# CVEs published 2010-04-28 18 CVEs were published on April 28, 2010: 0 critical, 0 high. 2 are now in CISA KEV. Days are UTC. - [CVE-2010-1588](https://cve.now/CVE-2010-1588.md): SQL injection vulnerability in the Getwebsess function in shopsessionsubs.asp in Rocksalt International VP-ASP Shopping Cart 6.50 and earlie (no CVSS) - [CVE-2010-1589](https://cve.now/CVE-2010-1589.md): Directory traversal vulnerability in shopsessionsubs.asp in Rocksalt International VP-ASP Shopping Cart 6.50 and earlier might allow remote (no CVSS) - [CVE-2010-1590](https://cve.now/CVE-2010-1590.md): Cross-site scripting (XSS) vulnerability in shopsessionsubs.asp in Rocksalt International VP-ASP Shopping Cart 6.50 and earlier might allow (no CVSS) - [CVE-2010-1591](https://cve.now/CVE-2010-1591.md): Beijing Rising International Rising Antivirus 2008 through 2010 does not properly validate input to certain IOCTLs, including 0x83003C07, wh (no CVSS) - [CVE-2010-1592](https://cve.now/CVE-2010-1592.md): sandra.sys 15.18.1.1 and earlier in the Sandra Device Driver in SiSoftware Sandra 16.10.2010.1 and earlier allows local users to gain privil (no CVSS) - [CVE-2010-1593](https://cve.now/CVE-2010-1593.md): Multiple cross-site scripting (XSS) vulnerabilities in SilverStripe before 2.3.5 allow remote attackers to inject arbitrary web script or HT (no CVSS, silverstripe/cms ยท silverstripe/framework) - [CVE-2010-1594](https://cve.now/CVE-2010-1594.md): Multiple cross-site scripting (XSS) vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to inject arbi (no CVSS) - [CVE-2010-1595](https://cve.now/CVE-2010-1595.md): Multiple SQL injection vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to execute arbitrary SQL co (no CVSS) - [CVE-2010-1596](https://cve.now/CVE-2010-1596.md): Support Incident Tracker before 3.51, when using LDAP authentication with anonymous binds, allows remote attackers to bypass authentication (no CVSS) - [CVE-2010-0738](https://cve.now/CVE-2010-0738.md): The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 a (CVSS 3.7, KEV) - [CVE-2010-1036](https://cve.now/CVE-2010-1036.md): Cross-site scripting (XSS) vulnerability in HP System Insight Manager before 6.0 allows remote attackers to inject arbitrary web script or H (no CVSS) - [CVE-2010-1037](https://cve.now/CVE-2010-1037.md): Cross-site request forgery (CSRF) vulnerability in HP System Insight Manager before 6.0 allows remote attackers to hijack the authentication (no CVSS) - [CVE-2010-1038](https://cve.now/CVE-2010-1038.md): Unspecified vulnerability in HP System Insight Manager before 6.0 allows remote authenticated users to gain privileges via unknown vectors. (no CVSS) - [CVE-2010-1428](https://cve.now/CVE-2010-1428.md): The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 (CVSS 5.9, KEV) - [CVE-2010-1429](https://cve.now/CVE-2010-1429.md): Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 allows remote attacke (no CVSS) - [CVE-2010-1585](https://cve.now/CVE-2010-1585.md): The nsIScriptableUnescapeHTML.parseFragment method in the ParanoidFragmentSink protection mechanism in Mozilla Firefox before 3.5.17 and 3.6 (no CVSS) - [CVE-2010-1586](https://cve.now/CVE-2010-1586.md): Open redirect vulnerability in red2301.html in HP System Management Homepage (SMH) 2.x.x.x allows remote attackers to redirect users to arbi (no CVSS) - [CVE-2010-1587](https://cve.now/CVE-2010-1587.md): The Jetty ResourceHandler in Apache ActiveMQ 5.x before 5.3.2 and 5.4.x before 5.4.0 allows remote attackers to read JSP source code via a / (no CVSS, org.apache.activemq:activemq-web-console) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2010-04-28 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.