Skip to content
OpenAdvisories

Archive

2 March 2012

Vulnerabilities first published on this day (UTC), newest first.

← February 2012 2012 / March /2 April 2012 →
  1. 111
  2. 28
  3. 36
  4. 4 
  5. 517
  6. 63
  7. 728
  8. 874
  9. 96
  10. 101
  11. 11 
  12. 125
  13. 1326
  14. 1425
  15. 1519
  16. 167
  17. 172
  18. 182
  19. 1933
  20. 2012
  21. 2145
  22. 2222
  23. 233
  24. 24 
  25. 25 
  26. 263
  27. 275
  28. 2817
  29. 2913
  30. 308
  31. 312
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High —
    CVE-2012-0838 EPSS 14%

    Apache Struts Code injection due to conversion error

    Apache Struts 2 before 2.2.3.1 evaluates a string as an OGNL expression during the handling of a conversion error, which allows remote attackers to modify run-time data values, and consequently execute arbitrary code, via invalid input to a field.

    org.apache.struts:struts2-core org.apache.struts.xwork:xwork-core Maven