Skip to content

Vendor

david hansson vulnerabilities

2 published CVES affecting david hansson, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
0
Medium
2
Low
0
Unscored
0
CISA KEV
0
Atom feed of david hansson alerts

Products

Latest david hansson CVEs

Newest publication first

  1. CVE-2007-5379 Moderate severity vulnerability that affects rails

    Published
    MediumCVSS 5.0 EPSS 4.0% PoC

    Rails before 1.2.4, as used for Ruby on Rails, allows remote attackers and ActiveResource servers to determine the existence of arbitrary files and read arbitrary XML files via the Hash.from_xml (Hash#from_xml) method, which uses XmlSimple (XML::Simple) unsafely, as demonstrated...

  2. CVE-2007-5380 Session fixation vulnerability in Rails

    Published
    MediumCVSS 6.8 EPSS 3.6%

    Session fixation vulnerability in Rails before 1.2.4, as used for Ruby on Rails, allows remote attackers to hijack web sessions via unspecified vectors related to "URL-based sessions."

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.