Opera before 11.65 does not ensure that keyboard sequences are associated with a visible window, which makes it easier for user-assisted remote attackers to conduct cross-site scripting (XSS) attacks. Rated high severity (CVSS 7.6), this vulnerability is remotely exploitable. No vendor patch available.
XSS
RCE
Opera Browser
NVD
CVSS 2.0
7.6
EPSS
4.6%
VMware Workstation 8.x before 8.0.4, VMware Player 4.x before 4.0.4, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 allow remote attackers to cause a denial of service (guest OS crash). Rated high severity (CVSS 7.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Code Injection
VMware
Denial Of Service
RCE
Workstation
+3
NVD
CVSS 2.0
7.8
EPSS
0.6%