162 matches found
DEBIAN-CVE-2019-16236
Dino before 2019-09-10 does not check roster push authorization in module/roster/module.vala...
Authorization
Dino before 2019-09-10 does not check roster push authorization in module/roster/module.vala...
CVE-2019-16236
Dino before 2019-09-10 does not check roster push authorization in module/roster/module.vala...
UBUNTU-CVE-2019-16236
Dino before 2019-09-10 does not check roster push authorization in module/roster/module.vala...
CVE-2019-16236
CVE-2019-16236 affects the Dino XMPP client (GTK+/Vala). The vulnerability arises from Dino not checking roster push authorization in module/roster/module.vala, enabling potential unauthorized roster push actions. Reported CVSS metrics show two vectors: CVSS v2 base 5.0 (NETWORK/LOW complexity, I...
CVE-2019-16236
Dino before 2019-09-10 does not check roster push authorization in module/roster/module.vala...
Updated mailman packages fix a security vulnerability
Updated mailman package fixes security vulnerability: Calum Hutton and the Mailman team discovered a cross site scripting and information leak vulnerability in the user options page. A remote attacker could use a crafted URL to steal cookie information or to fish for whether a user is subscribed ...
Debian DSA-4108-1 : mailman - security update
Calum Hutton and the Mailman team discovered a cross site scripting and information leak vulnerability in the user options page. A remote attacker could use a crafted URL to steal cookie information or to fish for whether a user is subscribed to a list with a private roster. C Tenable Network...
Debian: Security Advisory (DSA-4108-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Update : python3-sleekxmpp (openSUSE-2017-137)
This update for python3-sleekxmpp fixes the following issues : - Check the origin of roster pushes 2015-8688, 2016-9928, boo1014976. Also see https://gultsch.de/gajimrosterpushandmessageinterce ption.html - An error in legacyauth support was fixed %NASLMINLEVEL 70300 C Tenable Network Security,...
11827.digitalsports.com XSS vulnerability
Vulnerable URL: http://11827.digitalsports.com/pages/roster/?levelid=2'"--!...
Updated mcabber packages fix security vulnerability
It was discovered that there was a "roster push attack" vulnerability in mcabber, a console-based Jabber XMPP client. A remote attacker can modify the roster and intercept messages via a crafted roster-push IQ stanza CVE-2016-9928...
MGASA-2016-0433 Updated mcabber packages fix security vulnerability
It was discovered that there was a "roster push attack" vulnerability in mcabber, a console-based Jabber XMPP client. A remote attacker can modify the roster and intercept messages via a crafted roster-push IQ stanza CVE-2016-9928...
PT-2020-8059
Name of the Vulnerable Software and Affected Versions: MCabber versions prior to 1.0.4 Description: The issue allows remote attackers to intercept communications or add themselves as an entity on a third party's roster as another user, garnering associated privileges, via crafted XMPP packets. Th...
[slackware-security] mcabber
New mcabber packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/loudmouth-1.5.3-i586-1slack14.2.txz: Upgraded. This update is needed for the mcabber security update...
[SECURITY] [DLA 724-1] mcabber security update
Package : mcabber Version : 0.10.1-3+deb7u1 Debian Bug : 845258 It was discovered that there was a "roster push attack" 0 in mcabber, a console-based Jabber XMPP client. For Debian 7 "Wheezy", this issue has been fixed in mcabber version 0.10.1-3+deb7u1. We recommend that you upgrade your mcabber...
DLA-724-1 mcabber - security update
Bulletin has no description...
CVE-2016-1844
The Messages component in Apple OS X before 10.11.5 mishandles roster changes, which allows remote attackers to modify contact lists via unspecified vectors...