672 matches found
CVE-2019-20527
Ignite Realtime Openfire 4.4.1 allows XSS via the setup/setup-datasource-standard.jsp serverURL parameter...
CVE-2019-20365
An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via search to the Users/Group search page...
CVE-2020-24601
In Ignite Realtime Openfire 4.5.1 a Stored Cross-site Vulnerability allows an attacker to execute an arbitrary malicious URL via the vulnerable POST parameter searchName", "alias" in the import certificate trusted page...
CVE-2020-24602
Ignite Realtime Openfire 4.5.1 has a reflected Cross-site scripting vulnerability which allows an attacker to execute arbitrary malicious URL via the vulnerable GET parameter searchName", "searchValue", "searchDescription", "searchDefaultValue","searchPlugin", "searchDescription" and...
Identity Spoofing
org.igniterealtime.openfire, xmppserver is vulnerable to identity spoofing. The vulnerability is due to regex-based extraction of the Common Name CN from an unescaped, provider-dependent Distinguished Name DN string, which allows an attacker to impersonate other users using crafted certificate...
EUVD-2008-6476
Malware in sbrugna...
EUVD-2020-17319
Malware in sbrugna...
EUVD-2009-0500
Malware in sbrugna...
EUVD-2020-22889
Malware in sbrugna...
EUVD-2016-2406
Malware in sbrugna...
EUVD-2008-6478
Malware in sbrugna...
EUVD-2019-0622
Malware in sbrugna...
EUVD-2006-7210
Malware in sbrugna...
EUVD-2008-6477
Malware in sbrugna...
EUVD-2020-22821
Malware in sbrugna...
EUVD-2017-11956
Malware in sbrugna...
EUVD-2014-3463
Malware in sbrugna...
EUVD-2015-7608
Malware in sbrugna...