[
  {"cve_id":"CVE-2010-1244","description":"Cross-site request forgery (CSRF) vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1 allows remote attackers to hijack the authentication of unspecified victims for requests that create queues via the JMSDestination parameter in a queue action.","exploit_maturity":"No public exploit","published":"2010-04-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"},
  {"cve_id":"CVE-2010-0684","description":"Cross-site scripting (XSS) vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1 allows remote authenticated users to inject arbitrary web script or HTML via the JMSDestination parameter in a queue action.","exploit_maturity":"No public exploit","published":"2010-04-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Low"},
  {"cve_id":"CVE-2010-0848","description":"Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-04-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"High"},
  {"cve_id":"CVE-2010-0837","description":"Unspecified vulnerability in the Pack200 component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-04-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"High"},
  {"cve_id":"CVE-2010-0093","description":"Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2010-0095.","exploit_maturity":"No public exploit","published":"2010-04-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"},
  {"cve_id":"CVE-2010-0092","description":"Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, and 5.0 Update 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-04-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}
]