28 April 2010

18 results · Feed

• Unscored —
  CVE-2010-1590

  Cross-site scripting (XSS) vulnerability in shopsessionsubs.asp in Rocksalt International VP-ASP Shopping Cart 6.50 and…

  Apr 28, 2010
• Unscored —
  CVE-2010-1591 Public exploit

  Beijing Rising International Rising Antivirus 2008 through 2010 does not properly validate input to certain IOCTLs, inc…

  Apr 28, 2010
• Unscored —
  CVE-2010-1588

  SQL injection vulnerability in the Getwebsess function in shopsessionsubs.asp in Rocksalt International VP-ASP Shopping…

  Apr 28, 2010
• Unscored —
  CVE-2010-1589

  Directory traversal vulnerability in shopsessionsubs.asp in Rocksalt International VP-ASP Shopping Cart 6.50 and earlie…

  Apr 28, 2010
• Unscored —
  CVE-2010-1592

  sandra.sys 15.18.1.1 and earlier in the Sandra Device Driver in SiSoftware Sandra 16.10.2010.1 and earlier allows local…

  Apr 28, 2010
• Unscored —
  CVE-2010-1595

  Multiple SQL injection vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to exe…

  ocsinventory-server Debian
  Apr 28, 2010
• Low —
  CVE-2010-1593

  SilverStripe vulnerable to Cross-site Scripting

  Multiple cross-site scripting (XSS) vulnerabilities in SilverStripe before 2.3.5 allow remote attackers to inject arbitrary web script or HTML via (1) the CommenterURL parameter to PostCommentForm, and in the Forum module before 0.2.5 in SilverStripe before 2…

  silverstripe/framework silverstripe/cms Packagist
  Apr 28, 2010
• Unscored —
  CVE-2010-1594

  Multiple cross-site scripting (XSS) vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote att…

  ocsinventory-server Debian
  Apr 28, 2010
• Unscored —
  CVE-2010-1596

  Support Incident Tracker before 3.51, when using LDAP authentication with anonymous binds, allows remote attackers to b…

  Apr 28, 2010
• Low 3.7
  CVE-2010-0738 Exploited · Ransomware Public exploit Scanner template EPSS 74%

  The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.…

  Apr 28, 2010

  KEV May 25, 2022
• Medium —
  CVE-2010-1587 Public exploit EPSS 78%

  Apache ActiveMQ Sensitive Information Disclosure via the Jetty ResourceHandler

  The Jetty ResourceHandler in Apache ActiveMQ 5.x before 5.3.2 and 5.4.x before 5.4.0 allows remote attackers to read JSP source code via a // (slash slash) initial substring in a URI for (1) admin/index.jsp, (2) admin/queues.jsp, or (3) admin/topics.jsp.

  org.apache.activemq:activemq-web-console Maven
  Apr 28, 2010
• Unscored —
  CVE-2010-1429 Public exploit Scanner template EPSS 54%

  Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 …

  Apr 28, 2010
• Medium 5.9
  CVE-2010-1428 Exploited · Ransomware Public exploit Scanner template EPSS 53%

  The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) …

  Apr 28, 2010

  KEV May 25, 2022
• Unscored —
  CVE-2010-1036

  Cross-site scripting (XSS) vulnerability in HP System Insight Manager before 6.0 allows remote attackers to inject arbi…

  Apr 28, 2010
• Unscored —
  CVE-2010-1038

  Unspecified vulnerability in HP System Insight Manager before 6.0 allows remote authenticated users to gain privileges …

  Apr 28, 2010
• Unscored —
  CVE-2010-1586 Public exploit Scanner template EPSS 10%

  Open redirect vulnerability in red2301.html in HP System Management Homepage (SMH) 2.x.x.x allows remote attackers to r…

  Apr 28, 2010
• Unscored —
  CVE-2010-1585

  The nsIScriptableUnescapeHTML.parseFragment method in the ParanoidFragmentSink protection mechanism in Mozilla Firefox …

  Apr 28, 2010
• Unscored —
  CVE-2010-1037

  Cross-site request forgery (CSRF) vulnerability in HP System Insight Manager before 6.0 allows remote attackers to hija…

  Apr 28, 2010