gajim kayıtları
gajim üreticisine ait 8 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-20 Improper Input Validation2
- CWE-284 Improper Access Control1
- CWE-310 Cryptographic Issues1
- CWE-59 Improper Link Resolution Before File Access ('Link Following')1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
8 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
31İzleyin | CVE-2012-2086İstismar yok | SQL injection vulnerability in the get_last_conversation_lines function in common/logger.py in Gajim before 0.15 allows remote attackers to gajim · gajim · CWE-89 | Yüksek7,5 | — | %2,4 | 23 Kas 2012 |
30İzleyin | CVE-2021-41055İstismar yok | Gajim 1.2.x and 1.3.x before 1.3.3 allows remote attackers to cause a denial of service (crash) via a crafted XMPP Last Message Correction (gajim · gajim | Yüksek7,5 | — | %1,5 | 10 Eki 2021 |
28İzleyin | CVE-2012-2085İstismar yok | The exec_command function in common/helpers.py in Gajim before 0.15 allows user-assisted remote attackers to execute arbitrary commands via gajim · gajim · CWE-94 | Orta6,8 | — | %3,1 | 28 Ağu 2012 |
22İzleyin | CVE-2015-8688İstismar yok | Gajim before 0.16.5 allows remote attackers to modify the roster and intercept messages via a crafted roster-push IQ stanza.gajim · gajim · CWE-20 | Orta5,4 | — | %1,7 | 15 Oca 2016 |
21İzleyin | CVE-2022-39835İstismar yok | An issue was discovered in Gajim through 1.4.7.gajim · gajim · CWE-284 | Orta5,3 | — | %0,5 | 27 Eyl 2022 |
18İzleyin | CVE-2016-10376İstismar yok | Gajim through 0.16.7 unconditionally implements the "XEP-0146: Remote Controlling Clients" extension.gajim · gajim · CWE-310 | Orta4,5 | — | %1,1 | 27 May 2017 |
17İzleyin | CVE-2012-5524İstismar yok | The _ssl_verify_callback function in tls_nb.py in Gajim before 0.15.3 does not properly verify SSL certificates, which allows remote attackegajim · gajim · CWE-20 | Orta4,3 | — | %1,1 | 7 Şub 2014 |
13İzleyin | CVE-2012-2093İstismar yok | src/common/latex.py in Gajim 0.15 allows local users to overwrite arbitrary files via a symlink attack on a temporary latex file, related togajim · gajim · CWE-59 | Düşük3,3 | — | %0,3 | 18 May 2012 |
- CVE-2012-208631İzleyin
SQL injection vulnerability in the get_last_conversation_lines function in common/logger.py in Gajim before 0.15 allows remote attackers to
YüksekCVSS 7,5İstismar yokEPSS %2gajim · gajim23 Kas 2012
- CVE-2021-4105530İzleyin
Gajim 1.2.x and 1.3.x before 1.3.3 allows remote attackers to cause a denial of service (crash) via a crafted XMPP Last Message Correction (
YüksekCVSS 7,5İstismar yokEPSS %1gajim · gajim10 Eki 2021
- CVE-2012-208528İzleyin
The exec_command function in common/helpers.py in Gajim before 0.15 allows user-assisted remote attackers to execute arbitrary commands via
OrtaCVSS 6,8İstismar yokEPSS %3gajim · gajim28 Ağu 2012
- CVE-2015-868822İzleyin
Gajim before 0.16.5 allows remote attackers to modify the roster and intercept messages via a crafted roster-push IQ stanza.
OrtaCVSS 5,4İstismar yokEPSS %1gajim · gajim15 Oca 2016
- CVE-2022-3983521İzleyin
An issue was discovered in Gajim through 1.4.7.
OrtaCVSS 5,3İstismar yokEPSS %0gajim · gajim27 Eyl 2022
- CVE-2016-1037618İzleyin
Gajim through 0.16.7 unconditionally implements the "XEP-0146: Remote Controlling Clients" extension.
OrtaCVSS 4,5İstismar yokEPSS %1gajim · gajim27 May 2017
- CVE-2012-552417İzleyin
The _ssl_verify_callback function in tls_nb.py in Gajim before 0.15.3 does not properly verify SSL certificates, which allows remote attacke
OrtaCVSS 4,3İstismar yokEPSS %1gajim · gajim7 Şub 2014
- CVE-2012-209313İzleyin
src/common/latex.py in Gajim 0.15 allows local users to overwrite arbitrary files via a symlink attack on a temporary latex file, related to
DüşükCVSS 3,3İstismar yokEPSS %0gajim · gajim18 May 2012