Skip to content
OpenAdvisories

Archive

21 November 2007

Vulnerabilities first published on this day (UTC), newest first.

← October 2007 2007 / November /21 December 2007 →
  1. 155
  2. 25
  3. 37
  4. 4 
  5. 541
  6. 612
  7. 718
  8. 829
  9. 93
  10. 1026
  11. 11 
  12. 12 
  13. 137
  14. 1434
  15. 1575
  16. 164
  17. 17 
  18. 18 
  19. 192
  20. 2045
  21. 217
  22. 2218
  23. 2319
  24. 24 
  25. 25 
  26. 2612
  27. 2716
  28. 28 
  29. 2916
  30. 3027
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium —
    CVE-2007-6077

    session fixation protection mechanism in cgi_process.rb in Rails

    The session fixation protection mechanism in cgi_process.rb in Rails 1.2.4, as used in Ruby on Rails, removes the :cookie_only attribute from the DEFAULT_SESSION_OPTIONS constant, which effectively causes cookie_only to be applied only to the first instantiat…

    rails rails Debian RubyGems