Cisco Digital Media Manager versions prior to 5.2 contain a vulnerability that could allow an authenticated, remote attacker to view sensitive information. This vulnerability is due to unsafe handling of user credentials. An authenticated, remote attacker could exploit this vulnerability by viewing error logs or in-use memory that may contain stored user credentials. If successful, the attacker could obtain usernames and passwords of other system users. Cisco has confirmed this vulnerability in a security advisory and released updated software.

Opera versions 9.62 and prior contains a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code. The vulnerability is due to an input validation error when processing file: URLs. An attacker could cause a buffer overflow by launching a malicious file: URL from a local file on the user's system. Alternatively, the attacker could convince a user to manually enter the malicious URL. The buffer overflow could cause a DoS condition or allow the attacker to execute arbitrary code. Opera has confirmed the vulnerability and released updated software.

Apache HTTP Server contains a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on a targeted system. The vulnerability exists because the affected software incorrectly processes a Range Retrieval Request header received via an HTTP request. Due to the flaw, on receiving a request with a 0-byte range or overlapping byte ranges, the affected software erroneously allocates a bucket for each byte requested and stores them in a brigade. An unauthenticated, remote attacker could exploit this vulnerability by submitting HTTP requests to the targeted system. Processing such requests could result in excessive memory consumption to process a large number of buckets, leading to a DoS condition. Proof-of-concept code that exploits this vulnerability is publicly available. Administrators are advised to contact the vendor regarding future updates and releases. Until updates can be applied, administrators are advised to configure connection throttling or filtering of repetitive, abusive connection requests. Apache has not confirmed the vulnerability and updated software is not available.