April 2009

10 results · Clear filters · Feed

• Medium 6.1
  CVE-2009-1482

  MoinMoin Cross-site Scripting (XSS) vulnerability

  Multiple cross-site scripting (XSS) vulnerabilities in action/AttachFile.py in MoinMoin 1.8.2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) an AttachFile sub-action in the error_msg function or (2) multiple vectors related …

  moin PyPI
  Apr 29, 2009
• Medium —
  CVE-2009-1190

  Spring Framework Inefficient Regular Expression Complexity

  Algorithmic complexity vulnerability in the java.util.regex.Pattern.compile method in Sun Java Development Kit (JDK) before 1.6, when used with spring.jar in SpringSource Spring Framework 1.1.0 through 2.5.6 and 3.0.0.M1 through 3.0.0.M2 and dm Server 1.0.0 t…

  org.springframework:spring-core Maven
  Apr 27, 2009
• Medium —
  CVE-2009-0662

  Moderate severity vulnerability that affects Products.PlonePAS

  The PlonePAS product 3.x before 3.9 and 3.2.x before 3.2.2, a product for Plone, does not properly handle the login form, which allows remote authenticated users to acquire the identity of an arbitrary user via unspecified vectors.

  plone products-plonepas PyPI
  Apr 23, 2009
• Medium —
  CVE-2009-0038 Public exploit EPSS 18%

  Apache Geronimo Application Server multiple cross-site scripting (XSS) vulnerabilities

  Multiple cross-site scripting (XSS) vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1 through 2.1.3 allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) ip, (3) username, or (4) descript…

  org.apache.geronimo.plugins:console Maven
  Apr 17, 2009
• Medium —
  CVE-2009-0039 Public exploit EPSS 11%

  Apache Geronimo Application Server CSRF vulnerabilities

  Multiple cross-site request forgery (CSRF) vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1 through 2.1.3 allow remote attackers to hijack the authentication of administrators for requests that (1) change the web adm…

  org.apache.geronimo.plugins:console Maven
  Apr 17, 2009
• Medium —
  CVE-2008-6682

  Apache Struts is vulnerable to Cross-site Scripting

  Multiple cross-site scripting (XSS) vulnerabilities in Apache Struts 2.0.x before 2.0.11.1 and 2.1.x before 2.1.1 allow remote attackers to inject arbitrary web script or HTML via vectors associated with improper handling of (1) " (double quote) characters in…

  org.apache.struts:struts2-core Maven
  Apr 9, 2009
• Medium —
  CVE-2008-6681

  Cross-Site Scripting in dojo

  Cross-site scripting (XSS) vulnerability in dijit.Editor in Dojo before 1.1 allows remote attackers to inject arbitrary web script or HTML via XML entities in a TEXTAREA element.

  dojo npm
  Apr 9, 2009
• Medium —
  CVE-2008-2025

  Apache Struts Cross-site Scripting vulnerability

  Cross-site scripting (XSS) vulnerability in Apache Struts before 1.2.9-162.31.1 on SUSE Linux Enterprise (SLE) 11, before 1.2.9-108.2 on SUSE openSUSE 10.3, before 1.2.9-198.2 on SUSE openSUSE 11.0, and before 1.2.9-162.163.2 on SUSE openSUSE 11.1 allows remo…

  struts:struts Maven
  Apr 9, 2009
• Medium —
  CVE-2009-1275

  Apache Tiles Vulnerable to XSS via EL Expression Injection

  Apache Tiles 2.1 before 2.1.2, as used in Apache Struts and other products, evaluates Expression Language (EL) expressions twice in certain circumstances, which allows remote attackers to conduct cross-site scripting (XSS) attacks or obtain sensitive informat…

  org.apache.tiles:tiles-core tiles Debian Maven
  Apr 9, 2009
• Medium —
  CVE-2007-6726

  Apache Struts Dojo Plugin XSS Vulnerability

  Multiple cross-site scripting (XSS) vulnerabilities in Dojo 0.4.1 and 0.4.2, as used in Apache Struts and other products, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving (1) xip_client.html and (2) xip_server.ht…

  org.apache.struts:struts2-dojo-plugin Maven
  Apr 9, 2009