Lucene search
K

61 matches found

CNVD
CNVD
added 2017/05/08 12:0 a.m.2 views

Panda Mobile Security for iOS Man-in-the-Middle Attack Vulnerability

Panda Mobile Security for iOS is a mobile antivirus product for iOS developed by the Spanish company Panda Security. The product protects mobile networks from viruses, spyware, hackers and other Internet threats. A security vulnerability exists in version 1.1 of Panda Mobile Security for iOS. An...

5.9CVSS6.6AI score0.00115EPSS
Exploits0References1
CNVD
CNVD
added 2017/05/08 12:0 a.m.1 views

Atlassian Hipchat for iOS Man-in-the-Middle Attack Vulnerability

Atlassian Hipchat for iOS is a suite of team chat tools for iOS from the Australian company Atlassian that supports group and 1-to-1 voice and video chat with screen sharing. A security vulnerability exists in Atlassian HipChat for iOS versions prior to 3.16.2. An attacker can exploit the...

5.9CVSS6.6AI score0.00115EPSS
Exploits0References1
The Hacker News
The Hacker News
added 2016/12/14 1:47 a.m.14 views

5-year-old Skype Backdoor Discovered — Mac OS X Users Urged to Update

Those innocent-looking apps in your smartphone can secretly spy on your communications or could allow hackers to do so. Hard to believe, but it's true. Recently, Trustwave's SpiderLabs analysts discovered a hidden backdoor in Skype for Apple's macOS and Mac OS X operating systems that could be us...

6.8AI score
Exploits0
OSV
OSV
added 2016/02/09 12:0 a.m.18 views

DLA-413-1 gajim - security update

Bulletin has no description...

5.8CVSS5.6AI score0.00556EPSS
Exploits1
CNVD
CNVD
added 2016/01/26 12:0 a.m.2 views

Gajim Message Interception Vulnerability

Gajim is a suite of free instant messaging software based on the Jabber communication protocol developed by the Gajim project. A security vulnerability exists in versions of Gajim prior to 0.16.5, which can be exploited by remote attackers to modify the roster and intercept messages with the help...

5.8CVSS5.8AI score0.00556EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2016/01/25 12:0 a.m.28 views

openSUSE Security Update : gajim (openSUSE-2016-29)

This update to gajim 0.16.5 fixes the following security issues : - CVE-2015-8688: Message interception due to unverified origin of roster push - Improve security on connexion and for roster managment boo960668 The following on-security improvements were added : - Improve MAM implementation. -...

5.8CVSS5.6AI score0.00556EPSS
Exploits1References2
OSV
OSV
added 2016/01/15 7:59 p.m.1 views

DEBIAN-CVE-2015-8688

Gajim before 0.16.5 allows remote attackers to modify the roster and intercept messages via a crafted roster-push IQ stanza...

5.4CVSS6.9AI score0.00556EPSS
Exploits1References1
OSV
OSV
added 2016/01/15 7:59 p.m.8 views

CVE-2015-8688

Gajim before 0.16.5 allows remote attackers to modify the roster and intercept messages via a crafted roster-push IQ stanza...

5.4CVSS5.3AI score
Exploits0References6
NVD
NVD
added 2016/01/15 7:59 p.m.16 views

CVE-2015-8688

Gajim before 0.16.5 allows remote attackers to modify the roster and intercept messages via a crafted roster-push IQ stanza...

5.8CVSS5.5AI score0.00556EPSS
Exploits1References6
UbuntuCve
UbuntuCve
added 2016/01/15 7:59 p.m.19 views

CVE-2015-8688

Gajim before 0.16.5 allows remote attackers to modify the roster and intercept messages via a crafted roster-push IQ stanza...

5.8CVSS6.2AI score0.00556EPSS
Exploits1References3
OSV
OSV
added 2016/01/15 7:59 p.m.1 views

UBUNTU-CVE-2015-8688

Gajim before 0.16.5 allows remote attackers to modify the roster and intercept messages via a crafted roster-push IQ stanza...

