Skip to content
OpenAdvisories

Archive

8 August 2012

Vulnerabilities first published on this day (UTC), newest first.

← July 2012 2012 / August /8 September 2012 →
  1. 1 
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 663
  7. 720
  8. 812
  9. 96
  10. 107
  11. 11 
  12. 1235
  13. 1356
  14. 1438
  15. 1552
  16. 1623
  17. 1720
  18. 18 
  19. 197
  20. 2037
  21. 2117
  22. 2235
  23. 2330
  24. 244
  25. 2555
  26. 2665
  27. 2719
  28. 2812
  29. 2947
  30. 3017
  31. 3158
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium —
    CVE-2012-3424

    actionpack Improper Authentication vulnerability

    The decode_credentials method in actionpack/lib/action_controller/metal/http_authentication.rb in Ruby on Rails 3.x before 3.0.16, 3.1.x before 3.1.7, and 3.2.x before 3.2.7 converts Digest Authentication strings to symbols, which allows remote attackers to c…

    actionpack RubyGems
  • Medium —
    CVE-2010-5142

    Chef Improper Access Control vulnerability

    chef-server-api/app/controllers/users.rb in the API in Chef before 0.9.0 does not require administrative privileges for the create, destroy, and update methods, which allows remote authenticated users to manage user accounts via requests to the /users URI.

    chef RubyGems