Lucene search
+L

1100 matches found

Fedora
Fedora
added 2019/09/20 1:34 a.m.30 views

[SECURITY] Fedora 29 Update: dino-0.0-0.12.20190912.git.a96c801.fc29

A modern XMPP "Jabber" chat client using GTK+/Vala...

7.5CVSS1.2AI score0.02385EPSS
SaveExploits2
Fedora
Fedora
added 2019/09/20 1:22 a.m.30 views

[SECURITY] Fedora 30 Update: dino-0.0-0.12.20190912.git.a96c801.fc30

A modern XMPP "Jabber" chat client using GTK+/Vala...

7.5CVSS1.2AI score0.02385EPSS
SaveExploits2
OpenVAS
OpenVAS
added 2019/09/20 12:0 a.m.21 views

Fedora Update for dino FEDORA-2019-0eb6d51f81

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.5AI score0.02385EPSS
SaveExploits2References2
OpenVAS
OpenVAS
added 2019/09/20 12:0 a.m.19 views

Fedora Update for dino FEDORA-2019-3d3bb765ca

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.5AI score0.01377EPSS
SaveExploits1References2
Fedora
Fedora
added 2019/09/18 12:6 a.m.43 views

[SECURITY] Fedora 31 Update: dino-0.0-0.13.20190912.git.a96c801.fc31

A modern XMPP "Jabber" chat client using GTK+/Vala...

7.5CVSS1.2AI score0.02385EPSS
SaveExploits2
OpenVAS
OpenVAS
added 2019/09/18 12:0 a.m.61 views

Debian: Security Advisory (DSA-4524-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.5AI score0.02385EPSS
SaveExploits2References4
Tenable Nessus
Tenable Nessus
added 2019/09/17 12:0 a.m.33 views

Debian DSA-4524-1 : dino-im - security update

Multiple vulnerabilities have been discovered in the Dino XMPP client, which could allow spoofing message, manipulation of a user's roster contact list and unauthorised sending of message carbons. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extract...

7.5CVSS7.1AI score0.02385EPSS
SaveExploits2References6
Debian
Debian
added 2019/09/16 7:46 p.m.182 views

[SECURITY] [DSA 4524-1] dino-im security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4524-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 16, 2019 https://www.debian.org/security/faq -...

7.5CVSS8AI score0.02385EPSS
SaveExploits2
OpenVAS
OpenVAS
added 2019/09/04 12:0 a.m.14 views

Fedora Update for python-slixmpp FEDORA-2019-5a947d8603

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.5AI score0.02342EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2019/09/04 12:0 a.m.17 views

Fedora Update for python-slixmpp FEDORA-2019-f40c49b99e

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.5AI score0.02342EPSS
SaveExploits1References2
Fedora
Fedora
added 2019/09/03 2:2 a.m.41 views

[SECURITY] Fedora 29 Update: python-slixmpp-1.4.2-1.fc29

Slixmpp is an MIT licensed XMPP library for Python 3.5+. It is a fork of SleekXMPP. Goals is to only rewrite the core of the library the low level socket handling, the timers, the events dispatching in order to remove all threads...

7.5CVSS3.1AI score0.02342EPSS
SaveExploits1
Veracode
Veracode
added 2019/08/26 6:31 a.m.27 views

Cross-site Scripting (XSS)

Openfire Core XMPP Server is vulnerable to cross-site scripting XSS. The attack is possible because it does not sanitize the parameters in LDAP setup test, allowing an attacker to inject arbitrary script through it...

6.1CVSS4AI score0.00905EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2019/08/16 2:2 p.m.31 views

GHSA-65RM-H285-5CC5 Improper Certificate Validation in Twisted

In words.protocols.jabber.xmlstream in Twisted through 19.2.1, XMPP support did not verify certificates when used with TLS, allowing an attacker to MITM connections...

9.1CVSS6.5AI score0.01809EPSS
SaveExploits0References12
Github Security Blog
Github Security Blog
added 2019/08/16 2:2 p.m.24 views

Improper Certificate Validation in Twisted

In words.protocols.jabber.xmlstream in Twisted through 19.2.1, XMPP support did not verify certificates when used with TLS, allowing an attacker to MITM connections...

7.4CVSS2.9AI score0.01809EPSS
SaveExploits0References12Affected Software1
Kitploit
Kitploit
added 2019/07/20 1:1 p.m.196 views

Parrot Security 4.7 - Security GNU/Linux Distribution Designed with Cloud Pentesting and IoT Security in Mind

Parrot is a GNU/Linux distribution based on Debian Testing and designed with Security, Development and Privacy in mind. It includes a full portable laboratory for security and digital forensics experts, but it also includes all you need to develop your own software or protect your privacy while...

7.4AI score
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/06/18 12:0 a.m.9 views

The vulnerabilities of the software for Cisco TelePresence Video Communication Server and Cisco Expressway Series, as well as the Unified Communications Manager IM and Presence Service software, are due to insufficient validation of input data. This allows attackers to trigger service failures.

The vulnerabilities of the Cisco TelePresence Video Communication Server and Cisco Expressway Series software, as well as the Unified Communications Manager IM and Presence Service software, exist due to insufficient validation of input data. Exploiting these vulnerabilities can allow attackers t...

8.6CVSS5.5AI score0.04639EPSS
SaveExploits0References5
Veracode
Veracode
added 2019/06/17 2:22 a.m.35 views

Man-in-the-Middle (MitM)

twisted is vulnerable to man-in-the-middle attacks. XMPP does not verify server certificates when used with TLS. This allows a remote attacker to perform man-in-the-middle attacks on connections between the client and the server...

7.4CVSS7.1AI score0.01809EPSS
SaveExploits0References8Affected Software1
Prion
Prion
added 2019/06/16 12:29 p.m.16 views

Design/Logic Flaw

In words.protocols.jabber.xmlstream in Twisted through 19.2.1, XMPP support did not verify certificates when used with TLS, allowing an attacker to MITM connections...

5.8CVSS7.2AI score0.01809EPSS
SaveExploits0References8Affected Software1
UbuntuCve
UbuntuCve
added 2019/06/16 12:29 p.m.40 views

CVE-2019-12855

In words.protocols.jabber.xmlstream in Twisted through 19.2.1, XMPP support did not verify certificates when used with TLS, allowing an attacker to MITM connections...

7.4CVSS6.9AI score0.01809EPSS
SaveExploits0References4
OSV
OSV
added 2019/06/16 12:29 p.m.34 views

CVE-2019-12855

In words.protocols.jabber.xmlstream in Twisted through 19.2.1, XMPP support did not verify certificates when used with TLS, allowing an attacker to MITM connections...

7.4CVSS7.3AI score
SaveExploits0References8
Rows per page
Query Builder