https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 06:03:33 +0000 https://cve.radiocsirt.org/vuln/bdu:2015-09978 bdu:2015-09978 https://cve.radiocsirt.org/vuln/bdu:2015-09978 https://cve.radiocsirt.org/vuln/certfr-2015-avi-308 certfr-2015-avi-308 https://cve.radiocsirt.org/vuln/certfr-2015-avi-308 https://cve.radiocsirt.org/vuln/cnvd-2015-02927 cnvd-2015-02927 https://cve.radiocsirt.org/vuln/cnvd-2015-02927 https://cve.radiocsirt.org/vuln/euvd-2026-90560 EUVD-2026-90560 https://cve.radiocsirt.org/vuln/euvd-2026-90560 https://cve.radiocsirt.org/vuln/fkie_cve-2015-1855 <p>verify_certificate_identity in the OpenSSL extension in Ruby before 2.0.0 patchlevel 645, 2.1.x before 2.1.6, and 2.2.x before 2.2.2 does not properly validate hostnames, which allows remote attackers to spoof servers via vectors related to (1) multiple wildcards, (1) wildcards in IDNA names, (3) case sensitivity, and (4) non-ASCII characters.</p> <p>verify_certificate_identity in the OpenSSL extension in Ruby before 2.0.0 patchlevel 645, 2.1.x before 2.1.6, and 2.2.x before 2.2.2 does not properly validate hostnames, which allows remote attackers to spoof servers via vectors related to (1) multiple wildcards, (1) wildcards in IDNA names, (3) case sensitivity, and (4) non-ASCII characters.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-1855 https://cve.radiocsirt.org/vuln/ghsa-4x8v-74xf-h4g3 <p>verify_certificate_identity in the OpenSSL extension in Ruby before 2.0.0 patchlevel 645, 2.1.x before 2.1.6, and 2.2.x before 2.2.2 does not properly validate hostnames, which allows remote attackers to spoof servers via vectors related to (1) multiple wildcards, (1) wildcards in IDNA names, (3) case sensitivity, and (4) non-ASCII characters.</p> <p>verify_certificate_identity in the OpenSSL extension in Ruby before 2.0.0 patchlevel 645, 2.1.x before 2.1.6, and 2.2.x before 2.2.2 does not properly validate hostnames, which allows remote attackers to spoof servers via vectors related to (1) multiple wildcards, (1) wildcards in IDNA names, (3) case sensitivity, and (4) non-ASCII characters.</p> https://cve.radiocsirt.org/vuln/ghsa-4x8v-74xf-h4g3 https://cve.radiocsirt.org/vuln/gsd-2015-1855 gsd-2015-1855 https://cve.radiocsirt.org/vuln/gsd-2015-1855 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10090-1 <p>libruby2_3-2_3-2.3.1-1.6 on GA media</p> <p>libruby2_3-2_3-2.3.1-1.6 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10090-1 https://cve.radiocsirt.org/vuln/suse-su-2015:1889-1 <p>Security update for ruby19</p> <p>Security update for ruby19</p> https://cve.radiocsirt.org/vuln/suse-su-2015:1889-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-1855 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: ruby1.9.1, Ubuntu:14.04:LTS: ruby2.0</p> <p>verify_certificate_identity in the OpenSSL extension in Ruby before 2.0.0 patchlevel 645, 2.1.x before 2.1.6, and 2.2.x before 2.2.2 does not properly validate hostnames, which allows remote attackers to spoof servers via vectors related to (1) multiple wildcards, (1) wildcards in IDNA names, (3) case sensitivity, and (4) non-ASCII characters.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: ruby1.9.1, Ubuntu:14.04:LTS: ruby2.0</p> <p>verify_certificate_identity in the OpenSSL extension in Ruby before 2.0.0 patchlevel 645, 2.1.x before 2.1.6, and 2.2.x before 2.2.2 does not properly validate hostnames, which allows remote attackers to spoof servers via vectors related to (1) multiple wildcards, (1) wildcards in IDNA names, (3) case sensitivity, and (4) non-ASCII characters.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-1855