Skip to content
OpenAdvisories

Archive

April 2015

Vulnerabilities first published in this month (UTC), newest first.

2 results · Clear filters · Feed

  • Low —

    rest-client allows local users to obtain sensitive information by reading the log

    REST client for Ruby (aka rest-client) before 1.7.3 logs usernames and passwords, which allows local users to obtain sensitive information by reading the log.

  • Low 3.7
    CVE-2015-2808 EPSS 74%

    The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data dur…