gimp security, bug fix, and enhancement update

gimp 2:2.8.16-3 - fix multiple use-after-free bugs when parsing XCF channel and layer properties 1348617 2:2.8.16-2 - add back obsoletes necessary for RHEL 2:2.8.16-1 - version 2.8.16 2:2.8.14-3 - export-dialog-destroyed-crash patch: avoid subsequent warnings 2:2.8.14-2 - fix linking problem - us...

OTRS JavaScript Code Injection Vulnerability

OTRS Open Technology Real Service is an open source help desk and IT service management solution. A security vulnerability exists in OTRS. The vulnerability allows attackers to insert and execute arbitrary JavaScript code in the context of the affected application...

Solaris 7/8/9 CDE libDtHelp - Buffer Overflow dtprintinfo Privilege Escalation Exploit

Exploit for linux platform in category local exploits / $Id: raptorlibdthelp.c,v 1.1 2004/12/04 14:44:38 raptor Exp $ raptorlibdthelp.c - libDtHelp.so local, Solaris/SPARC 7/8/9 Copyright c 2003-2004 Marco Ivaldi Buffer overflow in CDE libDtHelp library allows local users to execute arbitrary cod...

OIC Exponent CMS SQL Injection Vulnerability (CNVD-2016-10701)

OIC Exponent CMS is a free, open source modular content management system CMS based on PHP from the American OIC Group of companies. The system supports direct editing in the page, and provides user management, site configuration, content editing and other functions. A SQL injection vulnerability...

RHEL 7 : gimp (RHSA-2016:2589)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2016:2589 advisory. The GIMP GNU Image Manipulation Program is an image composition and editing program. GIMP provides a large image manipulation toolbox, including...

CVE-2016-9135

Exponent CMS 2.3.9 suffers from a SQL injection vulnerability in "/framework/modules/help/controllers/helpController.php" affecting the version parameter. Impact is Information Disclosure...

Configuring Multi Language Keyboard Layout for the session in Receiver for HTML5 and Receiver for Chrome

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. This article describes how to configure Multi Language keyboard layout in Receiver for HTML5 and...

JVN#50347324: ManageEngine ServiceDesk Plus vulnerable to cross-site scripting

ManageEngine ServiceDesk Plus provided by Zoho Corporation is a help desk software. ManageEngine ServiceDesk Plus contains a stored cross-site scripting CWE-79 vulnerability. Impact An arbitrary script may be executed on a web browser of a user that is logged in. Solution Update the software Upda...

Error: "An Unexpected Error Occurred. " on Receiver 4.4.1

This article is intended for Citrix administrators and technical teams only.Non-admin users must contact their company’s Help Desk/IT support team and can refer toCTX297149for more information Receiver 4.4-"An Unexpected Error Occurred. The AuthManager Log or trace files my contain information...

IBM Tivoli Lightweight Infrastructure Directory Traversal Vulnerability

IBM AIX Advanced Interactive eXecutive is a UNIX operating system developed by IBM in the U.S. IBM Tivoli Lightweight Infrastructure also known as LWI is a lightweight architecture. A directory traversal vulnerability exists in Eclipse Help in IBM Tivoli LWI used in IBM AIX versions 5.3, 6.1 and...

CVE-2016-6038

Directory traversal vulnerability in Eclipse Help in IBM Tivoli Lightweight Infrastructure aka LWI, as used in AIX 5.3, 6.1, and 7.1, allows remote authenticated users to read arbitrary files via a crafted URL...

CVE-2016-6038

Directory traversal vulnerability in Eclipse Help in IBM Tivoli Lightweight Infrastructure aka LWI, as used in AIX 5.3, 6.1, and 7.1, allows remote authenticated users to read arbitrary files via a crafted URL...

CVE-2016-6038

CVE-2016-6038 describes a directory-traversal vulnerability in the Eclipse Help component of Tivoli Lightweight Infrastructure (LWI) used by IBM System Director Console for AIX (pConsole) and WebSM Remote. Affected: IBM AIX releases 5.3, 6.1, 7.1 with vulnerable LWI filesets; specifically sysmgt....

CVE-2016-6038

Directory traversal vulnerability in Eclipse Help in IBM Tivoli Lightweight Infrastructure aka LWI, as used in AIX 5.3, 6.1, and 7.1, allows remote authenticated users to read arbitrary files via a crafted URL...

CVE-2016-3000

The help service in IBM Connections 4.x through 4.5 CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to cause a denial of service service degradation via a crafted URL...

CVE-2016-3000

The help service in IBM Connections 4.x through 4.5 CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to cause a denial of service service degradation via a crafted URL...

CVE-2016-3000: Improper Input Validation

The help service in IBM Connections 4.x through 4.5 CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to cause a denial of service service degradation via a crafted URL...

CVE-2016-6038: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Eclipse Help in IBM Tivoli Lightweight Infrastructure aka LWI, as used in AIX 5.3, 6.1, and 7.1, allows remote authenticated users to read arbitrary files via a crafted URL...

Vulnerability in Tivoli LWI impacts pConsole and WebSM for AIX

pconsoleadvisory.asc: Version 2 Version 2 Issued: Fri Sep 30 14:51:49 CDT 2016 Version 2 Changes: iFixes added for the latest, impacted, supported AIX TLs. IBM SECURITY ADVISORY First Issued: Thu Sep 22 16:13:43 CDT 2016 |Updated: Fri Sep 30 14:51:49 CDT 2016 |Update: iFixes added for the latest,...

Single Sign on Support for Linux Receiver

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Question The client wants to achieve authenticated access to XenApp/XenDesktop infrastructure via...