Skip to content
OpenAdvisories

Archive

August 2010

Vulnerabilities first published in this month (UTC), newest first.

← July 2010 2010 / August September 2010 →
  1. 1 
  2. 218
  3. 3 
  4. 417
  5. 510
  6. 618
  7. 7 
  8. 8 
  9. 920
  10. 10 
  11. 1146
  12. 12 
  13. 1314
  14. 14 
  15. 15 
  16. 1619
  17. 1717
  18. 18 
  19. 1924
  20. 2030
  21. 21 
  22. 22 
  23. 2311
  24. 2420
  25. 2531
  26. 2638
  27. 2718
  28. 28 
  29. 29 
  30. 3017
  31. 3112
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium —
    CVE-2010-1870 Public exploit EPSS 92%

    Server side object manipulation in Apache Struts

    The OGNL extensive expression evaluation capability in XWork in Struts 2.0.0 through 2.1.8.1, as used in Atlassian Fisheye, Crucible, and possibly other products, uses a permissive whitelist, which allows remote attackers to modify server-side context objects…

    org.apache.struts:struts2-core Maven
  • Medium —
    CVE-2009-4269

    Use of Password Hash With Insufficient Computational Effort in Apache Derby

    The password hash generation algorithm in the BUILTIN authentication functionality for Apache Derby before 10.6.1.0 performs a transformation that reduces the size of the set of inputs to SHA-1, which produces a small search space that makes it easier for loc…

    org.apache.derby:derby sun-javadb Ubuntu Maven
  • Medium 6.1
    CVE-2010-2969

    MoinMoin cross-site scripting (XSS) vulnerability

    Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.7.3 and earlier, and 1.9.x before 1.9.3, allow remote attackers to inject arbitrary web script or HTML via crafted content, related to (1) action/LikePages.py, (2) action/chart.py, and (3) acti…

    moin PyPI
  • Medium 6.1
    CVE-2010-2970

    MoinMoin cross-site scripting (XSS) vulnerability

    Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.9.x before 1.9.3 allow remote attackers to inject arbitrary web script or HTML via crafted content, related to (1) action/SlideShow.py, (2) action/anywikidraw.py, and (3) action/language_setup.…

    moin PyPI
  • Medium 6.1
    CVE-2010-2487

    MoinMoin Cross-site Scripting (XSS) vulnerability

    Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.7.3 and earlier, 1.8.x before 1.8.8, and 1.9.x before 1.9.3 allow remote attackers to inject arbitrary web script or HTML via crafted content, related to (1) Page.py, (2) PageEditor.py, (3) Pag…

    moin PyPI