Skip to content
OpenAdvisories

Archive

July 2010

Vulnerabilities first published in this month (UTC), newest first.

← June 2010 2010 / July August 2010 →
  1. 117
  2. 214
  3. 3 
  4. 4 
  5. 5 
  6. 626
  7. 715
  8. 815
  9. 925
  10. 10 
  11. 11 
  12. 1211
  13. 1371
  14. 149
  15. 15 
  16. 16 
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 2234
  23. 2316
  24. 24 
  25. 25 
  26. 26 
  27. 2727
  28. 2818
  29. 295
  30. 3040
  31. 31 
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium —
    CVE-2010-2227 Public exploit EPSS 55%

    Apache Tomcat does not properly handle an invalid Transfer-Encoding header

    Apache Tomcat 5.5.0 through 5.5.29, 6.0.0 through 6.0.27, and 7.0.0 beta does not properly handle an invalid Transfer-Encoding header, which allows remote attackers to cause a denial of service (application outage) or obtain sensitive information via a crafte…

    org.apache.tomcat:tomcat Maven
  • Medium —
    CVE-2010-2479

    HTML Purifier Cross-site Scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in HTML Purifier before 4.1.1, as used in Mahara and other products, when the browser is Internet Explorer, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

    ezyang/htmlpurifier php-htmlpurifier Debian Packagist
  • Medium 6.1
    CVE-2009-4924

    Cross-site Scripting in python-cjson

    Dan Pascu python-cjson 1.0.5 does not properly handle a ['/'] argument to cjson.encode, which makes it easier for remote attackers to conduct certain cross-site scripting (XSS) attacks involving Firefox and the end tag of a SCRIPT element.

    python-cjson PyPI
  • Medium —
    CVE-2010-1666

    Improper Restriction of Operations within the Bounds of a Memory Buffer in python-cjson

    Buffer overflow in Dan Pascu python-cjson 1.0.5, when UCS-4 encoding is enabled, allows context-dependent attackers to cause a denial of service (application crash) or possibly have unspecified other impact via vectors involving crafted Unicode input to the c…

    python-cjson PyPI
  • Medium 6.1
    CVE-2010-2480

    Mako contains Cross-site Scripting vulnerability

    Mako before 0.3.4 relies on the cgi.escape function in the Python standard library for cross-site scripting (XSS) protection, which makes it easier for remote attackers to conduct XSS attacks via vectors involving single-quote characters and a JavaScript onLo…

    mako mako Debian PyPI