Archive
17 August 2010
Vulnerabilities first published on this day (UTC), newest first.
3 results · Clear filters · Feed
-
Medium —
Server side object manipulation in Apache Struts
The OGNL extensive expression evaluation capability in XWork in Struts 2.0.0 through 2.1.8.1, as used in Atlassian Fisheye, Crucible, and possibly other products, uses a permissive whitelist, which allows remote attackers to modify server-side context objects…
-
Unscored —CVE-2010-3030 Public exploit
Cross-site request forgery (CSRF) vulnerability in Tomaz Muraus Open Blog 1.2.1, and possibly earlier, allows remote at…
-
Unscored —CVE-2010-2939 Public exploit
Double free vulnerability in the ssl3_get_key_exchange function in the OpenSSL client (ssl/s3_clnt.c) in OpenSSL 1.0.0a…