Lucene search
+L

458 matches found

OpenVAS
OpenVAS
added 2018/06/10 12:0 a.m.24 views

Fedora Update for prosody FEDORA-2018-455803056d

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.7AI score0.01657EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2018/06/10 12:0 a.m.16 views

openSUSE: Security Advisory for prosody (openSUSE-SU-2018:1627-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.8CVSS8.8AI score0.01657EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2018/06/10 12:0 a.m.17 views

Fedora Update for prosody FEDORA-2018-18f8c6ce79

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.7AI score0.01657EPSS
SaveExploits0References2
Fedora
Fedora
added 2018/06/09 8:44 p.m.23 views

[SECURITY] Fedora 28 Update: prosody-0.10.2-1.fc28

Prosody is a flexible communications server for Jabber/XMPP written in Lua. It aims to be easy to use, and light on resources. For developers it aims to be easy to extend and give a flexible system on which to rapidly develop added functionality, or prototype new protocols...

8.8CVSS2.7AI score0.01657EPSS
SaveExploits0
Fedora
Fedora
added 2018/06/09 7:47 p.m.19 views

[SECURITY] Fedora 27 Update: prosody-0.10.2-1.fc27

Prosody is a flexible communications server for Jabber/XMPP written in Lua. It aims to be easy to use, and light on resources. For developers it aims to be easy to extend and give a flexible system on which to rapidly develop added functionality, or prototype new protocols...

8.8CVSS2.7AI score0.01657EPSS
SaveExploits0
OPENSUSE Linux
OPENSUSE Linux
added 2018/06/09 3:13 p.m.115 views

Security update for prosody (moderate)

This update for prosody to version 0.10.2 fixes the following issues: This security issue was fixed: - CVE-2018-10847: Prevent insufficient validation of client-provided parameters during XMPP stream restarts. Authenticated users may have overriden the realm associated with their session,...

3.5AI score0.01657EPSS
SaveExploits0References1
OPENSUSE Linux
OPENSUSE Linux
added 2018/06/09 3:11 p.m.114 views

Security update for prosody (moderate)

This update for prosody fixes the following issues: This security issue was fixed: - CVE-2018-10847: Prevent insufficient validation of client-provided parameters during XMPP stream restarts. Authenticated users may have overriden the realm associated with their session, potentially bypassing...

5AI score0.01657EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2018/06/05 12:0 a.m.28 views

Debian DSA-4216-1 : prosody - security update

It was discovered that Prosody, a lightweight Jabber/XMPP server, does not properly validate client-provided parameters during XMPP stream restarts, allowing authenticated users to override the realm associated with their session, potentially bypassing security policies and allowing impersonation...

8.8CVSS6.4AI score0.01657EPSS
SaveExploits0References7
Debian
Debian
added 2018/06/02 6:56 p.m.48 views

[SECURITY] [DSA 4216-1] prosody security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4216-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 02, 2018 https://www.debian.org/security/faq -...

8.8CVSS6.3AI score0.01657EPSS
SaveExploits0
Debian
Debian
added 2018/06/02 6:56 p.m.52 views

[SECURITY] [DSA 4216-1] prosody security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4216-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 02, 2018 https://www.debian.org/security/faq -...

6.5CVSS2.3AI score0.01657EPSS
SaveExploits0
OSV
OSV
added 2018/06/02 12:0 a.m.16 views

DSA-4216-1 prosody - security update

Bulletin has no description...

8.8CVSS8.6AI score0.01657EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2018/06/01 12:0 a.m.27 views

Debian: Security Advisory (DSA-4216-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.7AI score0.01657EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2018/05/10 12:0 a.m.29 views

Debian DSA-4198-1 : prosody - security update

Albert Dengg discovered that incorrect parsing of messages in the Prosody Jabber/XMPP server may result in denial of service. The oldstable distribution jessie is not affected. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian...

7.5CVSS7.2AI score0.01725EPSS
SaveExploits0References5
Debian
Debian
added 2018/05/09 6:25 p.m.22 views

[SECURITY] [DSA 4198-1] prosody security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4198-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 09, 2018 https://www.debian.org/security/faq -...

7.5CVSS7.5AI score0.01725EPSS
SaveExploits0
Prion
Prion
added 2018/05/09 5:29 p.m.17 views

Code injection

Prosody before 0.10.0 allows remote attackers to cause a denial of service application crash, related to an incompatibility with certain versions of the LuaSocket library, such as the lua-socket package from Debian stretch. The attacker needs to trigger a stream error. A crash can be observed in,...

5CVSS7.3AI score0.01725EPSS
SaveExploits0References5Affected Software2
NVD
NVD
added 2018/05/09 5:29 p.m.22 views

CVE-2017-18265

Prosody before 0.10.0 allows remote attackers to cause a denial of service application crash, related to an incompatibility with certain versions of the LuaSocket library, such as the lua-socket package from Debian stretch. The attacker needs to trigger a stream error. A crash can be observed in,...

7.5CVSS7.4AI score0.01725EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2018/05/09 5:29 p.m.26 views

CVE-2017-18265

Prosody before 0.10.0 allows remote attackers to cause a denial of service application crash, related to an incompatibility with certain versions of the LuaSocket library, such as the lua-socket package from Debian stretch. The attacker needs to trigger a stream error. A crash can be observed in,...

7.5CVSS7.1AI score0.01725EPSS
SaveExploits0References5
OSV
OSV
added 2018/05/09 5:29 p.m.7 views

UBUNTU-CVE-2017-18265

Prosody before 0.10.0 allows remote attackers to cause a denial of service application crash, related to an incompatibility with certain versions of the LuaSocket library, such as the lua-socket package from Debian stretch. The attacker needs to trigger a stream error. A crash can be observed in,...

7.5CVSS7.1AI score0.01725EPSS
SaveExploits0References6
OSV
OSV
added 2018/05/09 5:29 p.m.7 views

DEBIAN-CVE-2017-18265

Prosody before 0.10.0 allows remote attackers to cause a denial of service application crash, related to an incompatibility with certain versions of the LuaSocket library, such as the lua-socket package from Debian stretch. The attacker needs to trigger a stream error. A crash can be observed in,...

7.5CVSS7.3AI score0.01725EPSS
SaveExploits0References1
OSV
OSV
added 2018/05/09 5:29 p.m.10 views

CVE-2017-18265

Prosody before 0.10.0 allows remote attackers to cause a denial of service application crash, related to an incompatibility with certain versions of the LuaSocket library, such as the lua-socket package from Debian stretch. The attacker needs to trigger a stream error. A crash can be observed in,...

7.5CVSS7.4AI score
SaveExploits0References5
Rows per page
Query Builder