Skip to content
OpenAdvisories

Archive

April 2010

Vulnerabilities first published in this month (UTC), newest first.

← March 2010 2010 / April May 2010 →
  1. 148
  2. 2 
  3. 3 
  4. 4 
  5. 543
  6. 624
  7. 711
  8. 815
  9. 918
  10. 10 
  11. 11 
  12. 1221
  13. 1366
  14. 1440
  15. 1510
  16. 1614
  17. 17 
  18. 18 
  19. 1913
  20. 2027
  21. 2119
  22. 2216
  23. 2328
  24. 24 
  25. 25 
  26. 2617
  27. 2724
  28. 2818
  29. 2928
  30. 3016
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium —
    CVE-2010-1618

    phpCAS client library and Moodle Cross-site Scripting vulnerability

    Cross-site scripting (XSS) vulnerability in the phpCAS client library before 1.1.0, as used in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8, allows remote attackers to inject arbitrary web script or HTML via a crafted URL, which is not properly handled i…

    moodle/moodle apereo/phpcas Packagist
  • Medium —
    CVE-2010-1613

    Moodle Session Fixation vulnerability

    Moodle 1.8.x and 1.9.x before 1.9.8 does not enable the "Regenerate session id during login" setting by default, which makes it easier for remote attackers to conduct session fixation attacks.

    moodle/moodle Packagist
  • Medium —
    CVE-2010-1616

    Moodle is vulnerable to unauthorized new accounts creation

    Moodle 1.8.x and 1.9.x before 1.9.8 can create new roles when restoring a course, which allows teachers to create new accounts even if they do not have the moodle/user:create capability.

    moodle/moodle Packagist
  • Medium —
    CVE-2010-1587 Public exploit EPSS 78%

    Apache ActiveMQ Sensitive Information Disclosure via the Jetty ResourceHandler

    The Jetty ResourceHandler in Apache ActiveMQ 5.x before 5.3.2 and 5.4.x before 5.4.0 allows remote attackers to read JSP source code via a // (slash slash) initial substring in a URI for (1) admin/index.jsp, (2) admin/queues.jsp, or (3) admin/topics.jsp.

    org.apache.activemq:activemq-web-console Maven
  • Medium 5.9
    CVE-2010-1428 Exploited · Ransomware Public exploit Scanner template EPSS 53%

    The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) …

    KEV May 25, 2022
  • Medium —
    CVE-2010-1157 Public exploit EPSS 53%

    Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat

    Apache Tomcat 5.5.0 through 5.5.29 and 6.0.0 through 6.0.26 might allow remote attackers to discover the server's hostname or IP address by sending a request for a resource that requires (1) BASIC or (2) DIGEST authentication, and then reading the realm field…

    org.apache.tomcat:tomcat Maven
  • Medium 5.5
    CVE-2010-0481

    The kernel in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not…

  • Medium —
    CVE-2010-1244

    Cross-site request forgery in Apache ActiveMQ

    Cross-site request forgery (CSRF) vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1 allows remote attackers to hijack the authentication of unspecified victims for requests that create queues via the JMSDestination parameter in a queue…

    org.apache.activemq:activemq-parent Maven
  • Medium 5.4
    CVE-2010-0828

    MoinMoin Cross-site Scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in action/Despam.py in the Despam action module in MoinMoin 1.8.7 and 1.9.2 allows remote authenticated users to inject arbitrary web script or HTML by creating a page with a crafted URI.

    moin PyPI