CVE-2016-2964

CVE-2016-2964 affects IBM Sametime versions 8.5.2 and 9.0. The vulnerability arises when an error message shown to a user is overly detailed and may reveal internal details about the application, leading to potential information disclosure. According to the linked sources, this impacts confidenti...

CVE-2016-2974

IBM Sametime Connect versions 8.5.2 and 9.0 contain an information disclosure vulnerability where, after uninstalling the Sametime Rich Client, potentially sensitive information about the Sametime environment and other local users could be exposed. The issue is described across multiple sources (...

CVE-2016-2975

CVE-2016-2975 affects IBM Sametime 8.5.2 and 9.0. The issue is a cross-site scripting vulnerability in the Web UI that allows a remote attacker to inject arbitrary JavaScript, potentially altering functionality and leading to credentials disclosure within a trusted session. Connected records corr...

CVE-2016-0354

IBM Sametime Enterprise Meeting Server 8.5.2 and 9.0 could allow an authenticated user to upload a malicious file to a Sametime meeting room, that could be downloaded by unsuspecting users which could be executed with user privileges. IBM X-Force ID: 111893...

CVE-2016-2959

IBM Sametime Meeting Server 8.5.2 and 9.0 could allow a meeting room manager to remove the primary managers privileges. IBM X-Force ID: 113804...

CVE-2016-2977

IBM Sametime Meeting Server 8.5.2 and 9.0 could allow a malicious user to lower other users hands in the meeting. IBM X-Force ID: 113937...

CVE-2016-2977

IBM Sametime Meeting Server 8.5.2 and 9.0 could allow a malicious user to lower other users hands in the meeting. IBM X-Force ID: 113937...

CVE-2016-2971

IBM Sametime Media Services 8.5.2 and 9.0 are affected by a vulnerability described in CVE-2016-2971 where sensitive information could be disclosed via stack trace error logs. This information disclosure weakness may inform future attacks. The vulnerability is documented across multiple sources (...

CVE-2016-2973

CVE-2016-2973 affects IBM Sametime Media Services 8.5.2 and 9.0. The vulnerability is a cross-site scripting flaw in the Web UI that lets an attacker embed arbitrary JavaScript, potentially altering functionality and leading to credentials disclosure within a trusted session. No exploit, root-cau...

CVE-2016-2969

CVE-2016-2969 affects IBM Sametime Meeting Server versions 8.5.2 and 9.0. The vulnerability allows replies that may contain email addresses of people who should not be in those messages, constituting information disclosure. The description notes a remote attacker could exploit this to send a repl...

CVE-2016-2959

IBM Sametime Meeting Server versions 8.5.2 and 9.0 are affected by CVE-2016-2959, allowing a meeting room manager to remove the primary manager privileges. The vulnerability is documented in NVD with a CVSSv2 base score of 4.0 (Network, Low attack complexity, Single authentication) and CVSSv3 bas...

CVE-2016-0355

CVE-2016-0355 affects IBM Sametime Enterprise Meeting Server versions 8.5.2 and 9.0. An authenticated user who has been invited to a Sametime meeting room could stop screen sharing via a cross-site request forgery (CSRF) vulnerability. The description in the NVD entry confirms the impact is limit...

IBM Sametime Meetings Server Arbitrary Code Execution Vulnerability (CNVD-2017-26377)

IBM Sametime is a set of next-generation social communication tools from IBM in the United States. The tool helps users realize real-time business collaboration by integrating audio voice, data, and video.Sametime Meeting Server is one of the Web conferencing components used in Sametime chat and...

IBM Sametime Meetings Server Arbitrary File Upload Vulnerability

IBM Sametime is a suite of next-generation social communication tools from IBM in the United States. The tool helps users realize real-time business collaboration by integrating audio voice, data and video.Sametime Enterprise Meeting Server is one of the enterprise media servers. A security...

IBM Sametime Meetings Server Information Disclosure Vulnerability

IBM Sametime is a set of next-generation social communication tools from IBM in the United States. The tool helps users realize real-time business collaboration by integrating audio voice, data, and video.Sametime Meeting Server is one of the Web conferencing components used in Sametime chat and...

Debian DSA-3950-1 : libraw - security update

Hossein Lotfi and Jakub Jirasek from Secunia Research have discovered multiple vulnerabilities in LibRaw, a library for reading RAW images. An attacker could cause a memory corruption leading to a DoS Denial of Service with craft KDC or TIFF file. %NASLMINLEVEL 70300 C Tenable Network Security,...

CVE-2017-1501

CVE-2017-1501 affects IBM WebSphere Application Server; the Admin Console could leave web services security bindings weaker after updates. IBM bulletins indicate affected WAS versions include 8.0, 8.5, and 9.0 lines (e.g., 9.0.0.0–9.0.0.4; 8.5.5.10/11; 8.0.0.13). The vulnerability score via CVSSv...

Debian DSA-3938-1 : libgd2 - security update

Matviy Kotoniy reported that the gdImageCreateFromGifCtx function used to load images from GIF format files in libgd2, a library for programmatic graphics creation and manipulation, does not zero stack allocated color map buffers before their use, which may result in information disclosure if a...

CVE-2017-10226

Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications subcomponent: Fleet Management System Suite. The supported version that is affected is 9.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

Trend Micro InterScan Messaging Security Virtual Appliance Command Injection Vulnerability (CNVD-2017-21035)

Trend Micro InterScan Messaging Security Virtual Appliance IMSVA is an email gateway security appliance from Trend Micro that integrates anti-virus, anti-spyware and anti-phishing technologies to provide comprehensive protection for email applications. A command injection vulnerability exists in...