Hardcoded credentials

Opera before 11.10 allows remote attackers to cause a denial of service application crash via an HTML document that has an empty parameter value for an embedded Java applet...

CVE-2011-2640

CVE-2011-2640 affects Opera before 11.10. An HTML document with an empty parameter value for an embedded Java applet could cause the browser to crash (remote denial of service). Remediation: upgrade to Opera 11.10 or newer as indicated by the referenced advisories.

CVE-2011-2640: Undefined Security Weakness

Opera before 11.10 allows remote attackers to cause a denial of service application crash via an HTML document that has an empty parameter value for an embedded Java applet...

PT-2011-3989

Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.10 Description The issue allows remote attackers to cause a denial of service, resulting in an application crash. This can be achieved by creating an HTML document with an embedded Java applet that has an empty...

Fedora 14 : tomboy-1.6.0-1.fc14 (2011-7994)

Version 1.6.0 : - Grammar and language fixes bgo642156 - Changed GetSelectedNotebook from private to public so it can be used by add-ins Robert Nordan - Fix tomboy insecure LDLIBRARYPATH bgo635614, Luis Medinas - Fix CVE-2010-4005 Luis Medinas. Originally found by Ludwig Nussel - Fix Remove title...

Fedora 15 : tomboy-1.6.0-1.fc15 (2011-7997)

Version 1.6.0 : - Grammar and language fixes bgo642156 - Changed GetSelectedNotebook from private to public so it can be used by add-ins Robert Nordan - Fix tomboy insecure LDLIBRARYPATH bgo635614, Luis Medinas - Fix CVE-2010-4005 Luis Medinas. Originally found by Ludwig Nussel - Fix Remove title...

PT-2011-2717

Name of the Vulnerable Software and Affected Versions Java SE 6 versions prior to Update 26 Description The issue affects confidentiality and is related to the SAAJ component in the Java Runtime Environment. It allows remote untrusted Java Web Start applications and untrusted Java applets to...

CVE-2011-2040

The helper application in Cisco AnyConnect Secure Mobility Client formerly AnyConnect VPN Client before 2.5.3041, and 3.0.x before 3.0.629, on Linux and Mac OS X downloads a client executable file vpndownloader.exe without verifying its authenticity, which allows remote attackers to execute...

Design/Logic Flaw

The helper application in Cisco AnyConnect Secure Mobility Client formerly AnyConnect VPN Client before 2.5.3041, and 3.0.x before 3.0.629, on Linux and Mac OS X downloads a client executable file vpndownloader.exe without verifying its authenticity, which allows remote attackers to execute...

CVE-2011-2040

The helper application in Cisco AnyConnect Secure Mobility Client formerly AnyConnect VPN Client before 2.5.3041, and 3.0.x before 3.0.629, on Linux and Mac OS X downloads a client executable file vpndownloader.exe without verifying its authenticity, which allows remote attackers to execute...

CVE-2011-2040

Summary of CVE-2011-2040 (Cisco AnyConnect Arbitrary Program Execution) : The helper application used during pre-deployment downloads the Cisco AnyConnect client via a web browser without authenticating the downloaded executable (vpndownloader.exe) on Linux and Mac OS X, enabling remote code exec...

PT-2011-3561

Name of the Vulnerable Software and Affected Versions Cisco AnyConnect Secure Mobility Client versions prior to 2.5.3041 Cisco AnyConnect Secure Mobility Client versions 3.0.x prior to 3.0.629 Description The issue allows remote attackers to execute arbitrary code via the url property to a Java...

New 64-Bit Rootkit Being Used to Steal Banking Credentials

Security researchers have come across a new rootkit that is designed specifically to infect 64-bit Windows systems and steal users’ online banking credentials. It’s believed to be the first piece of malware of its kind that is capable of compromising x64 systems. The new rootkit is being used by...

Authentication flaw

Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, does not properly implement autocompletion for forms, which allows remote attackers to read form history entries via a Java applet that spoofs interaction with the autocomplete controls...

CVE-2011-0067: Improper Input Validation

Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, does not properly implement autocompletion for forms, which allows remote attackers to read form history entries via a Java applet that spoofs interaction with the autocomplete controls...

openSUSE Security Update : MozillaFirefox (MozillaFirefox-4459)

Mozilla Firefox was updated to the 3.6.17 security release. MFSA 2011-12: Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances,...

SuSE 10 Security Update : Mozilla Firefox (ZYPP Patch Number 7491)

Mozilla Firefox was updated to the 3.6.17 security release. - Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we...

SuSE 10 Security Update : Mozilla XULrunner (ZYPP Patch Number 7493)

Mozilla XULRunner 1.9.1 was updated to the 1.9.1.19 security release. - Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, a...

Mandriva Update for firefox MDVSA-2011:079 (firefox)

Check for the Version of firefox OpenVAS Vulnerability Test Mandriva Update for firefox MDVSA-2011:079 firefox Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Oracle Java Applet2ClassLoader Vulnerability

Added: 05/05/2011 CVE: CVE-2010-4452 BID: 46388 OSVDB: 71193 Background Java is a programming language that compiles programs to bytecode, which is then executed inside a Java Virtual Machine. This is optimal for applications that must run on various hardware platforms, such as web applets. Probl...