559 matches found
CVE-2019-20525
Ignite Realtime Openfire 4.4.1 allows XSS via the setup/setup-datasource-standard.jsp driver parameter...
CVE-2019-20365
An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via search to the Users/Group search page...
CVE-2019-20527
Ignite Realtime Openfire 4.4.1 allows XSS via the setup/setup-datasource-standard.jsp serverURL parameter...
CVE-2020-24601
In Ignite Realtime Openfire 4.5.1 a Stored Cross-site Vulnerability allows an attacker to execute an arbitrary malicious URL via the vulnerable POST parameter searchName", "alias" in the import certificate trusted page...
CVE-2020-24602
Ignite Realtime Openfire 4.5.1 has a reflected Cross-site scripting vulnerability which allows an attacker to execute arbitrary malicious URL via the vulnerable GET parameter searchName", "searchValue", "searchDescription", "searchDefaultValue","searchPlugin", "searchDescription" and...
Identity Spoofing
org.igniterealtime.openfire, xmppserver is vulnerable to identity spoofing. The vulnerability is due to regex-based extraction of the Common Name CN from an unescaped, provider-dependent Distinguished Name DN string, which allows an attacker to impersonate other users using crafted certificate...
EUVD-2008-6477
Malware in sbrugna...
EUVD-2019-10918
Malware in sbrugna...
EUVD-2017-11956
Malware in sbrugna...
EUVD-2020-17318
Malware in sbrugna...
EUVD-2009-0501
Malware in sbrugna...
EUVD-2008-6478
Malware in sbrugna...
EUVD-2014-3463
Malware in sbrugna...
EUVD-2020-17321
Malware in sbrugna...
EUVD-2019-0622
Malware in sbrugna...
EUVD-2020-17319
Malware in sbrugna...
EUVD-2007-2967
Malware in sbrugna...
EUVD-2019-10917
Malware in sbrugna...