Lucene search
+L

92 matches found

OSV
OSV
added 2022/12/10 11:1 p.m.5 views

OPENSUSE-SU-2022:10242-1 Security update for python-slixmpp

This update for python-slixmpp fixes the following issues: - CVE-2022-45197: Fixed certificate hostname validation boo1205433...

7.5CVSS7.5AI score0.00469EPSS
SaveExploits0References3
OSV
OSV
added 2022/12/10 3:1 p.m.6 views

OPENSUSE-SU-2022:10241-1 Security update for python-slixmpp

This update for python-slixmpp fixes the following issues: - CVE-2022-45197: Fixed certificate hostname validation boo1205433...

7.5CVSS7.5AI score0.00469EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2022/12/10 12:0 a.m.7 views

PT-2022-27427 · Slixmpp +1 · Slixmpp +1

Name of the Vulnerable Software and Affected Versions: Slixmpp versions prior to 1.8.3 Description: The issue lacks SSL Certificate hostname validation in XMLStream, allowing an attacker to pose as any server in the eyes of Slixmpp. Recommendations: For versions prior to 1.8.3, update to version...

7.5CVSS6.9AI score0.00469EPSS
SaveExploits0References32
OPENSUSE Linux
OPENSUSE Linux
added 2022/12/10 12:0 a.m.4 views

Security update for python-slixmpp (moderate)

openSUSE Security Update: Security update for python-slixmpp Announcement ID: openSUSE-SU-2022:10241-1 Rating: moderate References: 1205433 Cross-References: CVE-2022-45197 Affected Products: openSUSE Backports SLE-15-SP3 An update that fixes one vulnerability is now available. Description: This...

7.5CVSS7.2AI score0.00469EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/11/28 12:0 a.m.5 views

slixmpp 信任管理问题漏洞

slixmpp is an open source, Python-based XMPP eXtensible Messaging and Presence Protocol, Extensible Message Processing and Presence Protocol library. A security vulnerability exists in slixmpp. An attacker exploiting this vulnerability could read or write data in a session...

7.5CVSS7.2AI score0.00469EPSS
SaveExploits0References8
Fedora
Fedora
added 2022/11/27 1:32 a.m.35 views

[SECURITY] Fedora 37 Update: python-slixmpp-1.8.3-1.fc37

Slixmpp is an MIT licensed XMPP library for Python 3.5+. It is a fork of SleekXMPP. Goals is to only rewrite the core of the library the low level socket handling, the timers, the events dispatching in order to remove all threads...

7.5CVSS3.1AI score0.00469EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2022/11/27 12:0 a.m.11 views

Fedora: Security Advisory for python-slixmpp (FEDORA-2022-20a2dbdd45)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.6AI score0.00469EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2022/11/27 12:0 a.m.10 views

Fedora: Security Advisory for python-slixmpp (FEDORA-2022-6720bd776b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.6AI score0.00469EPSS
SaveExploits0References2
OSV
OSV
added 2022/05/13 1:28 a.m.58 views

GHSA-C35G-JR5F-H83P SleekXMPP and Slixmpp Incorrect Implementation of Message Carbons

An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for SleekXMPP up to 1.3.1 and...

5.9CVSS5.8AI score0.01714EPSS
SaveExploits3References13
Github Security Blog
Github Security Blog
added 2022/05/13 1:28 a.m.23 views

SleekXMPP and Slixmpp Incorrect Implementation of Message Carbons

An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for SleekXMPP up to 1.3.1 and...

5.9CVSS6.9AI score0.01714EPSS
SaveExploits3References13Affected Software2
OSV
OSV
added 2022/05/13 1:21 a.m.12 views

GHSA-4G62-MFWX-4Q48 slixmpp Incorrect Access Control

slixmpp version before commit 7cd73b594e8122dddf847953fcfc85ab4d316416 contains an incorrect Access Control vulnerability in XEP-0223 plugin Persistent Storage of Private Data via PubSub options profile, used for the configuration of default access model that can result in all of the contacts of...

7.5CVSS7.4AI score0.02323EPSS
SaveExploits1References8
Github Security Blog
Github Security Blog
added 2022/05/13 1:21 a.m.11 views

slixmpp Incorrect Access Control

slixmpp version before commit 7cd73b594e8122dddf847953fcfc85ab4d316416 contains an incorrect Access Control vulnerability in XEP-0223 plugin Persistent Storage of Private Data via PubSub options profile, used for the configuration of default access model that can result in all of the contacts of...

7.5CVSS6.9AI score0.02323EPSS
SaveExploits1References8Affected Software1
OpenVAS
OpenVAS
added 2019/09/04 12:0 a.m.17 views

Fedora Update for python-slixmpp FEDORA-2019-f40c49b99e

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.5AI score0.02323EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2019/09/04 12:0 a.m.14 views

Fedora Update for python-slixmpp FEDORA-2019-5a947d8603

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.5AI score0.02323EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2019/09/03 12:0 a.m.22 views

Fedora 29 : python-slixmpp (2019-5a947d8603)

Security fix for CVE-2019-1000021 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Networ...

7.5CVSS7.2AI score0.02323EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2019/09/03 12:0 a.m.19 views

Fedora 30 : python-slixmpp (2019-f40c49b99e)

Security fix for CVE-2019-1000021 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Networ...

7.5CVSS7.2AI score0.02323EPSS
SaveExploits1References2
OSV
OSV
added 2019/03/23 10:57 a.m.5 views

OPENSUSE-SU-2019:0163-1 Security update for python-slixmpp

This update for python-slixmpp fixes the following issue: Security issue fixed: - CVE-2019-1000021: Fixed incorrect Access Control vulnerability in XEP-0223 plugin bsc1124322...

7.5CVSS7.5AI score0.02323EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2019/03/06 12:0 a.m.27 views

FreeBSD : slixmpp -- improper access control (526d9642-3ae7-11e9-a669-8c164582fbac)

NVD reports : slixmpp version before commit 7cd73b594e8122dddf847953fcfc85ab4d316416 contains an incorrect Access Control vulnerability in XEP-0223 plugin Persistent Storage of Private Data via PubSub options profile, used for the configuration of default access model that can result in all of th...

7.5CVSS7.2AI score0.02323EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2019/02/14 12:0 a.m.17 views

openSUSE Security Update : python-slixmpp (openSUSE-2019-163)

This update for python-slixmpp fixes the following issue : Security issue fixed : - CVE-2019-1000021: Fixed incorrect Access Control vulnerability in XEP-0223 plugin bsc1124322 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extract...

7.5CVSS7.2AI score0.02323EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2019/02/14 12:0 a.m.14 views

openSUSE: Security Advisory for python-slixmpp (openSUSE-SU-2019:0163-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.5AI score0.02323EPSS
SaveExploits1References2
Rows per page
Query Builder