CVE-2011-4679

vtiger CRM before 5.3.0 does not properly recognize the disabled status of a field in the Leads module, which allows remote authenticated users to bypass intended access restrictions by reading a previously created report...

CVE-2011-4683

Unspecified vulnerability in Opera before 11.60 has unknown impact and attack vectors, related to a "moderately severe issue."...

CVE-2011-4263

Cross-site scripting XSS vulnerability in Schneider Electric PowerChute Business Edition before 8.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-4692

WebKit, as used in Apple Safari 5.1.1 and earlier and Google Chrome 15 and earlier, does not prevent capture of data about the time required for image loading, which makes it easier for remote attackers to determine whether an image exists in the browser cache via crafted JavaScript code, as...

CVE-2011-2462

Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS X, and Adobe Reader 9.x through 9.4.6 on UNIX, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via unknown vectors, as exploited in...

Immunity Canvas: PDF_U3D

Name| pdfu3d ---|--- CVE| CVE-2011-2462 Exploit Pack| CANVAS Description| Adobe Acrobat Reader U3D bug Notes| CVE Name: CVE-2011-2462 VersionsAffected: 9.4 Repeatability: Infinite References: http://www.symantec.com/connect/blogs/new-zero-day-pdf-exploit-used-targeted-attack Date public: 6 Decemb...

CVE-2011-4690

Opera 11.60 and earlier does not prevent capture of data about the times of Same Origin Policy violations during IFRAME loading attempts, which makes it easier for remote attackers to determine whether a document exists in the browser cache via crafted JavaScript code...

CVE-2011-4692

The CVE-2011-4692 issue affects WebKit as used by Apple Safari 5.1.1 and earlier and Google Chrome 15 and earlier. The root cause is that the browser does not prevent timing-based data leakage when loading images, allowing remote attackers to infer whether an image is cached via crafted JavaScrip...

CVE-2011-4684

Opera before 11.60 does not properly handle certificate revocation, per CVE-2011-4684. Connected sources confirm affected product: Opera browser; root cause: improper certificate revocation handling; impact is described as unspecified in the initial entry. Remediation evident in the connected doc...

CVE-2011-4687

CVE-2011-4687 affects Opera before 11.60. The issue is a remote denial-of-service vulnerability caused by processing unspecified content on a web page (demonstrated via a Cisco homepage page), leading to CPU and memory consumption. Public documents identify Opera 11.60 as the fixed version; OpenV...

CVE-2011-4679

vtiger CRM before 5.3.0 does not properly recognize the disabled status of a field in the Leads module, which allows remote authenticated users to bypass intended access restrictions by reading a previously created report...

CVE-2011-4684

Opera before 11.60 does not properly handle certificate revocation, which has unspecified impact and remote attack vectors related to "corner cases."...

CVE-2011-4682

CVE-2011-4682 corresponds to an Opera JavaScript engine issue where the in operator is not correctly implemented, allowing remote attackers to bypass the Same Origin Policy via cross-site variable vectors. The vulnerability affects Opera releases prior to 11.60, with exploitation leading to poten...

CVE-2011-4691

The CVE-2011-4691 entry concerns Google Chrome 15.0.874.121 and earlier. According to connected sources, the flaw enables an attacker to infer whether a document exists in the browser cache by observing the timing of Same Origin Policy violations during IFRAME loading, via crafted JavaScript. Aff...

CVE-2011-4689

CVE-2011-4689 affects Microsoft Internet Explorer 6–9 and is a timing-based information-disclosure vulnerability in which SOP/Same Origin Policy timing data can be captured during IFRAME loading. Several connected sources (Red Hat advisory, NVD entry, and OpenVAS/SEebug records) describe that rem...

CVE-2011-4686

Unspecified vulnerability in the Web Workers implementation in Opera before 11.60 allows remote attackers to cause a denial of service application crash via unknown vectors...

CVE-2011-4685

CVE-2011-4685 affects Opera prior to version 11.60. The issue allows remote attackers to cause a denial of service (application crash) via content on a web page (e.g., Forbes demonstrates). Affected software: Opera before 11.60. Root cause details are not elaborated in the provided text beyond th...

CVE-2011-4686

Opera CVE-2011-4686 describes an unspecified vulnerability in the Web Workers implementation that could cause an application crash (DoS) in Opera before version 11.60. The connected security records corroborate this as a vulnerability affecting Opera and note a fixed release (11.60) accompanying ...

CVE-2011-4683

Opera before 11.60 is affected by multiple vulnerabilities (described in GLSA-201206-03). A remote attacker could entice a user to open a crafted page, potentially allowing execution of arbitrary code or other impacts; local attackers could abuse symlink attacks; there are broader DoS/spoofing im...

CVE-2011-4679

CVE-2011-4679 affects vtiger CRM prior to 5.3.0. The issue: the Leads module fails to properly recognize a field’s disabled status, allowing remote authenticated users to bypass access restrictions by reading a previously created report. Affected product/version: vtiger CRM