Firefox Java update ready to stop BEAST attacks

Firefox Java update ready to stop BEAST attacks Firefox developers searching for a way to protect users against a new attack that decrypts sensitive web traffic are seriously considering an update that stops the open-source browser from working with Oracle's Java software framework. Johnath, the...

Java for Mac OS X 10.5 Update 10

This host is missing an important security update according to Mac OS X 10.5 Update 10. OpenVAS Vulnerability Test $Id: secpodmacosxjava105upd10.nasl 7024 2017-08-30 11:51:43Z teissa $ Java for Mac OS X 10.5 Update 10 Authors: Sooraj KS Copyright: Copyright c 2011 SecPod, http://www.secpod.com Th...

SEC Consult SA-20110810-0 :: Client-side remote file upload & command execution in Check Point SSL VPN On-Demand applications - CVE-2011-1827

SEC Consult Vulnerability Lab Security Advisory 20110810-0 ======================================================================= title: Client-side remote file upload & command execution product: Check Point SSL VPN On-Demand applications signed Java applet and ActiveX control SSL Network...

Mozilla Firefox 3.6.16 (Windows 7) - mChannel Object Use-After-Free

Mozilla mChannel Object use after free - Found by regenrecht - MSF exploit by Rh0 - Win 7 fun version by mrme function trigger alert'ready?'; fakeobject = document.getElementById"d"; // allocate the object fakeobject.QueryInterfaceComponents.interfaces.nsIChannelEventSink; // append to the object...

Design/Logic Flaw

Apple Safari before 5.0.6 allows remote attackers to bypass the Same Origin Policy, and modify the rendering of text from arbitrary web sites, via a Java applet that loads fonts...

CVE-2011-0219

CVE-2011-0219 affects Apple Safari prior to 5.0.6, where a Java applet loading fonts can bypass the Same Origin Policy and alter the rendering of text from arbitrary websites. The issue is described in the Apple advisory as part of Safari’s vulnerabilities fixed by Safari 5.0.6 and in later 5.1 u...

PT-2011-2198

Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 5.0.6 Description The issue allows remote attackers to bypass the Same Origin Policy and modify the rendering of text from arbitrary web sites via a Java applet that loads fonts. Recommendations For versions prio...

CVE-2011-0219: Undefined Security Weakness

Apple Safari before 5.0.6 allows remote attackers to bypass the Same Origin Policy, and modify the rendering of text from arbitrary web sites, via a Java applet that loads fonts...

Opera Browser Multiple Vulnerabilities Jul-11 (Windows)

The host is installed with Opera browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gboperamultvulnwin02jul11.nasl 7006 2017-08-25 11:51:20Z teissa $ Opera Browser Multiple Vulnerabilities July-11 Windows Authors: Madhuri D Copyright: Copyright c 2011 Greenbone...

Opera < 11.10 Multiple Vulnerabilities

Binary data 5988.prm...

Opera Browser Multiple Vulnerabilities (Jul 2011) - Windows

Opera browser is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Opera < 11.10 Multiple Vulnerabilities

The version of Opera installed on the remote Windows host is earlier than 11.10 and thus is potentially affected by the following vulnerabilities : - An unspecified vulnerability allows remote attackers to hijack searches and customizations using unspecified third-party applications. CVE-2011-263...

Hardcoded credentials

Opera before 11.10 allows remote attackers to cause a denial of service application crash via an HTML document that has an empty parameter value for an embedded Java applet...

CVE-2011-2640

CVE-2011-2640 affects Opera before 11.10. An HTML document with an empty parameter value for an embedded Java applet could cause the browser to crash (remote denial of service). Remediation: upgrade to Opera 11.10 or newer as indicated by the referenced advisories.

CVE-2011-2640: Undefined Security Weakness

Opera before 11.10 allows remote attackers to cause a denial of service application crash via an HTML document that has an empty parameter value for an embedded Java applet...

PT-2011-3989

Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.10 Description The issue allows remote attackers to cause a denial of service, resulting in an application crash. This can be achieved by creating an HTML document with an embedded Java applet that has an empty...

PT-2011-2717

Name of the Vulnerable Software and Affected Versions Java SE 6 versions prior to Update 26 Description The issue affects confidentiality and is related to the SAAJ component in the Java Runtime Environment. It allows remote untrusted Java Web Start applications and untrusted Java applets to...

CVE-2011-2040

The helper application in Cisco AnyConnect Secure Mobility Client formerly AnyConnect VPN Client before 2.5.3041, and 3.0.x before 3.0.629, on Linux and Mac OS X downloads a client executable file vpndownloader.exe without verifying its authenticity, which allows remote attackers to execute...

Design/Logic Flaw

The helper application in Cisco AnyConnect Secure Mobility Client formerly AnyConnect VPN Client before 2.5.3041, and 3.0.x before 3.0.629, on Linux and Mac OS X downloads a client executable file vpndownloader.exe without verifying its authenticity, which allows remote attackers to execute...

CVE-2011-2040

The helper application in Cisco AnyConnect Secure Mobility Client formerly AnyConnect VPN Client before 2.5.3041, and 3.0.x before 3.0.629, on Linux and Mac OS X downloads a client executable file vpndownloader.exe without verifying its authenticity, which allows remote attackers to execute...