CVE-2010-4007

Oracle Mojarra uses an encrypted View State without a Message Authentication Code MAC, which makes it easier for remote attackers to perform successful modifications of the View State via a padding oracle attack, a related issue to CVE-2010-2057...

CVE-2008-3637

The CVE-2008-3637 issue affects Java for Mac OS X on 10.4.11, 10.5.4, and 10.5.5, where the HMAC provider uses an uninitialized variable, enabling remote code execution via a crafted Java applet. OpenVAS/Nessus references show that Java for Mac OS X 10.5 Update 2 (and related 10.4 Release 7/10.5 ...