https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T04:46:37.957367+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bell-cve-2013-4073 Withdrawn: BELL-CVE-2013-4073 — CVE-2013-4073 does not affect BellSoft software 2026-10-03T04:46:38.082563+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certa-2013-avi-384 certa-2013-avi-384 — Une vulnérabilité a été corrigée dans <span class="textit">Ruby</span>. Elle permet à un attaquant de provoquer une att… 2026-10-03T04:46:38.082603+00:00 certa-2013-avi-384 https://cve.radiocsirt.org/vuln/euvd-2026-107178 EUVD-2026-107178 2026-10-03T04:46:38.082621+00:00 EUVD-2026-107178 https://cve.radiocsirt.org/vuln/fkie_cve-2013-4073 fkie_cve-2013-4073 2026-10-03T04:46:38.082633+00:00

The OpenSSL::SSL.verify_certificate_identity function in lib/openssl/ssl.rb in Ruby 1.8 before 1.8.7-p374, 1.9 before 1.9.3-p448, and 2.0 before 2.0.0-p247 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.

 https://cve.radiocsirt.org/vuln/ghsa-3gpq-xx45-4rr9 GHSA-3gpq-xx45-4rr9 2026-10-03T04:46:38.082663+00:00

The OpenSSL::SSL.verify_certificate_identity function in lib/openssl/ssl.rb in Ruby 1.8 before 1.8.7-p374, 1.9 before 1.9.3-p448, and 2.0 before 2.0.0-p247 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.

 https://cve.radiocsirt.org/vuln/gsd-2013-4073 gsd-2013-4073 2026-10-03T04:46:38.082681+00:00 gsd-2013-4073 https://cve.radiocsirt.org/vuln/rhsa-2013:1090 RHSA-2013:1090 — Red Hat Security Advisory: ruby security update 2026-10-03T04:46:38.082692+00:00

ruby: hostname check bypassing vulnerability in SSL client

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0864 WID-SEC-W-2025-0864 — Ruby: Schwachstelle ermöglicht Man-in-the-Middle Angriff 2026-10-03T04:46:38.082710+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Ruby ausnutzen, um Sicherheitsvorkehrungen zu umgehen bzw. einen Man-in-the-Middle Angriff durchzuführen.