Skip to content
OpenAdvisories

Archive

9 April 2013

Vulnerabilities first published on this day (UTC), newest first.

← March 2013 2013 / April /9 May 2013 →
  1. 14
  2. 26
  3. 319
  4. 414
  5. 58
  6. 6 
  7. 72
  8. 87
  9. 931
  10. 1015
  11. 1116
  12. 1210
  13. 132
  14. 14 
  15. 15 
  16. 1614
  17. 17152
  18. 1814
  19. 197
  20. 20 
  21. 213
  22. 2222
  23. 235
  24. 2416
  25. 2528
  26. 2610
  27. 274
  28. 283
  29. 2915
  30. 303
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium —
    CVE-2013-1821

    Ruby vulnerable to denial of service

    lib/rexml/text.rb in the REXML parser in Ruby before 1.9.3-p392 allows remote attackers to cause a denial of service (memory consumption and crash) via crafted text nodes in an XML document, aka an XML Entity Expansion (XEE) attack.

    org.jruby:jruby Maven
  • Medium —
    CVE-2013-0284

    newrelic_rpm Gem Discloses Sensitive Information

    Ruby agent 3.2.0 through 3.5.2 serializes sensitive data when communicating with servers operated by New Relic, which allows remote attackers to obtain sensitive information (database credentials and SQL statements) by sniffing the network and deserializing t…

    newrelic_rpm RubyGems
  • Medium —
    CVE-2012-6134

    omniauth-oauth2 Cross-Site Request Forgery vulnerability

    Cross-site request forgery (CSRF) vulnerability in the omniauth-oauth2 gem 1.1.1 and earlier for Ruby allows remote attackers to hijack the authentication of users for requests that modify session state.

    omniauth-oauth2 RubyGems