https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T06:03:28.814154+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-28225 cnvd-2017-28225 2026-10-03T06:03:28.855831+00:00 cnvd-2017-28225 https://cve.radiocsirt.org/vuln/euvd-2026-90592 EUVD-2026-90592 2026-10-03T06:03:28.855881+00:00 EUVD-2026-90592 https://cve.radiocsirt.org/vuln/fkie_cve-2015-1820 fkie_cve-2015-1820 2026-10-03T06:03:28.855897+00:00

REST client for Ruby (aka rest-client) before 1.8.0 allows remote attackers to conduct session fixation attacks or obtain sensitive cookie information by leveraging passage of cookies set in a response to a redirect.

 https://cve.radiocsirt.org/vuln/ghsa-3fhf-6939-qg8p GHSA-3fhf-6939-qg8p — rest-client Gem Vulnerable to Session Fixation 2026-10-03T06:03:28.855928+00:00

Affected: RubyGems: rest-client

REST client for Ruby (aka rest-client) versions 1.6.1.a until 1.8.0 allow remote attackers to conduct session fixation attacks or obtain sensitive cookie information by leveraging passage of cookies set in a response to a redirect.

 https://cve.radiocsirt.org/vuln/gsd-2015-1820 gsd-2015-1820 2026-10-03T06:03:28.855953+00:00 gsd-2015-1820 https://cve.radiocsirt.org/vuln/rhba-2015:1100 RHBA-2015:1100 — Red Hat Bug Fix Advisory: CFME 5.4.0 bug fixes, and enhancement update 2026-10-03T06:03:28.855965+00:00

rubygem-actionmailer: email address processing DoS rubygem-i18n: cross-site scripting flaw in exception handling rubygem-sprockets: arbitrary file existence disclosure rubygem-rest-client: session fixation vulnerability Set-Cookie headers present in an HTTP 30x redirection responses rubygem-rest-client: unsanitized application logging

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-1820 Withdrawn: UBUNTU-CVE-2015-1820 2026-10-03T06:03:28.855993+00:00

Withdrawn by the publisher.

Affected: Ubuntu:16.04:LTS: ruby-rest-client

REST client for Ruby (aka rest-client) before 1.8.0 allows remote attackers to conduct session fixation attacks or obtain sensitive cookie information by leveraging passage of cookies set in a response to a redirect.