[SECURITY] Fedora 27 Update: ejabberd-17.01-5.fc27

ejabberd is a Free and Open Source distributed fault-tolerant Jabber/XMPP server. It is mostly written in Erlang, and runs on many platforms tested on Linux, FreeBSD, NetBSD, Solaris, Mac OS X and Windows NT/2000/XP...

Openfire 3.6.4 Multiple CSRF Vulnerabilities

Product Description: Openfire is a real time collaboration RTC server licensed under the Open Source GPL. It uses the only widely adopted open protocol for instant messaging, XMPP also called Jabber. Openfire is incredibly easy to setup and administer, but offers rock-solid security and...

Debian DSA-3943-1 : gajim - security update

Gajim, a GTK+-based XMPP/Jabber client, unconditionally implements the 'XEP-0146: Remote Controlling Clients' extension, allowing a malicious XMPP server to trigger commands to leak private conversations from encrypted sessions. With this update XEP-0146 support has been disabled by default and...

Debian: Security Advisory (DSA-3943-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-6762

A vulnerability in the web-based management interface of Cisco Jabber Guest Server 10.69, 11.00, and 11.01 could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of the affected software. The vulnerability ...

Cross site scripting

A vulnerability in the web-based management interface of Cisco Jabber Guest Server 10.69, 11.00, and 11.01 could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of the affected software. The vulnerability ...

CVE-2017-6762

A vulnerability in the web-based management interface of Cisco Jabber Guest Server 10.69, 11.00, and 11.01 could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of the affected software. The vulnerability ...

CVE-2017-6762

A vulnerability in the web-based management interface of Cisco Jabber Guest Server 10.69, 11.00, and 11.01 could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of the affected software. The vulnerability ...

CVE-2017-6762

CVE-2017-6762 affects Cisco Jabber Guest Server’s web-based management interface (versions 10.6(9), 11.0(0), 11.0(1)). The issue is due to insufficient validation of user-supplied input, allowing an unauthenticated, remote attacker to deliver a crafted link that could execute arbitrary script wit...

CVE-2017-6762: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Jabber Guest Server 10.69, 11.00, and 11.01 could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of the affected software. The vulnerability ...

PT-2017-17300

Name of the Vulnerable Software and Affected Versions Cisco Jabber Guest Server versions 10.69 through 11.01 Description The issue is related to insufficient validation of user-supplied input by the web-based management interface, which could allow an unauthenticated, remote attacker to conduct a...

Cisco Jabber Guest Server Cross-Site Scripting Vulnerability

Cisco Jabber Guest Server is a suite of software that allows users to interact in real time with employees of the organization. A cross-site scripting vulnerability exists in the Cisco Jabber Guest Server WEB script, which allows remote attackers to exploit the vulnerability to inject malicious...

Cisco Jabber Guest Server Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Jabber Guest Server could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of the affected software. The vulnerability is due to insufficient...

[SECURITY] Fedora 24 Update: jabberd-2.6.1-1.fc24

The jabberd project aims to provide an open-source server implementation of the Jabber protocols for instant messaging and XML routing. The goal of this project is to provide a scalable, reliable, efficient and extensible server that provides a complete set of features and is up to date with the...

Debian: Security Advisory (DSA-3902-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 25 Update: gajim-0.16.8-1.fc25

Gajim is a Jabber client written in PyGTK. The goal of Gajim's developers is to provide a full featured and easy to use xmpp client for the GTK+ users. Gajim does not require GNOME to run, even though it exists with it nicely...

[SECURITY] Fedora 24 Update: gajim-0.16.8-1.fc24

Gajim is a Jabber client written in PyGTK. The goal of Gajim's developers is to provide a full featured and easy to use xmpp client for the GTK+ users. Gajim does not require GNOME to run, even though it exists with it nicely...

[SECURITY] Fedora 26 Update: gajim-0.16.8-1.fc26

Gajim is a Jabber client written in PyGTK. The goal of Gajim's developers is to provide a full featured and easy to use xmpp client for the GTK+ users. Gajim does not require GNOME to run, even though it exists with it nicely...

Gajim has an unspecified vulnerability

Gajim is a suite of free instant messaging software based on the Jabber communication protocol developed by the Gajim project. The software is written in the GTK+ suite and supports paged chat windows, group discussions, emoticon patterns and more. A security vulnerability exists in Gajim 0.16.7...

yaxim - XMPP/Jabber client - Customized SSL, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application yaxim - XMPP/Jabber client published at the 'play' market has multiple vulnerabilities...