https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T23:31:35.765552+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2010-avi-143 certa-2010-avi-143 — De multiples vulnérabilités ont été corrigées dans Mac OS X. 2026-10-17T23:31:35.846316+00:00 certa-2010-avi-143 https://cve.radiocsirt.org/vuln/euvd-2026-123351 EUVD-2026-123351 2026-10-17T23:31:35.846361+00:00 EUVD-2026-123351 https://cve.radiocsirt.org/vuln/fkie_cve-2009-2422 fkie_cve-2009-2422 2026-10-17T23:31:35.846377+00:00

The example code for the digest authentication functionality (http_authentication.rb) in Ruby on Rails before 2.3.3 defines an authenticate_or_request_with_http_digest block that returns nil instead of false when the user does not exist, which allows context-dependent attackers to bypass authentication for applications that are derived from this example by sending an invalid username without a password.

 https://cve.radiocsirt.org/vuln/ghsa-rxq3-gm4p-5fj4 GHSA-rxq3-gm4p-5fj4 — rails vulnerable to improper authentication 2026-10-17T23:31:35.846409+00:00

Affected: RubyGems: rails

The example code for the digest authentication functionality (http_authentication.rb) in Ruby on Rails before 2.3.3 defines an authenticate_or_request_with_http_digest block that returns nil instead of false when the user does not exist, which allows context-dependent attackers to bypass authentication for applications that are derived from this example by sending an invalid username without a password.

 https://cve.radiocsirt.org/vuln/gsd-2009-2422 gsd-2009-2422 2026-10-17T23:31:35.846433+00:00 gsd-2009-2422