Hipchat Server Arbitrary Code Execution Vulnerability

Hipchat Server is a set of team chat tools that supports group and 1-to-1 voice and video chat with screen sharing. A security vulnerability exists in Hipchat Server versions prior to 2.2.3. A remote attack could exploit the vulnerability to execute arbitrary code via an imported file...

CVE-2017-7473

Ansible versions 2.2.3 and earlier are vulnerable to an information disclosure flaw due to the interaction of call back plugins and the nolog directive information may not be sanitized properly...

CVE-2017-7357

Hipchat Server before 2.2.3 allows remote authenticated users with Server Administrator level privileges to execute arbitrary code by importing a file...

Hipchat Remote Code Execution Vulnerability

Hipchat server versions prior to 2.2.3 suffer from a remote code execution vulnerability that can be leveraged via Administrative Imports. CVE ID: CVE-2017-7357. Product: Hipchat Server. Affected Hipchat Server product versions: All versions 2.2.3 Fixed Hipchat Server product versions: 2.2.3...

Cross site scripting

A cross-site scripting XSS vulnerability in the MantisBT Configuration Report page admconfigreport.php allows remote attackers to inject arbitrary code if CSP settings permit it through a crafted 'configoption' parameter. This is fixed in 1.3.9, 2.1.3, and 2.2.3...

CVE-2017-7309

A cross-site scripting XSS vulnerability in the MantisBT Configuration Report page admconfigreport.php allows remote attackers to inject arbitrary code if CSP settings permit it through a crafted 'configoption' parameter. This is fixed in 1.3.9, 2.1.3, and 2.2.3...

axelrod (>=1.9.0 <=2.10.0), chromatopy (>=1.8.0 <=1.9.0) +8 more potentially affected by CVE-2016-10075 via tqdm (>=2.2.3 <=3.8.0)

tqdm PYPI version =2.2.3, =1.9.0, =1.8.0, =0.3.0, =0.0.7, =0.0.102, =1.5.2, =0.1.0, =0.0.3, =0.0.4 Source cves: CVE-2016-10075 Source advisory: OSV:PYSEC-2017-74...

Symantec VIP Access Desktop Arbitrary DLL Execution

SUMMARY Symantec has released an update to address a finding in VIP Access Desktop that could allow a local user to force VIP Access Desktop UI Manager to execute an arbitrary formatted DLL with logged-on user privileges. AFFECTED PRODUCTS Symantec VIP Access Desktop --- CVE | Affected Versions |...

libgd 'gd_webp.c' Integer Overflow Vulnerability

libgd also known as GD Graphics Library or libgd2 is an American software developer Thomas Boutell developed an open source library for dynamic image creation, which supports the creation of charts, graphs and thumbnails and so on. An integer overflow vulnerability exists in libgd version 2.2.3,...

OwnCloud Local Arbitrary Code Execution Vulnerability

OwnCloud is a free and open source personal cloud storage solution from German company OwnCloud. The solution offers file management, music storage, calendars and more. A local arbitrary code execution vulnerability exists in versions of OwnCloud prior to 2.2.3. Due to the program failing to...

DEBIAN-CVE-2016-6128

The gdImageCropThreshold function in gdcrop.c in the GD Graphics Library aka libgd before 2.2.3, as used in PHP before 7.0.9, allows remote attackers to cause a denial of service application crash via an invalid color index...

Fedora 24 : gd (2016-615f3bf06e)

LibGD 2.2.3 release Security related fixes: This flaw is caused by loading data from external sources file, custom ctx, etc and are hard to validate before calling libgd APIs : - fix php bug php72339, Integer Overflow in gd2GetHeader CVE-2016-5766 - bug 248, fix Out-Of-Bounds Read in readimagetga...

UBUNTU-CVE-2016-6128

The gdImageCropThreshold function in gdcrop.c in the GD Graphics Library aka libgd before 2.2.3, as used in PHP before 7.0.9, allows remote attackers to cause a denial of service application crash via an invalid color index...

MGASA-2016-0168 Updated vlc packages fix security vulnerability

Updated vlc packages fix security vulnerabilities: The vlc package has been updated to version 2.2.3, which fixes several bugs and possible security issues. See the NEWS file for details...

Updated vlc packages fix security vulnerability

Updated vlc packages fix security vulnerabilities: The vlc package has been updated to version 2.2.3, which fixes several bugs and possible security issues. See the NEWS file for details...

Electric Sheep Fencing pfsense cross-site scripting vulnerability (CNVD-2015-05674)

Electric Sheep Fencing pfsense is a free and open source FreeBSD-based firewall and router software from Electric Sheep Fencing. A cross-site scripting vulnerability exists in Electric Sheep Fencing pfSense versions prior to 2.2.3, which stems from the servicesntpd.php script not adequately...

CVE-2015-4029

Cross-site scripting XSS vulnerability in the WebGUI in pfSense before 2.2.3 allows remote attackers to inject arbitrary web script or HTML via the zone parameter in a del action to servicescaptiveportalzones.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in pfSense before 2.2.3 allow remote attackers to inject arbitrary web script or HTML via the 1 srctrack, 2 usemfstmpsize, or 3 usemfsvarsize parameter to systemadvancedmisc.php; the 4 port, 5 snaplen, or 6 count parameter to diagpacketcapture.php...

The vulnerability of the Gentoo Linux operating system allows a malicious intruder to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the openmotif package up to version 2.2.3-r8 of the Gentoo Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the openmotif-2.2.3 package for the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...