Skip to content
OpenAdvisories

Archive

26 July 2015

Vulnerabilities first published on this day (UTC), newest first.

← June 2015 2015 / July /26 August 2015 →
  1. 117
  2. 29
  3. 375
  4. 47
  5. 55
  6. 639
  7. 73
  8. 822
  9. 936
  10. 1018
  11. 11 
  12. 12 
  13. 131
  14. 1488
  15. 1548
  16. 16172
  17. 17 
  18. 185
  19. 192
  20. 2022
  21. 218
  22. 226
  23. 2323
  24. 244
  25. 251
  26. 2610
  27. 271
  28. 28 
  29. 2910
  30. 303
  31. 31 
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium —
    CVE-2015-3224 Public exploit Scanner template EPSS 49%

    Web Console (Ruby gem) contains whitelisted_ips bypass

    request.rb in Web Console before 2.1.3, as used with Ruby on Rails 3.x and 4.x, does not properly restrict the use of X-Forwarded-For headers in determining a client's IP address, which allows remote attackers to bypass the whitelisted_ips protection mechanis…

    web-console RubyGems