CVEs published April 28, 2010
18 CVEs were published on April 28, 2010: 0 critical, 0 high. 2 are now in CISA KEV.
- Published
- 18
- Critical
- 0
- High
- 0
- Medium
- 1
- Low
- 1
- Unrated
- 16
- Now in CISA KEV
- 2
- Fix available
- 2
Most affected products
- org.apache.activemq:activemq-web-console
- 1
- silverstripe/cms · silverstripe/framework
- 1
Medium, low and unrated 18
- CVE-2010-1588SQL injection vulnerability in the Getwebsess function in shopsessionsubs.asp in Rocksalt International VP-ASP Shopping Cart 6.50 and…
- CVE-2010-1589Directory traversal vulnerability in shopsessionsubs.asp in Rocksalt International VP-ASP Shopping Cart 6.50 and earlier might allow…
- CVE-2010-1590Cross-site scripting (XSS) vulnerability in shopsessionsubs.asp in Rocksalt International VP-ASP Shopping Cart 6.50 and earlier might…
- CVE-2010-1591Beijing Rising International Rising Antivirus 2008 through 2010 does not properly validate input to certain IOCTLs, including 0x83003C07…
- CVE-2010-1592sandra.sys 15.18.1.1 and earlier in the Sandra Device Driver in SiSoftware Sandra 16.10.2010.1 and earlier allows local users to gain…
- CVE-2010-1593Multiple cross-site scripting (XSS) vulnerabilities in SilverStripe before 2.3.5 allow remote attackers to inject arbitrary web script or…silverstripe/cms · silverstripe/framework
- CVE-2010-1594Multiple cross-site scripting (XSS) vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to inject…
- CVE-2010-1595Multiple SQL injection vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to execute arbitrary SQL…
- CVE-2010-1596Support Incident Tracker before 3.51, when using LDAP authentication with anonymous binds, allows remote attackers to bypass…
- CVE-2010-0738The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 a
- CVE-2010-1036Cross-site scripting (XSS) vulnerability in HP System Insight Manager before 6.0 allows remote attackers to inject arbitrary web script or…
- CVE-2010-1037Cross-site request forgery (CSRF) vulnerability in HP System Insight Manager before 6.0 allows remote attackers to hijack the…
- CVE-2010-1038Unspecified vulnerability in HP System Insight Manager before 6.0 allows remote authenticated users to gain privileges via unknown vectors.
- CVE-2010-1428The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09
- CVE-2010-1429Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 allows remote…
- CVE-2010-1585The nsIScriptableUnescapeHTML.parseFragment method in the ParanoidFragmentSink protection mechanism in Mozilla Firefox before 3.5.17 and…
- CVE-2010-1586Open redirect vulnerability in red2301.html in HP System Management Homepage (SMH) 2.x.x.x allows remote attackers to redirect users to…
- CVE-2010-1587The Jetty ResourceHandler in Apache ActiveMQ 5.x before 5.3.2 and 5.4.x before 5.4.0 allows remote attackers to read JSP source code via a…org.apache.activemq:activemq-web-console