Debian Security Advisory DSA 3492-1 (gajim - security update)

Daniel Gultsch discovered a vulnerability in Gajim, an XMPP/jabber client. Gajim didn OpenVAS Vulnerability Test $Id: deb3492.nasl 6608 2017-07-07 12:05:05Z cfischer $ Auto-generated from advisory DSA 3492-1 using nvtgen 1.0 Script version: 1.0 Author: Greenbone Networks Copyright: Copyright c 20...

Debian: Security Advisory (DSA-3492-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 23 Update: jabberd-2.3.3-7.fc23

The jabberd project aims to provide an open-source server implementation of the Jabber protocols for instant messaging and XML routing. The goal of this project is to provide a scalable, reliable, efficient and extensible server that provides a complete set of features and is up to date with the...

[SECURITY] [DSA 3492-2] gajim regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-3492-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 28, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3492-2] gajim regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-3492-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 28, 2016 https://www.debian.org/security/faq -...

Debian DSA-3492-2 : gajim - security update

The wheezy part of the previous gajim update, DSA-3492-1, was incorrectly built resulting in an unsatisfiable dependency. This update corrects that problem. For reference, the original advisory text follows. Daniel Gultsch discovered a vulnerability in Gajim, an XMPP/jabber client. Gajim didn't...

Cisco Jabber Guest Server HTTP HOST Parameter Cross-Site Scripting Vulnerability

Cisco Jabber Guest is a consumer-to-business C2B solution. A cross-site scripting vulnerability in Cisco Jabber Guest's handling of the HTTP HOST parameter allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to gain access to sensitive...

Cisco Video Communications Server Information Disclosure Vulnerability (cisco-sa-20160208-vcs)

Cisco Video Communications Server VCS, when utilized as part of a Jabber Guest deployment, contains an information disclosure vulnerability that could allow and unauthenticated, remote attacker to gain access to potentially sensitive information. SPDX-FileCopyrightText: 2016 Greenbone AG Some tex...

CVE-2016-1316

Cisco TelePresence Video Communication Server VCS X8.1 through X8.7, as used in conjunction with Jabber Guest, allows remote attackers to obtain sensitive call-statistics information via a direct request to an unspecified URL, aka Bug ID CSCux73362...

CVE-2016-1316

Cisco TelePresence Video Communication Server VCS X8.1 through X8.7, as used in conjunction with Jabber Guest, allows remote attackers to obtain sensitive call-statistics information via a direct request to an unspecified URL, aka Bug ID CSCux73362...

Design/Logic Flaw

Cisco TelePresence Video Communication Server VCS X8.1 through X8.7, as used in conjunction with Jabber Guest, allows remote attackers to obtain sensitive call-statistics information via a direct request to an unspecified URL, aka Bug ID CSCux73362...

CVE-2016-1316: Exposure of Sensitive Information to an Unauthorized Actor

Cisco TelePresence Video Communication Server VCS X8.1 through X8.7, as used in conjunction with Jabber Guest, allows remote attackers to obtain sensitive call-statistics information via a direct request to an unspecified URL, aka Bug ID CSCux73362...

Cisco Video Communications Server Information Disclosure Vulnerability

Cisco Video Communications Server VCS, when utilized as part of a Jabber Guest deployment, contains an information disclosure vulnerability that could allow and unauthenticated, remote attacker to gain access to potentially sensitive information. The vulnerability exists due to a failure to...

CVE-2016-1311

Cross-site scripting XSS vulnerability in the management interface in Cisco Jabber Guest Server 10.68 allows remote attackers to inject arbitrary web script or HTML via the host tag parameter, aka Bug ID CSCuy08224...

CVE-2016-1311

Cross-site scripting XSS vulnerability in the management interface in Cisco Jabber Guest Server 10.68 allows remote attackers to inject arbitrary web script or HTML via the host tag parameter, aka Bug ID CSCuy08224...

Cross site scripting

Cross-site scripting XSS vulnerability in the management interface in Cisco Jabber Guest Server 10.68 allows remote attackers to inject arbitrary web script or HTML via the host tag parameter, aka Bug ID CSCuy08224...

CVE-2016-1311

Cross-site scripting XSS vulnerability in the management interface in Cisco Jabber Guest Server 10.68 allows remote attackers to inject arbitrary web script or HTML via the host tag parameter, aka Bug ID CSCuy08224...

CVE-2016-1311

Cisco Jabber Guest Server 10.6(8) is affected by CVE-2016-1311: a cross-site scripting (XSS) flaw in the HTTP web-based management interface allows remote attackers to inject arbitrary script or HTML via the host tag parameter. According to Cisco, the vulnerability stems from insufficient input v...

PT-2016-4701

Name of the Vulnerable Software and Affected Versions Cisco Jabber Guest Server version 10.68 Description A cross-site scripting XSS issue exists in the management interface, allowing remote attackers to inject arbitrary web script or HTML via the host tag parameter. Recommendations For Cisco...

CVE-2016-1311: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the management interface in Cisco Jabber Guest Server 10.68 allows remote attackers to inject arbitrary web script or HTML via the host tag parameter, aka Bug ID CSCuy08224...