PT-2021-2343

Name of the Vulnerable Software and Affected Versions Cisco Jabber for Windows affected versions not specified Cisco Jabber for MacOS affected versions not specified Cisco Jabber for mobile platforms affected versions not specified Description The issue allows an attacker to execute arbitrary...

Cisco Jabber 信息泄露漏洞

Cisco Jabber is a web conferencing and instant messaging application that allows users to send messages over the Extensible Messaging and Status Protocol XMPP. Cisco Jabber has an information disclosure vulnerability that can be exploited by an attacker by sending a crafted XMPP message to the...

Cisco Jabber for Windows 安全漏洞

Cisco Jabber is a web conferencing and instant messaging application that allows users to send messages over the Extensible Messaging and Status Protocol XMPP. Cisco Jabber has a denial of service vulnerability that can be exploited by an attacker by sending a crafted XMPP message to the target...

CVE-2021-1469: Improper Null Termination

Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for MacOS, and Cisco Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system with elevated privileges, access sensitive information, intercept protected network traffic,...

CVE-2021-1411: Improper Null Termination

Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for MacOS, and Cisco Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system with elevated privileges, access sensitive information, intercept protected network traffic,...

CVE-2021-1417: Improper Null Termination

Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for MacOS, and Cisco Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system with elevated privileges, access sensitive information, intercept protected network traffic,...

CVE-2021-1471: Improper Null Termination

Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for MacOS, and Cisco Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system with elevated privileges, access sensitive information, intercept protected network traffic,...

KLA12132 Multiple vulnerabilities in Cisco Jabber

Multiple vulnerabilities were found in Cisco Jabber. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A code execution vulnerability in Cisco Jabber for Windows can b...

USN-4834-1: Prosody vulnerability

It was discovered that Prosody incorrectly validated the virtual host associated with a user session across stream restarts. A remote attacker could use this issue to gain unintended access to resources...

Fedora: Security Advisory for prosody (FEDORA-2021-54d3af6388)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 32 Update: prosody-0.11.8-1.fc32

Prosody is a flexible communications server for Jabber/XMPP written in Lua. It aims to be easy to use, and light on resources. For developers it aims to be easy to extend and give a flexible system on which to rapidly develop added functionality, or prototype new protocols...

[SECURITY] Fedora 33 Update: prosody-0.11.8-1.fc33

Prosody is a flexible communications server for Jabber/XMPP written in Lua. It aims to be easy to use, and light on resources. For developers it aims to be easy to extend and give a flexible system on which to rapidly develop added functionality, or prototype new protocols...

Cisco Jabber and Webex Client Software Shared File Manipulation Vulnerability

A vulnerability in Cisco Jabber and Cisco Webex formerly Teams could allow an unauthenticated, remote attacker to manipulate file names within the messaging interface. The vulnerability exists because the affected software mishandles character rendering. An attacker could exploit this vulnerabili...

The vulnerability of the Cisco Jabber software platform for Windows, related to lack of access control, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Cisco Jabber software for Windows relates to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Cisco Jabber software platform for Windows lies in the insufficient neutralization of special elements used in operating system commands, allowing a hacker to execute arbitrary code.

The vulnerability of the Cisco Jabber for Windows software platform is related to errors in insufficient neutralization of special elements used in operating system commands. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

The vulnerability of Cisco Jabber for Windows and Cisco Jabber for MacOS lies in the lack of security measures for website structures, allowing attackers to execute cross-site scripting attacks.

The vulnerability of Cisco Jabber for Windows and Cisco Jabber for MacOS programs is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a remote attacker to perform a cross-site scripting attack...

The vulnerability of Cisco Jabber for Windows and Cisco Jabber for MacOS lies in memory object processing errors, which allow an attacker to gain unauthorized access to protected information.

The vulnerability of Cisco Jabber for Windows and Cisco Jabber for MacOS involves memory object processing errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of Cisco Jabber for Windows and Cisco Jabber for MacOS lies in the insufficient protection of SQL query structures, allowing attackers to execute arbitrary SQL queries.

The vulnerability of Cisco Jabber for Windows and Cisco Jabber for MacOS programs is related to insufficient protection of the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

KLA12207 Security UI vulnerability in Cisco Jabber

A security UI vulnerability was found in Cisco Jabber. Malicious users can exploit this vulnerability to obtain sensitive information, spoof user interface. Original advisories Cisco Jabber and Webex Client Software Shared File Manipulation Vulnerability Exploitation Related products Cisco-Jabber...

CVE-2020-26085

Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system OS with elevated privileges or gain access to sensitive information. For more information about these...