gajim records

8 published records for vendor gajim.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 2
With a fix record: 100%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

8 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
31Monitor	CVE-2012-2086No exploit	SQL injection vulnerability in the get_last_conversation_lines function in common/logger.py in Gajim before 0.15 allows remote attackers to gajim · gajim · CWE-89 pre-auth RCE SQL injection	High7.5	—	2.4%	Nov 23, 2012
30Monitor	CVE-2021-41055No exploit	Gajim 1.2.x and 1.3.x before 1.3.3 allows remote attackers to cause a denial of service (crash) via a crafted XMPP Last Message Correction (gajim · gajim Pre-auth Denial of service	High7.5	—	1.5%	Oct 10, 2021
28Monitor	CVE-2012-2085No exploit	The exec_command function in common/helpers.py in Gajim before 0.15 allows user-assisted remote attackers to execute arbitrary commands via gajim · gajim · CWE-94 pre-auth RCE	Medium6.8	—	3.1%	Aug 28, 2012
22Monitor	CVE-2015-8688No exploit	Gajim before 0.16.5 allows remote attackers to modify the roster and intercept messages via a crafted roster-push IQ stanza.gajim · gajim · CWE-20 Pre-auth	Medium5.4	—	1.7%	Jan 15, 2016
21Monitor	CVE-2022-39835No exploit	An issue was discovered in Gajim through 1.4.7.gajim · gajim · CWE-284 Pre-auth Broken access control (IDOR)	Medium5.3	—	0.5%	Sep 27, 2022
18Monitor	CVE-2016-10376No exploit	Gajim through 0.16.7 unconditionally implements the "XEP-0146: Remote Controlling Clients" extension.gajim · gajim · CWE-310	Medium4.5	—	1.1%	May 27, 2017
17Monitor	CVE-2012-5524No exploit	The _ssl_verify_callback function in tls_nb.py in Gajim before 0.15.3 does not properly verify SSL certificates, which allows remote attackegajim · gajim · CWE-20 Pre-auth	Medium4.3	—	1.1%	Feb 7, 2014
13Monitor	CVE-2012-2093No exploit	src/common/latex.py in Gajim 0.15 allows local users to overwrite arbitrary files via a symlink attack on a temporary latex file, related togajim · gajim · CWE-59	Low3.3	—	0.3%	May 18, 2012

CVE-2012-2086
31Monitor
SQL injection vulnerability in the get_last_conversation_lines function in common/logger.py in Gajim before 0.15 allows remote attackers to
HighCVSS 7.5No exploitEPSS 2%
- pre-auth RCE
- SQL injection
gajim · gajimNov 23, 2012
CVE-2021-41055
30Monitor
Gajim 1.2.x and 1.3.x before 1.3.3 allows remote attackers to cause a denial of service (crash) via a crafted XMPP Last Message Correction (
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Denial of service
gajim · gajimOct 10, 2021
CVE-2012-2085
28Monitor
The exec_command function in common/helpers.py in Gajim before 0.15 allows user-assisted remote attackers to execute arbitrary commands via
MediumCVSS 6.8No exploitEPSS 3%
- pre-auth RCE
gajim · gajimAug 28, 2012
CVE-2015-8688
22Monitor
Gajim before 0.16.5 allows remote attackers to modify the roster and intercept messages via a crafted roster-push IQ stanza.
MediumCVSS 5.4No exploitEPSS 1%
- Pre-auth
gajim · gajimJan 15, 2016
CVE-2022-39835
21Monitor
An issue was discovered in Gajim through 1.4.7.
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
gajim · gajimSep 27, 2022
CVE-2016-10376
18Monitor
Gajim through 0.16.7 unconditionally implements the "XEP-0146: Remote Controlling Clients" extension.
MediumCVSS 4.5No exploitEPSS 1%
gajim · gajimMay 27, 2017
CVE-2012-5524
17Monitor
The _ssl_verify_callback function in tls_nb.py in Gajim before 0.15.3 does not properly verify SSL certificates, which allows remote attacke
MediumCVSS 4.3No exploitEPSS 1%
- Pre-auth
gajim · gajimFeb 7, 2014
CVE-2012-2093
13Monitor
src/common/latex.py in Gajim 0.15 allows local users to overwrite arbitrary files via a symlink attack on a temporary latex file, related to
LowCVSS 3.3No exploitEPSS 0%
gajim · gajimMay 18, 2012