Skip to content
OpenAdvisories

Archive

19 October 2007

Vulnerabilities first published on this day (UTC), newest first.

← September 2007 2007 / October /19 November 2007 →
  1. 138
  2. 2 
  3. 317
  4. 416
  5. 524
  6. 676
  7. 7 
  8. 818
  9. 963
  10. 10 
  11. 1119
  12. 1242
  13. 1315
  14. 1471
  15. 158
  16. 1616
  17. 1752
  18. 1894
  19. 1945
  20. 2029
  21. 218
  22. 224
  23. 2366
  24. 2440
  25. 2534
  26. 2633
  27. 27 
  28. 284
  29. 2955
  30. 3039
  31. 3144
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium —
    CVE-2007-5379

    Moderate severity vulnerability that affects rails

    Rails before 1.2.4, as used for Ruby on Rails, allows remote attackers and ActiveResource servers to determine the existence of arbitrary files and read arbitrary XML files via the Hash.from_xml (Hash#from_xml) method, which uses XmlSimple (XML::Simple) unsaf…

    rails rails Debian RubyGems
  • Medium —
    CVE-2007-5380

    Session fixation vulnerability in Rails

    Session fixation vulnerability in Rails before 1.2.4, as used for Ruby on Rails, allows remote attackers to hijack web sessions via unspecified vectors related to "URL-based sessions."

    rails rails Debian RubyGems