Lucene search
+L

1037 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 9:57 a.m.•24 views

CVE-2011-3287

Cisco Jabber Extensible Communications Platform aka Jabber XCP 2.x through 5.4.x before 5.4.0.27581 and 5.8.x before 5.8.1.27561 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service memory and CPU consumption, and process crash via...

9.3CVSS6.8AI score0.01619EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 4:37 a.m.•16 views

CVE-2013-1161

The XML parser in the Cisco Jabber IM application for Android allows remote authenticated users to cause a denial of service blocked connection by leveraging an entry on a Buddy list and sending a crafted XMPP presence update message, aka Bug ID CSCue38383...

6.3CVSS6.5AI score0.00933EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 3:10 a.m.•18 views

CVE-2013-1228

Cisco Jabber on Windows does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and modify the client-server data stream via a crafted certificate, aka Bug ID CSCug30280...

4.3CVSS6.7AI score0.00477EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 12:27 a.m.•16 views

CVE-2013-3393

The Precision Video Engine component in Cisco Jabber for Windows and Cisco Virtualization Experience Media Engine allows remote attackers to cause a denial of service process crash and call disconnection via crafted RTP packets, aka Bug IDs CSCuh60706 and CSCue21117...

5CVSS7AI score0.01232EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/03/04 12:00 a.m.•9 views

Linux Distros Unpatched Vulnerability : CVE-2014-3698

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The jabberidnvalidate function in jutil.c in the Jabber protocol plugin in libpurple in Pidgin before 2.10.10 allows remote attackers to obtain sensitive...

5CVSS7AI score0.03776EPSS
SaveExploits0References2
Trellix
Trellix
•added 2024/11/20 12:00 a.m.•32 views

Phobos: Stealthy Ransomware That Operated Under the Radar - Until Now

Phobos: Stealthy Ransomware That Operated Under the Radar - Until Now By Jambul Tologonov, John Fokker and Duy-Phuc Pham · November 20, 2024 On November 18th, the US Justice Department unsealed criminal charges against a Russian national for allegedly administering the sale, distribution, and...

7.1AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2024/08/07 12:00 a.m.•18 views

The vulnerability of the XML Handler component, a cross-platform messaging client for the Jabber protocol, allows attackers to influence the integrity of the system.

The vulnerability of the XML Handler component in the cross-platform messaging application for the Jabber protocol, Gajim, is related to the creation of XML fragments that allow for editing messages that were not sent by other users. Exploiting this vulnerability can enable a malicious actor to...

5.3CVSS5.8AI score0.00546EPSS
SaveExploits0References4Affected Software2
Redos
Redos
•added 2024/08/06 12:00 a.m.•18 views

ROS-20240806-02

A vulnerability in the XML Handler component of the cross-platform messenger for the Jabber Gajim protocol is related to the the creation of XML strophs, allowing messages that were not sent by other users. Exploitation of the vulnerability could allow an attacker acting remotely to have an Impac...

5.3CVSS7.2AI score0.00546EPSS
SaveExploits0
OSV
OSV
•added 2023/09/15 3:15 a.m.•16 views

CVE-2022-20917

A vulnerability in the Extensible Messaging and Presence Protocol XMPP message processing feature of Cisco Jabber could allow an authenticated, remote attacker to manipulate the content of XMPP messages that are used by the affected application. This vulnerability is due to the improper handling ...

4.3CVSS5.8AI score0.00887EPSS
SaveExploits0References1
NVD
NVD
•added 2023/09/15 3:15 a.m.•31 views

CVE-2022-20917

A vulnerability in the Extensible Messaging and Presence Protocol XMPP message processing feature of Cisco Jabber could allow an authenticated, remote attacker to manipulate the content of XMPP messages that are used by the affected application. This vulnerability is due to the improper handling ...

4.3CVSS4.6AI score0.00887EPSS
SaveExploits0References1
Prion
Prion
•added 2023/09/15 3:15 a.m.•33 views

Design/Logic Flaw

A vulnerability in the Extensible Messaging and Presence Protocol XMPP message processing feature of Cisco Jabber could allow an authenticated, remote attacker to manipulate the content of XMPP messages that are used by the affected application. This vulnerability is due to the improper handling ...

4CVSS4.7AI score0.00887EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/09/15 2:12 a.m.•48 views

CVE-2022-20917

A vulnerability in the Extensible Messaging and Presence Protocol XMPP message processing feature of Cisco Jabber could allow an authenticated, remote attacker to manipulate the content of XMPP messages that are used by the affected application. This vulnerability is due to the improper handling ...

4.3CVSS5AI score0.00887EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/09/15 2:12 a.m.•19 views

CVE-2022-20917

A vulnerability in the Extensible Messaging and Presence Protocol XMPP message processing feature of Cisco Jabber could allow an authenticated, remote attacker to manipulate the content of XMPP messages that are used by the affected application. This vulnerability is due to the improper handling ...

4.3CVSS6.8AI score0.00887EPSS
SaveExploits0References1
CVE
CVE
•added 2023/09/15 2:12 a.m.•2992 views

CVE-2022-20917

CVE-2022-20917 describes a vulnerability in the XMPP message processing feature of Cisco Jabber. The issue arises from improper handling of nested XMPP messages in requests, enabling an authenticated, remote attacker to manipulate the content of XMPP messages used by the Jabber client and potenti...

4.3CVSS4.7AI score0.00887EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/15 12:00 a.m.•2 views

CVE-2022-20917: Exposure of Resource to Wrong Sphere

A vulnerability in the Extensible Messaging and Presence Protocol XMPP message processing feature of Cisco Jabber could allow an authenticated, remote attacker to manipulate the content of XMPP messages that are used by the affected application. This vulnerability is due to the improper handling ...

4.3CVSS5.6AI score0.00887EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2023/04/02 12:00 a.m.•25 views

Fedora: Security Advisory for dino (FEDORA-2023-ea6b94395f)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.1CVSS7.1AI score0.00699EPSS
SaveExploits0References2
Fedora
Fedora
•added 2023/04/01 1:21 a.m.•33 views

[SECURITY] Fedora 37 Update: dino-0.3.2-1.fc37

A modern XMPP "Jabber" chat client using GTK+/Vala...

7.1CVSS7AI score0.00699EPSS
SaveExploits0
Debian
Debian
•added 2023/03/27 8:10 p.m.•128 views

[SECURITY] [DSA 5379-1] dino-im security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5379-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 27, 2023 https://www.debian.org/security/faq -...

7.1CVSS6.7AI score0.00699EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2023/03/08 12:00 a.m.•46 views

Debian: Security Advisory (DLA-391-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.6AI score0.02183EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2023/02/15 6:18 a.m.•8 views

SUSE CVE-2005-0967

Gaim 1.2.0 allows remote attackers to cause a denial of service application crash via a malformed file transfer request to a Jabber user, which leads to an out-of-bounds read...

5CVSS6.8AI score0.02505EPSS
SaveExploits1References6
Rows per page
Query Builder