5908 matches found
pidgin: remote information leak via crafted XMPP message
An information disclosure flaw was discovered in the way Pidgin parsed XMPP messages. A malicious remote server or a man-in-the-middle attacker could potentially use this flaw to disclose a portion of memory belonging to the Pidgin process by sending a specially crafted XMPP message...
Moderate: Red Hat Security Advisory: pidgin security, bug fix, and enhancement update
An update for pidgin is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
Artemis: Deserialization of untrusted input vulnerability
It was found that use of a JMS ObjectMessage does not safely handle user supplied data when deserializing objects. A remote attacker could use this flaw to execute arbitrary code with the permissions of the application using a JMS ObjectMessage...
Artemis: Deserialization of untrusted input vulnerability
It was found that use of a JMS ObjectMessage does not safely handle user supplied data when deserializing objects. A remote attacker could use this flaw to execute arbitrary code with the permissions of the application using a JMS ObjectMessage...
Trend Micro InterScan Messaging Security Proxy Command Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro InterScan Messaging Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw...
PT-2017-11978
Name of the Vulnerable Software and Affected Versions Trend Micro InterScan Messaging Virtual Appliance versions 9.0 through 9.1 Description The issue allows remote attackers to execute arbitrary code on vulnerable installations by exploiting a proxy command injection vulnerability. This can be...
PT-2017-11977
Name of the Vulnerable Software and Affected Versions Trend Micro InterScan Messaging Virtual Appliance versions 9.0 through 9.1 Description The issue allows remote attackers to execute arbitrary code on vulnerable installations by exploiting a proxy command injection vulnerability. This can be...
DEBIAN-CVE-2017-11665
The ffamfgetfieldvalue function in libavformat/rtmppkt.c in FFmpeg 3.3.2 allows remote RTMP servers to cause a denial of service Segmentation Violation and application crash via a crafted stream...
ALPINE-CVE-2017-11665
The ffamfgetfieldvalue function in libavformat/rtmppkt.c in FFmpeg 3.3.2 allows remote RTMP servers to cause a denial of service Segmentation Violation and application crash via a crafted stream...
Symantec Messaging Gateway remote code execution (CVE-2017-6326)
Command injection vulnerability exists in Symantec Messaging Gateway. The vulnerability is due to insufficient validation of property. An authenticated user can execute a terminal command under the context of the web server user which is root...
CVE-2017-1318
IBM MQ Appliance 8.0 and 9.0 could allow an authenticated messaging administrator to execute arbitrary commands on the system, caused by command execution. IBM X-Force ID: 125730...
CVE-2017-1318
IBM MQ Appliance 8.0 and 9.0 could allow an authenticated messaging administrator to execute arbitrary commands on the system, caused by command execution. IBM X-Force ID: 125730...
CVE-2017-1318
IBM MQ Appliance 8.0 (8.0.0.0–8.0.0.6) and 9.0.x CD releases (9.0.1–9.0.2) are affected by CVE-2017-1318, where an authenticated messaging administrator could execute arbitrary commands on the appliance due to a command-execution flaw. The IBM Security Bulletin confirms the affected versions and ...
CVE-2017-1318: Improper Neutralization of Special Elements used in an OS Command
IBM MQ Appliance 8.0 and 9.0 could allow an authenticated messaging administrator to execute arbitrary commands on the system, caused by command execution. IBM X-Force ID: 125730...
[SECURITY] Fedora 25 Update: jabberd-2.6.1-1.fc25
The jabberd project aims to provide an open-source server implementation of the Jabber protocols for instant messaging and XML routing. The goal of this project is to provide a scalable, reliable, efficient and extensible server that provides a complete set of features and is up to date with the...
[SECURITY] Fedora 24 Update: jabberd-2.6.1-1.fc24
The jabberd project aims to provide an open-source server implementation of the Jabber protocols for instant messaging and XML routing. The goal of this project is to provide a scalable, reliable, efficient and extensible server that provides a complete set of features and is up to date with the...
[SECURITY] Fedora 26 Update: jabberd-2.6.1-1.fc26
The jabberd project aims to provide an open-source server implementation of the Jabber protocols for instant messaging and XML routing. The goal of this project is to provide a scalable, reliable, efficient and extensible server that provides a complete set of features and is up to date with the...
Awesome! WhatsApp Now Lets You Send Files of Any Format
Have you ever felt like wishing of sending any type of file immediately to your friends and office colleagues on WhatsApp directly, instead of just contacts, images or documents? Well, now you can… The latest version of WhatsApp for Android and iOS now allows users to send and receive any type of...
[SECURITY] Fedora 24 Update: mosquitto-1.4.13-1.fc24
Mosquitto is an open source message broker that implements the MQ Telemetry Transport protocol version 3.1 and 3.1.1 MQTT provides a lightweight method of carrying out messaging using a publish/subscribe model. This makes it suitable for "machine to machine" messaging such as with low power senso...