Skip to content
OpenAdvisories

Archive

April 2010

Vulnerabilities first published in this month (UTC), newest first.

3 results · Clear filters · Feed

  • Medium —
    CVE-2010-1587 Public exploit EPSS 78%

    Apache ActiveMQ Sensitive Information Disclosure via the Jetty ResourceHandler

    The Jetty ResourceHandler in Apache ActiveMQ 5.x before 5.3.2 and 5.4.x before 5.4.0 allows remote attackers to read JSP source code via a // (slash slash) initial substring in a URI for (1) admin/index.jsp, (2) admin/queues.jsp, or (3) admin/topics.jsp.

  • Medium 5.9
    CVE-2010-1428 Exploited · Ransomware Public exploit Scanner template EPSS 53%

    The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) …

    KEV May 25, 2022
  • Medium —
    CVE-2010-1157 Public exploit EPSS 53%

    Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat

    Apache Tomcat 5.5.0 through 5.5.29 and 6.0.0 through 6.0.26 might allow remote attackers to discover the server's hostname or IP address by sending a request for a resource that requires (1) BASIC or (2) DIGEST authentication, and then reading the realm field…