Skip to content
OpenAdvisories

Archive

26 November 2010

Vulnerabilities first published on this day (UTC), newest first.

← October 2010 2010 / November /26 December 2010 →
  1. 118
  2. 2 
  3. 39
  4. 44
  5. 537
  6. 6 
  7. 720
  8. 86
  9. 919
  10. 1015
  11. 11 
  12. 1215
  13. 13 
  14. 14 
  15. 1518
  16. 1637
  17. 177
  18. 18 
  19. 19 
  20. 2026
  21. 21 
  22. 228
  23. 23 
  24. 24 
  25. 25 
  26. 2623
  27. 27 
  28. 28 
  29. 299
  30. 307
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium —
    CVE-2010-4312

    Apache Tomcat has cookies without HTTPOnly flag in Set-Cookie header

    The default configuration of Apache Tomcat 6.x does not include the HTTPOnly flag in a Set-Cookie header, which makes it easier for remote attackers to hijack a session via script access to a cookie.

    org.apache.tomcat:tomcat Maven
  • Medium —
    CVE-2010-4172 Public exploit EPSS 42%

    Improper Neutralization of Input During Web Page Generation in Apache Tomcat

    Multiple cross-site scripting (XSS) vulnerabilities in the Manager application in Apache Tomcat 6.0.12 through 6.0.29 and 7.0.0 through 7.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) orderBy or (2) sort parameter to sessionsLi…

    org.apache.tomcat:tomcat Maven