Lucene search
+L

8 matches found

CNNVD
CNNVD
•added 2023/12/12 12:00 a.m.•20 views

Devise Security Breach

Devise is a flexible Warden-based authentication solution for Rails. A security vulnerability exists in versions prior to Devise 3.5.4 that stems from incorrectly disposing of a session cookie, which could allow an attacker to gain unauthorized access to a persistent application...

7.5CVSS7AI score0.00618EPSS
SaveExploits0References4
Mend
Mend
•added 2023/12/12 12:00 a.m.•7 views

CVE-2015-8314

The Devise gem before 3.5.4 for Ruby mishandles Remember Me cookies for sessions, which may allow an adversary to obtain unauthorized persistent application access...

8.7CVSS0.00618EPSS
SaveExploits0References8
Debian CVE
Debian CVE
•added 2023/12/12 12:00 a.m.•53 views

CVE-2015-8314

The Devise gem before 3.5.4 for Ruby mishandles Remember Me cookies for sessions, which may allow an adversary to obtain unauthorized persistent application access...

7.5CVSS7.4AI score0.00618EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2015/02/15 12:00 a.m.•8 views

PT-2015-5361

Name of the Vulnerable Software and Affected Versions Google Email application version 4.2.2.0200 Description The issue allows remote attackers to cause a denial of service, resulting in a persistent application crash. This can be achieved by sending an e-mail message with a Content-Disposition: ...

5CVSS0.01712EPSS
SaveExploits2References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/02/15 12:00 a.m.•8 views

CVE-2015-1574: Undefined Security Weakness

The Google Email application 4.2.2.0200 for Android allows remote attackers to cause a denial of service persistent application crash via a "Content-Disposition: ;" header in an e-mail message...

5CVSS5.8AI score0.01712EPSS
SaveExploits2References2
CVE
CVE
•added 2011/03/11 10:00 p.m.•74 views

CVE-2011-0158

Summary of CVE-2011-0158 (Apple iOS/MobileSafari) : The issue affects MobileSafari on iOS prior to 4.3 where launching applications via URL handlers is not implemented correctly. This allows remote attackers to trigger a denial of service through crafted JavaScript, resulting in persistent applic...

4.3CVSS5.9AI score0.0125EPSS
SaveExploits0References5Affected Software1
Prion
Prion
•added 2007/01/31 11:28 a.m.•38 views

Design/Logic Flaw

The Bonjour functionality in mDNSResponder, iChat 3.1.6, and InstantMessage framework 428 in Apple Mac OS X 10.4.8 allows remote attackers to cause a denial of service persistent application crash via a crafted phsh hash attribute in a TXT key...

7.8CVSS6.3AI score0.086EPSS
SaveExploits2References8Affected Software3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/12/13 12:00 a.m.•12 views

CVE-2005-4210: Undefined Security Weakness

Opera before 8.51, when running on Windows with Input Method Editor IME installed, allows remote attackers to cause a denial of service persistent application crash by bookmarking a site with a long title...

5CVSS5.7AI score0.03284EPSS
SaveExploits1References1
Rows per page
Query Builder