Framework: Information (internal server information, classpath, local working directories, session IDs) disclosure

VMware SpringSource Spring Framework before 2.5.6.SEC03, 2.5.7.SR023, and 3.x before 3.0.6, when a container supports Expression Language EL, evaluates EL expressions in tags twice, which allows remote attackers to obtain sensitive information via a 1 name attribute in a a spring:hasBindErrors ta...

PT-2012-4998

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.7.3 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted transform attribute in a text3GTrack element in a QuickTime TeXML file. Recommendations...