CVE-2019-20364

An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via cacheName to SystemCacheDetails.jsp...

CVE-2019-20363

An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via alias to Manage Store Contents...

CVE-2020-24601

In Ignite Realtime Openfire 4.5.1 a Stored Cross-site Vulnerability allows an attacker to execute an arbitrary malicious URL via the vulnerable POST parameter searchName", "alias" in the import certificate trusted page...

EUVD-2019-10918

Malware in sbrugna...

EUVD-2020-22889

Malware in sbrugna...

EUVD-2020-22886

Malware in sbrugna...

EUVD-2007-2967

Malware in sbrugna...

EUVD-2009-0500

Malware in sbrugna...

EUVD-2009-0501

Malware in sbrugna...

EUVD-2014-9563

Malware in sbrugna...

EUVD-2014-4974

Malware in sbrugna...

EUVD-2015-6904

Malware in sbrugna...

EUVD-2022-5663

Malicious code in bioql PyPI...

EUVD-2022-5691

Malicious code in bioql PyPI...

EUVD-2022-5104

Malicious code in bioql PyPI...

EUVD-2022-4285

Malicious code in bioql PyPI...

CVE-2024-25421

An issue in Ignite Realtime Openfire v.4.9.0 and before allows a remote attacker to escalate privileges via the ROOMCACHE component...

CVE-2024-25420

An issue in Ignite Realtime Openfire before 4.8.1 allows a remote attacker to escalate privileges via the admin.authorizedJIDs system property component...

CVE-2020-12772

An issue was discovered in Ignite Realtime Spark 2.8.3 and the ROAR plugin for it on Windows. A chat message can include an IMG element with a SRC attribute referencing an external host's IP address. Upon access to this external host, the NTLM hashes of the user are sent with the HTTP request. Th...

CVE-2020-35200

Ignite Realtime Openfire 4.6.0 has plugins/clientcontrol/spark-form.jsp Reflective XSS...