Skip to content
OpenAdvisories

Archive

August 2010

Vulnerabilities first published in this month (UTC), newest first.

← July 2010 2010 / August September 2010 →
  1. 1 
  2. 218
  3. 3 
  4. 417
  5. 510
  6. 618
  7. 7 
  8. 8 
  9. 920
  10. 10 
  11. 1146
  12. 12 
  13. 1314
  14. 14 
  15. 15 
  16. 1619
  17. 1717
  18. 18 
  19. 1924
  20. 2030
  21. 21 
  22. 22 
  23. 2311
  24. 2420
  25. 2531
  26. 2638
  27. 2718
  28. 28 
  29. 29 
  30. 3017
  31. 3112
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium —
    CVE-2010-1870 Public exploit EPSS 92%

    Server side object manipulation in Apache Struts

    The OGNL extensive expression evaluation capability in XWork in Struts 2.0.0 through 2.1.8.1, as used in Atlassian Fisheye, Crucible, and possibly other products, uses a permissive whitelist, which allows remote attackers to modify server-side context objects…

    org.apache.struts:struts2-core Maven