Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Classic Meeting Server in IBM Sametime 7.5.1.2 through 8.5.2.1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-0535

Multiple cross-site scripting XSS vulnerabilities in the Classic Meeting Server in IBM Sametime 7.5.1.2 through 8.5.2.1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-0535

The CVE-2013-0535 entries describe multiple XSS vulnerabilities in IBM Sametime Classic Meeting Server, affecting versions 7.5.1.2 through 8.5.2.1. The issue allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. The connected records do not provide expl...

CVE-2013-0535

Multiple cross-site scripting XSS vulnerabilities in the Classic Meeting Server in IBM Sametime 7.5.1.2 through 8.5.2.1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

PT-2013-2411

Name of the Vulnerable Software and Affected Versions IBM Sametime versions 7.5.1.2 through 8.5.2.1 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the Classic Meeting Server. These vulnerabilities allow remote authenticated users to inject arbitrary web script...

CVE-2013-0535: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Classic Meeting Server in IBM Sametime 7.5.1.2 through 8.5.2.1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-0533

Cross-site scripting XSS vulnerability in the Sametime Links server in IBM Sametime 8.0.2 through 8.5.2.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-0553

The client implementation in IBM Sametime 8.5.1 through 8.5.2.1, as used in Sametime Connect client, Sametime Advanced Connect client, Sametime Advanced Web client, and other products, allows remote authenticated users to send commands to individual chat users, or to all participants in a chat...

Cross site scripting

Cross-site scripting XSS vulnerability in the Sametime Links server in IBM Sametime 8.0.2 through 8.5.2.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

Command injection

The client implementation in IBM Sametime 8.5.1 through 8.5.2.1, as used in Sametime Connect client, Sametime Advanced Connect client, Sametime Advanced Web client, and other products, allows remote authenticated users to send commands to individual chat users, or to all participants in a chat...

CVE-2013-0553

The client implementation in IBM Sametime 8.5.1 through 8.5.2.1, as used in Sametime Connect client, Sametime Advanced Connect client, Sametime Advanced Web client, and other products, allows remote authenticated users to send commands to individual chat users, or to all participants in a chat...

CVE-2013-0553

CVE-2013-0553 affects IBM Sametime 8.5.1–8.5.2.1 (Sametime Connect, Advanced Connect, Advanced Web clients, and related products). The issue allows remote authenticated users to send commands to individual chat users or to all participants in a chat room via a crafted Sametime Instant Message. Th...

CVE-2013-0533

Technical details about CVE-2013-0533 are not publicly provided in the connected documents. The initial sources only reiterate the XSS vulnerability in IBM Sametime 8.0.2–8.5.2.1. Monitor for future updates.

CVE-2013-0533

Cross-site scripting XSS vulnerability in the Sametime Links server in IBM Sametime 8.0.2 through 8.5.2.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-0533: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Sametime Links server in IBM Sametime 8.0.2 through 8.5.2.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

PT-2013-2424

Name of the Vulnerable Software and Affected Versions IBM Sametime versions 8.5.1 through 8.5.2.1 Description The issue allows remote authenticated users to send commands to individual chat users or to all participants in a chat room via a crafted Sametime Instant Message IM. Recommendations For...

CVE-2013-0553: Undefined Security Weakness

The client implementation in IBM Sametime 8.5.1 through 8.5.2.1, as used in Sametime Connect client, Sametime Advanced Connect client, Sametime Advanced Web client, and other products, allows remote authenticated users to send commands to individual chat users, or to all participants in a chat...

PT-2013-2409

Name of the Vulnerable Software and Affected Versions IBM Sametime versions 8.0.2 through 8.5.2.1 Description A cross-site scripting XSS issue exists, allowing remote authenticated users to inject arbitrary web script or HTML. Recommendations For versions 8.0.2 through 8.5.2.1, update to a versio...

pidgin: 2.10.7 update to fix security issues and bugs (important)

Pidgin was updated to 2.10.7 to fix various security issues and the bug that IRC did not work at all in 12.3. Changes: - Add pidgin-irc-sasl.patch: link irc module to SASL. Allows the IRC module to be loaded bnc806975. - Update to version 2.10.7 bnc804742: + Alien hatchery: - No changes + General...

Scientific Linux Security Update : pidgin on SL5.x, SL6.x i386/x86_64 (20130314)

A stack-based buffer overflow flaw was found in the Pidgin MXit protocol plug-in. A malicious server or a remote attacker could use this flaw to crash Pidgin by sending a specially crafted HTTP request. CVE-2013-0272 A buffer overflow flaw was found in the Pidgin Sametime protocol plug-in. A...