Skip to content
OpenAdvisories

Archive

6 October 2017

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Medium 5.9

    http vulnerable to Exposure of Sensitive Information to an Unauthorized Actor

    The Ruby http gem before 0.7.3 does not verify hostnames in SSL connections, which might allow remote attackers to obtain sensitive information via a man-in-the-middle-attack.