Skip to content
OpenAdvisories

Archive

May 2011

Vulnerabilities first published in this month (UTC), newest first.

← April 2011 2011 / May June 2011 →
  1. 1 
  2. 2 
  3. 365
  4. 46
  5. 510
  6. 6 
  7. 730
  8. 8 
  9. 918
  10. 1013
  11. 11 
  12. 12 
  13. 1341
  14. 14 
  15. 15 
  16. 1615
  17. 17 
  18. 18 
  19. 19 
  20. 2035
  21. 21 
  22. 22 
  23. 237
  24. 2413
  25. 25 
  26. 2614
  27. 27 
  28. 28 
  29. 29 
  30. 30 
  31. 3128
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium —
    CVE-2011-1582

    Access restriction bypass in Apache Tomcat

    Apache Tomcat 7.0.12 and 7.0.13 processes the first request to a servlet without following security constraints that have been configured through annotations, which allows remote attackers to bypass intended access restrictions via HTTP requests. NOTE: this v…

    org.apache.tomcat:tomcat Maven
  • Medium —
    CVE-2011-2087

    Apache Struts Multiple XSS Vulnerabilities

    Multiple cross-site scripting (XSS) vulnerabilities in component handlers in the javatemplates (aka Java Templates) plugin in Apache Struts 2.x before 2.2.3 allow remote attackers to inject arbitrary web script or HTML via an arbitrary parameter value to a .a…

    org.apache.struts:struts2-parent Maven
  • Medium —
    CVE-2011-2088

    XWork in Apache Struts Reveals Sensitive Information

    XWork 2.2.1 in Apache Struts 2.2.1, and OpenSymphony XWork in OpenSymphony WebWork, allows remote attackers to obtain potentially sensitive information about internal Java class paths via vectors involving an s:submit element and a nonexistent method, a diffe…

    org.apache.struts.xwork:xwork-core Maven
  • Medium —
    CVE-2011-1571 Public exploit

    Liferay Portal vulnerable to arbitrary command injection

    Unspecified vulnerability in the XSL Content portlet in Liferay Portal Community Edition (CE) 5.x and 6.x before 6.0.6 GA, when Apache Tomcat is used, allows remote attackers to execute arbitrary commands via unknown vectors.

    com.liferay.portal:portal-service Maven