Oracle Java Applet Rhino Script Engine Policy Bypass (CVE-2011-3544)

A policy bypass vulnerability has been reported in Oracle Java SE. The vulnerability is due to an error in the way the Java Applet handles Rhino JavaScript errors. A remote attacker may exploit this issue by enticing a target user to open a specially crafted web-page or File. Successful...

CVE-2012-0715: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Gantt applet viewer in IBM Tivoli Change and Configuration Management Database CCMDB 7.2.1 and IBM ILOG JViews Gantt allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Java Runtime Environment MixerSequence Function Pointer Control

Added: 02/28/2012 CVE: CVE-2010-0842 BID: 39077 OSVDB: 63493 Background The Java Runtime Environment JRE is part of the Java Development Kit JDK, a set of programming tools for developing Java applications. The Java Runtime Environment provides the minimum requirements for executing a Java...

NX Web Companion Spoofing Arbitrary Code Execution Vulnerability

Vuln Title: NX Web Companion Spoofing Arbitrary Code Execution Vulnerability Date: 25.01.2012 Author: otr Software Link: http://www.nomachine.com/documents/plugin/install.php Version: = 3.x Tested on: Linux, Windows, Mac OS X x86, Mac OS X PPC, Solaris CVE : None, yet Summary The No Machine NX We...

VulnCheck KEV: CVE-2011-3544

An access control vulnerability exists in the Applet Rhino Script Engine component of Oracle's Java Runtime Environment allows an attacker to remotely execute arbitrary code...

SuSE Update for NetworkManager, wpa_supplicant, NetworkManager-gnome SUSE-SA:2011:045

Check for the Version of NetworkManager, wpasupplicant, NetworkManager-gnome OpenVAS Vulnerability Test SuSE Update for NetworkManager, wpasupplicant, NetworkManager-gnome SUSE-SA:2011:045 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.ne...

Oracle Java Rhino Script Engine Code Execution

Added: 12/02/2011 CVE: CVE-2011-3544 BID: 50218 OSVDB: 76500 Background Java is a programming language that compiles programs to bytecode, which is then executed inside a Java Virtual Machine. This is optimal for applications that must run on various hardware platforms, such as web applets. Java...

Oracle Java Applet剪贴板注入远程代码执行漏洞

CVE ID：CVE-2010-4465 Oracle Java Runtime Environment是一款为JAVA应用程序提供可靠的运行环境的解决方案。 由于不充分防御系统剪贴板劫持攻击。当in focus时，恶意组件可无需用户交互获取系统剪贴板的句柄。然后可从剪贴板中读取数据或写入。通过把TransferableProxy对象写入到系统剪贴板，并强制粘贴操作，可调用JRE用户上下文执行任意代码 Oracle Java Runtime 厂商解决方案 用户可参考如下供应商提供的安全公告获得补丁信息：...

Java Applet Rhino Script Engine Remote Code Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' require 'rex' class Metasploit3 'Jav...

Java Applet Rhino Script Engine Remote Code Execution

Exploit for multiple platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...

Java Applet Rhino Script Engine Remote Code Execution

Exploit for jsp platform in category web applications This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

GLSA-201111-05 : Chromium, V8: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201111-05 Chromium, V8: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Chromium and V8. Please review the CVE identifiers and release notes referenced below for details. Impact : A context-dependent...

Chromium, V8: Multiple vulnerabilities

Background Chromium is an open-source web browser project. V8 is Google's open source JavaScript engine. Description Multiple vulnerabilities have been discovered in Chromium and V8. Please review the CVE identifiers and release notes referenced below for details. Impact A context-dependent...

Java for Mac OS X 10.6 Update 6 And 10.7 Update 1

This host is missing an important security update according to Java for Mac OS X 10.6 Update 6 and 10.7 Update 1. OpenVAS Vulnerability Test $Id: secpodmacosxjava106upd6and107upd1.nasl 7019 2017-08-29 11:51:27Z teissa $ Java for Mac OS X 10.6 Update 6 And 10.7 Update 1 Authors: Rachana Shetty...

CVE-2011-3898

Google Chrome before 15.0.874.120, when Java Runtime Environment JRE 7 is used, does not request user confirmation before applet execution begins, which allows remote attackers to have an unspecified impact via a crafted applet...

CVE-2011-3898

Google Chrome before 15.0.874.120, when Java Runtime Environment JRE 7 is used, does not request user confirmation before applet execution begins, which allows remote attackers to have an unspecified impact via a crafted applet...

CVE-2011-3898

Google Chrome before 15.0.874.120, when Java Runtime Environment JRE 7 is used, does not request user confirmation before applet execution begins, which allows remote attackers to have an unspecified impact via a crafted applet...

CVE-2011-3898

Google Chrome before 15.0.874.120, when Java Runtime Environment JRE 7 is used, does not request user confirmation before applet execution begins, which allows remote attackers to have an unspecified impact via a crafted applet...

PT-2011-4769

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 15.0.874.120 Description The issue allows remote attackers to have an unspecified impact via a crafted applet when Java Runtime Environment JRE 7 is used, as Google Chrome does not request user confirmation befo...

Mac OS X : Java for Mac OS X 10.6 Update 6 (BEAST)

The remote Mac OS X host is running a version of Java for Mac OS X 10.6 that is missing Update 6, which updates the Java version to 1.6.029. It is, therefore, affected by multiple security vulnerabilities, the most serious of which may allow an untrusted Java applet to execute arbitrary code with...