5.4CVSS6AI score0.00556EPSS
Exploits1References4
Cvelist
Cvelist
added 2016/01/15 7:0 p.m.33 views

CVE-2015-8688

Gajim before 0.16.5 allows remote attackers to modify the roster and intercept messages via a crafted roster-push IQ stanza...

5.5AI score0.00556EPSS
Exploits1References6
CVE
CVE
added 2016/01/15 7:0 p.m.75 views

CVE-2015-8688

CVE-2015-8688 affects Gajim prior to 0.16.5. The root cause is failure to verify the origin of roster-push IQ stanzas, allowing an attacker to spoof roster updates and intercept messages. Public advisories and vendor releases indicate upgrading to Gajim 0.16.5 (or respective patched package versi...

5.8CVSS5.4AI score0.00556EPSS
Exploits1References6Affected Software1
Kaspersky
Kaspersky
added 2016/01/15 12:0 a.m.21 views

KLA10742 Security bypass vulnerability in Gajim

An unspecified vulnerability was found in Gajim. By exploiting this vulnerability malicious users can modify roster and intercept messages. This vulnerability can be exploited remotely via a specially designed roster-push IQ stanza. Original advisories - Related products Gajim CVE list...

5.8CVSS5.5AI score0.00556EPSS
Exploits1References2
CNVD
CNVD
added 2015/07/12 12:0 a.m.1 views

OpenSSL Man-in-the-Middle Attack Vulnerability (CNVD-2015-04454)

OpenSSL is an open source capable of implementing Secure Sockets Layer and Secure Transport Layer protocols for general-purpose cryptographic libraries , which supports a variety of cryptographic algorithms , including symmetric ciphers , hash algorithms , secure hash algorithms and so on. The...

6.5CVSS6.9AI score0.76449EPSS
Exploits6References1
myhack58
myhack58
added 2014/12/20 12:0 a.m.30 views

Cellular communications network discovery security vulnerabilities allow others to monitor the dead calls or intercept text messages-vulnerability warning-the black bar safety net

German researchers in a cellular communication network widely used on the VII signaling system SS7, Signaling System Number 7 on the discovery of a security vulnerability, allowing spies, hackers and criminals potential large-scale monitoring of private phone calls and intercept text messages...

1.1AI score
Exploits0
The Hacker News
The Hacker News
added 2011/12/01 8:18 p.m.3 views

The Spy Files: Wikileaks expose Mobile Phone, Email Hacking capability

The Spy Files: Wikileaks expose Mobile Phone, Email Hacking capability Wikileaks has released https://spyfiles.org/ dozens of new documents highlighting the state of the once covert, but now lucrative private sector global surveillance industry. According to Assange, over 150 private sector...

7AI score
Exploits0
myhack58
myhack58
added 2006/06/27 12:0 a.m.21 views

MSN Messnger chat history intercepted and the encryption-vulnerability warning-the black bar safety net

MSN Messenger is the Microsoft Corp launched instant messaging software. MSN Messenger with its excellent performance and easy operation, it has been among the of currently the world's most widely used IM softwareinstant messaging software, in domestic also has many users, is the only one can and...

6.7AI score
Exploits0
Exploit DB
Exploit DB
added 2001/06/05 12:0 a.m.35 views

Microsoft Outlook 97/98/2000/4/5 - Address Book Spoofing

source: https://www.securityfocus.com/bid/2823/info Outlook Express is the standard e-mail client that is shipped with Microsoft Windows 9x/ME/NT. The address book in Outlook Express is normally configured to make entries for all addresses that are replied to by the user of the mail client. An...

7.4AI score
Exploits0
security_vulns
security_vulns
added 2001/04/16 12:0 a.m.54 views

Microsoft Outlook Express address book vulnerability

Issue : Outlook Express address book allows messages to be intercepted by 3rd party Date Released : 16 March 2001 Vendor Notified : 16 March 2001 Affected : Outlook Exress 5.5SP1 and prior Risk : Low/Average Discovered : 18 December 2000 by 3APA3A Remotely Exploitable : Yes Vendor URL :...

0.1AI score
Exploits0
Rows per page
Query Builder