Lucene search
+L

6 matches found

CNNVD
CNNVD
•added 2023/12/12 12:00 a.m.•13 views

Devise Security Breach

Devise is a flexible Warden-based authentication solution for Rails. A security vulnerability exists in versions prior to Devise 3.5.4 that stems from incorrectly disposing of a session cookie, which could allow an attacker to gain unauthorized access to a persistent application...

7.5CVSS7AI score0.00618EPSS
SaveExploits0References4
Debian CVE
Debian CVE
•added 2023/12/12 12:00 a.m.•50 views

CVE-2015-8314

The Devise gem before 3.5.4 for Ruby mishandles Remember Me cookies for sessions, which may allow an adversary to obtain unauthorized persistent application access...

7.5CVSS7.4AI score0.00618EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/02/15 12:00 a.m.•3 views

CVE-2015-1574: Undefined Security Weakness

The Google Email application 4.2.2.0200 for Android allows remote attackers to cause a denial of service persistent application crash via a "Content-Disposition: ;" header in an e-mail message...

5CVSS5.8AI score0.01712EPSS
SaveExploits2References2
CVE
CVE
•added 2011/03/11 10:00 p.m.•66 views

CVE-2011-0158

Summary of CVE-2011-0158 (Apple iOS/MobileSafari) : The issue affects MobileSafari on iOS prior to 4.3 where launching applications via URL handlers is not implemented correctly. This allows remote attackers to trigger a denial of service through crafted JavaScript, resulting in persistent applic...

4.3CVSS5.9AI score0.0125EPSS
SaveExploits0References5Affected Software1
Prion
Prion
•added 2007/01/31 11:28 a.m.•33 views

Design/Logic Flaw

The Bonjour functionality in mDNSResponder, iChat 3.1.6, and InstantMessage framework 428 in Apple Mac OS X 10.4.8 allows remote attackers to cause a denial of service persistent application crash via a crafted phsh hash attribute in a TXT key...

7.8CVSS6.3AI score0.086EPSS
SaveExploits2References8Affected Software3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/12/13 12:00 a.m.•5 views

CVE-2005-4210: Undefined Security Weakness

Opera before 8.51, when running on Windows with Input Method Editor IME installed, allows remote attackers to cause a denial of service persistent application crash by bookmarking a site with a long title...

5CVSS5.7AI score0.03284EPSS
SaveExploits1References1
Rows per page
Query Builder