Lucene search
+L

458 matches found

OSV
OSV
added 2021/06/19 12:0 a.m.11 views

DLA-2687-2 prosody - regression update

Bulletin has no description...

7.2AI score
SaveExploits0
OpenVAS
OpenVAS
added 2021/06/17 12:0 a.m.27 views

Debian: Security Advisory (DLA-2687-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.9CVSS7.5AI score0.02169EPSS
SaveExploits0References4
Debian
Debian
added 2021/06/16 4:28 a.m.101 views

[SECURITY] [DLA 2687-1] prosody security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2687-1 [email protected] https://www.debian.org/lts/security/ Anton Gladky June 15, 2021 https://wiki.debian.org/LTS -...

5.9CVSS6.1AI score0.02169EPSS
SaveExploits0
OSV
OSV
added 2021/06/15 12:0 a.m.28 views

DLA-2687-1 prosody - security update

Bulletin has no description...

5.9CVSS5.5AI score0.02169EPSS
SaveExploits0
Github Security Blog
Github Security Blog
added 2021/05/27 6:41 p.m.33 views

Listing of upload directory contents possible

There's an security issue in prosody-filer versions 1.0.1 which leads to unwanted directory listings of download directories. An attacker is able to list previous uploads of a certain user by shortening the URL and accessing a URL subdirectors other than /upload/ or the corresponding user defined...

3.6AI score
SaveExploits0References2Affected Software1
OSV
OSV
added 2021/05/27 6:41 p.m.8 views

GHSA-QMFX-75FF-8MW6 Listing of upload directory contents possible

There's an security issue in prosody-filer versions 1.0.1 which leads to unwanted directory listings of download directories. An attacker is able to list previous uploads of a certain user by shortening the URL and accessing a URL subdirectors other than /upload/ or the corresponding user defined...

7.1AI score
SaveExploits0References1
GitLab Advisory Database
GitLab Advisory Database
added 2021/05/27 12:0 a.m.13 views

Listing of upload directory contents possible

There's an security issue in prosody-filer versions 1.0.1 which leads to unwanted directory listings of download directories. An attacker is able to list previous uploads of a certain user by shortening the URL and accessing a URL subdirectors other than /upload/ or the corresponding user defined...

3.6AI score
SaveExploits0References2Affected Software1
OpenVAS
OpenVAS
added 2021/05/27 12:0 a.m.27 views

Fedora: Security Advisory for prosody (FEDORA-2021-a33f6e36e1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.8CVSS6.7AI score0.02261EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2021/05/27 12:0 a.m.27 views

Fedora: Security Advisory for prosody (FEDORA-2021-b5d8c6d086)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.8CVSS6.7AI score0.02261EPSS
SaveExploits0References2
OSV
OSV
added 2021/05/26 3:15 p.m.5 views

CVE-2021-33506

jitsi-meet-prosody in Jitsi Meet before 2.0.5963-1 does not ensure that restrictroomcreation is set by default. This can allow an attacker to circumvent conference moderation...

7.5CVSS5.8AI score0.01172EPSS
SaveExploits0References3
NVD
NVD
added 2021/05/26 3:15 p.m.31 views

CVE-2021-33506

jitsi-meet-prosody in Jitsi Meet before 2.0.5963-1 does not ensure that restrictroomcreation is set by default. This can allow an attacker to circumvent conference moderation...

7.5CVSS0.01172EPSS
SaveExploits0References3
Prion
Prion
added 2021/05/26 3:15 p.m.23 views

Design/Logic Flaw

jitsi-meet-prosody in Jitsi Meet before 2.0.5963-1 does not ensure that restrictroomcreation is set by default. This can allow an attacker to circumvent conference moderation...

5CVSS7.5AI score0.01172EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2021/05/26 12:0 a.m.8 views

Jitsi Meet jitsi-meet-prosody安全漏洞

8X8 Docker Jitsi Meet is a tool for building Jitsi Meet videoconferencing solutions in Docker from 8x8 USA. A security vulnerability exists in jitsi-meet-prosody in versions of Jitsi Meet prior to 5026, which stems from an uncertainty in the default setting of restrictroomcreation. No detailed...

7.5CVSS5.5AI score0.01172EPSS
SaveExploits0References3
Fedora
Fedora
added 2021/05/22 1:16 a.m.83 views

[SECURITY] Fedora 32 Update: prosody-0.11.9-1.fc32

Prosody is a flexible communications server for Jabber/XMPP written in Lua. It aims to be easy to use, and light on resources. For developers it aims to be easy to extend and give a flexible system on which to rapidly develop added functionality, or prototype new protocols...

7.8CVSS2.7AI score0.02261EPSS
SaveExploits0
Fedora
Fedora
added 2021/05/22 1:8 a.m.89 views

[SECURITY] Fedora 33 Update: prosody-0.11.9-1.fc33

Prosody is a flexible communications server for Jabber/XMPP written in Lua. It aims to be easy to use, and light on resources. For developers it aims to be easy to extend and give a flexible system on which to rapidly develop added functionality, or prototype new protocols...

7.8CVSS2.7AI score0.02261EPSS
SaveExploits0
Fedora
Fedora
added 2021/05/22 1:2 a.m.84 views

[SECURITY] Fedora 34 Update: prosody-0.11.9-1.fc34

Prosody is a flexible communications server for Jabber/XMPP written in Lua. It aims to be easy to use, and light on resources. For developers it aims to be easy to extend and give a flexible system on which to rapidly develop added functionality, or prototype new protocols...

7.8CVSS2.7AI score0.02261EPSS
SaveExploits0
Debian
Debian
added 2021/05/21 7:14 p.m.89 views

[SECURITY] [DSA 4916-2] prosody regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-4916-2 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 21, 2021 https://www.debian.org/security/faq -...

7.2AI score
SaveExploits0
OSV
OSV
added 2021/05/21 12:0 a.m.8 views

DSA-4916-2 prosody - regression update

Bulletin has no description...

7.2AI score
SaveExploits0
ArchLinux
ArchLinux
added 2021/05/19 12:0 a.m.194 views

[ASA-202105-11] prosody: multiple issues

Arch Linux Security Advisory ASA-202105-11 ========================================== Severity: High Date : 2021-05-19 CVE-ID : CVE-2021-32917 CVE-2021-32918 CVE-2021-32919 CVE-2021-32920 CVE-2021-32921 Package : prosody Type : multiple issues Remote : Yes Link :...

7.8CVSS1.3AI score0.02261EPSS
SaveExploits0References26
OpenVAS
OpenVAS
added 2021/05/19 12:0 a.m.21 views

Debian: Security Advisory (DSA-4916-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.3AI score0.02261EPSS
SaveExploits0References4
Rows per page
Query Builder