Archive
29 August 2011
Vulnerabilities first published on this day (UTC), newest first.
3 results · Clear filters · Feed
-
Unscored —CVE-2011-0228 Public exploit
The Data Security component in Apple iOS before 4.2.10 and 4.3.x before 4.3.5 does not check the basicConstraints param…
-
Medium —CVE-2011-3187 Public exploit
actionpack Improper Input Validation vulnerability
The to_s method in actionpack/lib/action_dispatch/middleware/remote_ip.rb in Ruby on Rails 3.0.5 does not validate the X-Forwarded-For header in requests from IP addresses on a Class C network, which might allow remote attackers to inject arbitrary text into …
-
Unscored —
The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote atta…