Skip to content
OpenAdvisories

Archive

13 May 2011

Vulnerabilities first published on this day (UTC), newest first.

  1. 1 
  2. 2 
  3. 365
  4. 46
  5. 510
  6. 6 
  7. 730
  8. 8 
  9. 918
  10. 1013
  11. 11 
  12. 12 
  13. 1341
  14. 14 
  15. 15 
  16. 1615
  17. 17 
  18. 18 
  19. 19 
  20. 2035
  21. 21 
  22. 22 
  23. 237
  24. 2413
  25. 25 
  26. 2614
  27. 27 
  28. 28 
  29. 29 
  30. 30 
  31. 3128

2 results · Clear filters · Feed

  • Medium —

    Apache Struts Multiple XSS Vulnerabilities

    Multiple cross-site scripting (XSS) vulnerabilities in component handlers in the javatemplates (aka Java Templates) plugin in Apache Struts 2.x before 2.2.3 allow remote attackers to inject arbitrary web script or HTML via an arbitrary parameter value to a .a…

  • Medium —

    XWork in Apache Struts Reveals Sensitive Information

    XWork 2.2.1 in Apache Struts 2.2.1, and OpenSymphony XWork in OpenSymphony WebWork, allows remote attackers to obtain potentially sensitive information about internal Java class paths via vectors involving an s:submit element and a nonexistent method, a diffe…