https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 05:39:16 +0000 https://cve.radiocsirt.org/vuln/brew-travis-cve-2013-0263 <p><strong>Affected:</strong> Homebrew: travis</p> <p>Rack::Session::Cookie in Rack 1.5.x before 1.5.2, 1.4.x before 1.4.5, 1.3.x before 1.3.10, 1.2.x before 1.2.8, and 1.1.x before 1.1.6 allows remote attackers to guess the session cookie, gain privileges, and execute arbitrary code via a timing attack involving an HMAC comparison function that does not run in constant time.</p> <p><strong>Affected:</strong> Homebrew: travis</p> <p>Rack::Session::Cookie in Rack 1.5.x before 1.5.2, 1.4.x before 1.4.5, 1.3.x before 1.3.10, 1.2.x before 1.2.8, and 1.1.x before 1.1.6 allows remote attackers to guess the session cookie, gain privileges, and execute arbitrary code via a timing attack involving an HMAC comparison function that does not run in constant time.</p> https://cve.radiocsirt.org/vuln/brew-travis-cve-2013-0263 https://cve.radiocsirt.org/vuln/euvd-2026-104566 EUVD-2026-104566 https://cve.radiocsirt.org/vuln/euvd-2026-104566 https://cve.radiocsirt.org/vuln/fkie_cve-2013-0263 <p>Rack::Session::Cookie in Rack 1.5.x before 1.5.2, 1.4.x before 1.4.5, 1.3.x before 1.3.10, 1.2.x before 1.2.8, and 1.1.x before 1.1.6 allows remote attackers to guess the session cookie, gain privileges, and execute arbitrary code via a timing attack involving an HMAC comparison function that does not run in constant time.</p> <p>Rack::Session::Cookie in Rack 1.5.x before 1.5.2, 1.4.x before 1.4.5, 1.3.x before 1.3.10, 1.2.x before 1.2.8, and 1.1.x before 1.1.6 allows remote attackers to guess the session cookie, gain privileges, and execute arbitrary code via a timing attack involving an HMAC comparison function that does not run in constant time.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2013-0263 https://cve.radiocsirt.org/vuln/ghsa-xc85-32mf-xpv8 <p><strong>Affected:</strong> RubyGems: rack</p> <p>Rack::Session::Cookie in Rack 1.5.x before 1.5.2, 1.4.x before 1.4.5, 1.3.x before 1.3.10, 1.2.x before 1.2.8, and 1.1.x before 1.1.6 allows remote attackers to guess the session cookie, gain privileges, and execute arbitrary code via a timing attack involving an HMAC comparison function that does not run in constant time.</p> <p><strong>Affected:</strong> RubyGems: rack</p> <p>Rack::Session::Cookie in Rack 1.5.x before 1.5.2, 1.4.x before 1.4.5, 1.3.x before 1.3.10, 1.2.x before 1.2.8, and 1.1.x before 1.1.6 allows remote attackers to guess the session cookie, gain privileges, and execute arbitrary code via a timing attack involving an HMAC comparison function that does not run in constant time.</p> https://cve.radiocsirt.org/vuln/ghsa-xc85-32mf-xpv8 https://cve.radiocsirt.org/vuln/gsd-2013-0263 gsd-2013-0263 https://cve.radiocsirt.org/vuln/gsd-2013-0263 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10115-1 <p>ruby2.2-rubygem-rack-1_4-1.4.7-1.8 on GA media</p> <p>ruby2.2-rubygem-rack-1_4-1.4.7-1.8 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10115-1 https://cve.radiocsirt.org/vuln/rhsa-2013:0638 <p>rubygem-rack: Path sanitization information disclosure rubygem-rack: Timing attack in cookie sessions jenkins: cross-site request forgery (CSRF) on Jenkins master jenkins: XSS jenkins: cross-site request forgery (CSRF) protection mechanism bypass jenkins: cause building jobs without direct access jenkins: denial of service attack by feeding a carefully crafted payload to Jenkins</p> <p>rubygem-rack: Path sanitization information disclosure rubygem-rack: Timing attack in cookie sessions jenkins: cross-site request forgery (CSRF) on Jenkins master jenkins: XSS jenkins: cross-site request forgery (CSRF) protection mechanism bypass jenkins: cause building jobs without direct access jenkins: denial of service attack by feeding a carefully crafted payload to Jenkins</p> https://cve.radiocsirt.org/vuln/rhsa-2013:0638 https://cve.radiocsirt.org/vuln/ubuntu-cve-2013-0263 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: ruby-rack</p> <p>Rack::Session::Cookie in Rack 1.5.x before 1.5.2, 1.4.x before 1.4.5, 1.3.x before 1.3.10, 1.2.x before 1.2.8, and 1.1.x before 1.1.6 allows remote attackers to guess the session cookie, gain privileges, and execute arbitrary code via a timing attack involving an HMAC comparison function that does not run in constant time.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: ruby-rack</p> <p>Rack::Session::Cookie in Rack 1.5.x before 1.5.2, 1.4.x before 1.4.5, 1.3.x before 1.3.10, 1.2.x before 1.2.8, and 1.1.x before 1.1.6 allows remote attackers to guess the session cookie, gain privileges, and execute arbitrary code via a timing attack involving an HMAC comparison function that does not run in constant time.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2013-0263