Skip to content
OpenAdvisories

Archive

April 2010

Vulnerabilities first published in this month (UTC), newest first.

← March 2010 2010 / April May 2010 →
  1. 148
  2. 2 
  3. 3 
  4. 4 
  5. 543
  6. 624
  7. 711
  8. 815
  9. 918
  10. 10 
  11. 11 
  12. 1221
  13. 1366
  14. 1440
  15. 1510
  16. 1614
  17. 17 
  18. 18 
  19. 1913
  20. 2027
  21. 2119
  22. 2216
  23. 2328
  24. 24 
  25. 25 
  26. 2617
  27. 2724
  28. 2818
  29. 2928
  30. 3016
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Low —
    CVE-2010-1614

    Moodle vulnerable to Cross-site Scripting

    Multiple cross-site scripting (XSS) vulnerabilities in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8 allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) the Login-As feature or (2) when the global search feature is ena…

    moodle/moodle Packagist
  • Low —
    CVE-2010-1619

    Moodle vulnerable to Cross-site Scripting

    Cross-site scripting (XSS) vulnerability in the fix_non_standard_entities function in the KSES HTML text cleaning library (weblib.php), as used in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8, allows remote attackers to inject arbitrary web script or HTM…

    moodle/moodle Packagist
  • Low —
    CVE-2010-1617

    Moodle doesn't properly check role

    user/view.php in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8 does not properly check a role, which allows remote authenticated users to obtain the full names of other users via the course profile page.

    moodle/moodle Packagist
  • Low —
    CVE-2010-1593

    SilverStripe vulnerable to Cross-site Scripting

    Multiple cross-site scripting (XSS) vulnerabilities in SilverStripe before 2.3.5 allow remote attackers to inject arbitrary web script or HTML via (1) the CommenterURL parameter to PostCommentForm, and in the Forum module before 0.2.5 in SilverStripe before 2…

    silverstripe/framework silverstripe/cms Packagist
  • Low 3.7
    CVE-2010-0738 Exploited · Ransomware Public exploit Scanner template EPSS 74%

    The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.…

    KEV May 25, 2022
  • Low —
    CVE-2010-0684

    Cross-site scripting in Apache ActiveMQ

    Cross-site scripting (XSS) vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1 allows remote authenticated users to inject arbitrary web script or HTML via the JMSDestination parameter in a queue action.

    org.apache.activemq:activemq-parent Maven