Skip to content
OpenAdvisories

Archive

November 2010

Vulnerabilities first published in this month (UTC), newest first.

← October 2010 2010 / November December 2010 →
  1. 118
  2. 2 
  3. 39
  4. 44
  5. 537
  6. 6 
  7. 720
  8. 86
  9. 919
  10. 1015
  11. 11 
  12. 1215
  13. 13 
  14. 14 
  15. 1518
  16. 1637
  17. 177
  18. 18 
  19. 19 
  20. 2026
  21. 21 
  22. 228
  23. 23 
  24. 24 
  25. 25 
  26. 2623
  27. 27 
  28. 28 
  29. 299
  30. 307
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium —
    CVE-2010-4172 Public exploit EPSS 42%

    Improper Neutralization of Input During Web Page Generation in Apache Tomcat

    Multiple cross-site scripting (XSS) vulnerabilities in the Manager application in Apache Tomcat 6.0.12 through 6.0.29 and 7.0.0 through 7.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) orderBy or (2) sort parameter to sessionsLi…

    org.apache.tomcat:tomcat Maven
  • Medium —
    CVE-2010-3863 Public exploit EPSS 55%

    Apache Shiro Path Traversal vulnerability

    Apache Shiro before 1.1.0, and JSecurity 0.9.x, does not canonicalize URI paths before comparing them to entries in the shiro.ini file, which allows remote attackers to bypass intended access restrictions via a crafted request, as demonstrated by the /./accou…

    org.apache.shiro:shiro-root Maven