6 matches found
Devise Security Breach
Devise is a flexible Warden-based authentication solution for Rails. A security vulnerability exists in versions prior to Devise 3.5.4 that stems from incorrectly disposing of a session cookie, which could allow an attacker to gain unauthorized access to a persistent application...
CVE-2015-8314
The Devise gem before 3.5.4 for Ruby mishandles Remember Me cookies for sessions, which may allow an adversary to obtain unauthorized persistent application access...
CVE-2015-1574: Undefined Security Weakness
The Google Email application 4.2.2.0200 for Android allows remote attackers to cause a denial of service persistent application crash via a "Content-Disposition: ;" header in an e-mail message...
CVE-2011-0158
Summary of CVE-2011-0158 (Apple iOS/MobileSafari) : The issue affects MobileSafari on iOS prior to 4.3 where launching applications via URL handlers is not implemented correctly. This allows remote attackers to trigger a denial of service through crafted JavaScript, resulting in persistent applic...
Design/Logic Flaw
The Bonjour functionality in mDNSResponder, iChat 3.1.6, and InstantMessage framework 428 in Apple Mac OS X 10.4.8 allows remote attackers to cause a denial of service persistent application crash via a crafted phsh hash attribute in a TXT key...
CVE-2005-4210: Undefined Security Weakness
Opera before 8.51, when running on Windows with Input Method Editor IME installed, allows remote attackers to cause a denial of service persistent application crash by bookmarking a site with a long title...