Skip to content
OpenAdvisories

Archive

May 2010

Vulnerabilities first published in this month (UTC), newest first.

← April 2010 2010 / May June 2010 →
  1. 1 
  2. 2 
  3. 3 
  4. 434
  5. 523
  6. 69
  7. 743
  8. 8 
  9. 9 
  10. 1018
  11. 1119
  12. 1223
  13. 1328
  14. 1420
  15. 15 
  16. 16 
  17. 179
  18. 1820
  19. 1920
  20. 2024
  21. 2111
  22. 22 
  23. 23 
  24. 2416
  25. 2521
  26. 2614
  27. 2734
  28. 2816
  29. 29 
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium —
    CVE-2010-2103 Public exploit EPSS 35%

    Improper Neutralization of Input During Web Page Generation in Apache Axis2

    Cross-site scripting (XSS) vulnerability in axis2-admin/axis2-admin/engagingglobally in the administration console in Apache Axis2/Java 1.4.1, 1.5.1, and possibly other versions, as used in SAP Business Objects 12, 3com IMC, and possibly other products, allow…

    org.apache.axis2.wso2:axis2 Maven
  • Medium —
    CVE-2010-1459

    Mono ASP.NET View State Cross-Site Scripting (XSS) vulnerability

    The default configuration of ASP.NET in Mono before 2.6.4 has a value of FALSE for the EnableViewStateMac property, which allows remote attackers to conduct cross-site scripting (XSS) attacks, as demonstrated by the __VIEWSTATE parameter to 2.0/menu/menu1.asp…

    mono mono Debian NuGet
  • Medium —
    CVE-2010-2086

    Apache MyFaces Cross-site Scripting vulnerability

    Apache MyFaces 1.1.7 and 1.2.8, as used in IBM WebSphere Application Server and other applications, does not properly handle an unencrypted view state, which allows remote attackers to conduct cross-site scripting (XSS) attacks or execute arbitrary Expression…

    org.apache.myfaces.core:myfaces-core-module Maven