combination with calls to `render file:` can cause arbitrary files on the target server to be rendered, disclosing the file contents.
|
Rails | Ruby on Rails | Jul 7, 2025 | Jul 28, 2025 | |
|
CVE-2014-0130 — Ruby on Rails Directory Traversal Vulnerability
Directory traversal vulnerability in actionpack/lib/abstract_controller/base.rb in the implicit-render implementation in Ruby on Rails allows remote attackers to read arbitrary files via a crafted request.
|
Rails | Ruby on Rails | Mar 25, 2022 | Apr 15, 2022 | |
|
CVE-2016-0752 — Ruby on Rails Directory Traversal Vulnerability
Directory traversal vulnerability in Action View in Ruby on Rails allows remote attackers to read arbitrary files.
|
Rails | Ruby on Rails | Mar 25, 2022 | Apr 15, 2022 |
Rails Ruby on Rails contains a path traversal vulnerability in Action View. Specially crafted accept headers in combination with calls to `render file:` can cause arbitrary files on the target server to be rendered, disclosing the file contents.
Ruby on Rails · Jul 7, 2025
Directory traversal vulnerability in actionpack/lib/abstract_controller/base.rb in the implicit-render implementation in Ruby on Rails allows remote attackers to read arbitrary files via a crafted request.
Ruby on Rails · Mar 25, 2022
Directory traversal vulnerability in Action View in Ruby on Rails allows remote attackers to read arbitrary files.
Ruby on Rails · Mar 25, 2022