UBUNTU-CVE-2017-14650

A Remote Code Execution vulnerability has been found in the HordeImage library when using the "Im" backend that utilizes ImageMagick's "convert" utility. It's not exploitable through any Horde application, because the code path to the vulnerability is not used by any Horde code. Custom applicatio...

CVE-2017-14650

A Remote Code Execution vulnerability has been found in the HordeImage library when using the "Im" backend that utilizes ImageMagick's "convert" utility. It's not exploitable through any Horde application, because the code path to the vulnerability is not used by any Horde code. Custom applicatio...

CVE-2017-14650

CVE-2017-14650 affects Horde_Image (Im backend) using ImageMagick convert; root cause is missing input validation of the index field in _raw() when building the ImageMagick command. Affected are Horde_Image versions 2.0.0 through 2.5.1; fixed in 2.5.2. The vulnerability is contextual: it is not r...

CVE-2017-14650: Improper Input Validation

A Remote Code Execution vulnerability has been found in the HordeImage library when using the "Im" backend that utilizes ImageMagick's "convert" utility. It's not exploitable through any Horde application, because the code path to the vulnerability is not used by any Horde code. Custom applicatio...

PT-2017-13611

Name of the Vulnerable Software and Affected Versions Horde Image versions 2.0.0 through 2.5.1 Description A Remote Code Execution issue has been found in the Horde Image library when using the "Im" backend that utilizes ImageMagick's "convert" utility. This issue is not exploitable through any...

im-web.com.de XSS vulnerability

Vulnerable URL: http://im-web.com.de/mail.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 19.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 636909 VIP website status:| No Check im-web.com.de SSL connection:| Grade: F Coordinate...

gib-acht-im-verkehr.de XSS vulnerability

Open Bug Bounty ID: OBB-279399 Description| Value ---|--- Affected Website:| gib-acht-im-verkehr.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Skype - free IM & video calls - Dangerous filesystem permissions, MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Skype - free IM & video calls published at the 'play' market has multiple vulnerabilities...

wohnen-im-alter.de XSS vulnerability

Vulnerable URL: https://www.wohnen-im-alter.de/staedteauswahl.html?q=test%22%3E%3Cimg+src%3Dx+onerror%3Dalert%28%27OPENBUGBOUNTY%27%29%3E%5Bcity%5D=test%22 Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 19:53 GMT Vulnerability type:| XSS...

frauenaerzte-im-netz.de XSS vulnerability

Vulnerable URL: https://www.frauenaerzte-im-netz.de/page.php?site=de=suche=651=%22%3Eblub%3CsvG%2Fonload%3Dalert%28%2FOPENBUGBOUNTY%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alex...

Code Execution Vulnerability Found in Libpurple IM Library

A severe vulnerability has been disclosed in libpurple, the library used in the development of a number of popular instant messaging clients, including Pidgin and Adium for the macOS platform. Adium 1.5.10.2 is vulnerable and can be exploited to run arbitrary code remotely. A researcher who goes ...

Cisco Unified Communications Manager IM and Presence Service Apache Struts2 Jakarta Multipart Parser File Upload Code Execution Vulnerability

Cisco Unified Communications Manager IM and Presence Service is prone to a vulnerability in Apache Struts2. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2016-6464

CVE-2016-6464 affects Cisco Unified Communications Manager IM and Presence Service web management interface. An unauthenticated, remote attacker could view restricted web pages due to lack of proper HTTP header input validation. Affects at least 11.5(1); fixed in 11.5(1.12000.2) and 12.0(0.98000....

CVE-2016-6464: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability in the web management interface of the Cisco Unified Communications Manager IM and Presence Service could allow an unauthenticated, remote attacker to view information on web pages that should be restricted. More Information: CSCva49629. Known Affected Releases: 11.51. Known Fixed...

PT-2016-6936

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager IM and Presence Service version 11.51 Description A vulnerability in the web management interface could allow an unauthenticated, remote attacker to view information on web pages that should be restricted...

PT-2016-6736

Name of the Vulnerable Software and Affected Versions IBM Rational Asset Analyzer version 6.1.0 before FP10 Description The issue allows local users to discover the WAS Admin password by reading IM native logs. Recommendations For IBM Rational Asset Analyzer version 6.1.0 before FP10, apply FP10 ...

CVE-2016-1466

Cisco Unified Communications Manager IM and Presence Service 9.11 SU6, 9.11 SU6a, 9.11 SU7, 10.52 SU2, 10.52 SU2a, 11.01 SU1, and 11.51 allows remote attackers to cause a denial of service sipd process restart via crafted headers in a SIP packet, aka Bug ID CSCva39072...

CVE-2016-1466

CVE-2016-1466 affects Cisco Unified Communications Manager IM and Presence Service (versions 9.1(1) SU6, SU6a, SU7; 10.5(2) SU2, SU2a; 11.0(1) SU1; 11.5(1)) where the SIP Proxy Daemon (sipd) can be forced to restart, causing a denial of service via crafted SIP headers. The root cause, per Cisco a...

CVE-2016-1466: Undefined Security Weakness

Cisco Unified Communications Manager IM and Presence Service 9.11 SU6, 9.11 SU6a, 9.11 SU7, 10.52 SU2, 10.52 SU2a, 11.01 SU1, and 11.51 allows remote attackers to cause a denial of service sipd process restart via crafted headers in a SIP packet, aka Bug ID CSCva39072...

PT-2016-4814

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager IM and Presence Service versions 9.11 SU6 through 9.11 SU7, 10.52 SU2 through 10.52 SU2a, 11.01 SU1, 11.51 Description The issue allows remote attackers to cause a denial of service, resulting in the restar...