Lucene search
+L

8 matches found

osv_ubuntu
osv_ubuntu
•added 2026/10/02 1:17 p.m.•25 views

UBUNTU-CVE-2026-104733

User Impersonation in ProcessOnes XMMP Server ejabberd = 26.04 allows an attacker to impersonate arbitrary users via unvalidated authzid parameter in SASL-PLAIN mechanism...

8.6CVSS6AI score0.00215EPSS
SaveExploits0References4
CVE
CVE
•added 2026/10/02 12:19 p.m.•31 views

CVE-2026-104733

The ProcessOnes XMMP Server ejabberd (versions

8.6CVSS6AI score0.00215EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/02 12:00 a.m.•14 views

PT-2026-104319

User Impersonation in ProcessOnes XMMP Server ejabberd = 26.04 allows an attacker to impersonate arbitrary users via unvalidated authzid parameter in SASL-PLAIN mechanism...

8.6CVSS6AI score0.00215EPSS
SaveExploits0References3
Veracode
Veracode
•added 2019/01/15 8:58 a.m.•26 views

Privilege Escalation

389-ds-base is vulnerable to privilege escalation attacks. The vulnerability exists as the SASL authentication functionality in 389 Directory Server before 1.2.11.26 allows remote authenticated users to connect as an arbitrary user and gain privileges via the authzid parameter in a SASL/GSSAPI bi...

6.5CVSS6.7AI score0.0219EPSS
SaveExploits2References10Affected Software1
osv_debian
osv_debian
•added 2014/03/18 5:02 p.m.•13 views

DEBIAN-CVE-2014-0132

The SASL authentication functionality in 389 Directory Server before 1.2.11.26 allows remote authenticated users to connect as an arbitrary user and gain privileges via the authzid parameter in a SASL/GSSAPI bind...

6.5CVSS7AI score0.0219EPSS
SaveExploits2References1
Prion
Prion
•added 2014/03/18 5:02 p.m.•21 views

Authentication flaw

The SASL authentication functionality in 389 Directory Server before 1.2.11.26 allows remote authenticated users to connect as an arbitrary user and gain privileges via the authzid parameter in a SASL/GSSAPI bind...

6.5CVSS7.1AI score0.0219EPSS
SaveExploits2References5Affected Software1
Debian CVE
Debian CVE
•added 2014/03/18 2:00 p.m.•46 views

CVE-2014-0132

The SASL authentication functionality in 389 Directory Server before 1.2.11.26 allows remote authenticated users to connect as an arbitrary user and gain privileges via the authzid parameter in a SASL/GSSAPI bind...

6.5CVSS6.5AI score0.0219EPSS
SaveExploits2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/03/18 12:00 a.m.•7 views

CVE-2014-0132: Improper Authentication

The SASL authentication functionality in 389 Directory Server before 1.2.11.26 allows remote authenticated users to connect as an arbitrary user and gain privileges via the authzid parameter in a SASL/GSSAPI bind...

6.5CVSS6AI score0.0219EPSS
SaveExploits2References2
Rows per page
Query Builder