jabberd2 kayıtları
jabberd2 üreticisine ait 6 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %66,7
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-732 Incorrect Permission Assignment for Critical Resource2
- CWE-20 Improper Input Validation1
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-287 Improper Authentication1
- CWE-776 Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
6 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2017-10807İstismar yok | JabberD 2.x (aka jabberd2) before 2.6.1 allows anyone to authenticate using SASL ANONYMOUS, even when the sasl.anonymous c2s.xml option is njabberd2 · jabberd2 · CWE-287 | Kritik9,8 | — | %2,8 | 4 Tem 2017 |
31İzleyin | CVE-2011-1755İstismar yok | jabberd2 before 2.2.14 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of servicjabberd2 · jabberd2 · CWE-776 | Yüksek7,5 | — | %3,6 | 20 Haz 2011 |
31İzleyin | CVE-2017-18225İstismar yok | The Gentoo net-im/jabberd2 package through 2.6.1 installs jabberd, jabberd2-c2s, jabberd2-router, jabberd2-s2s, and jabberd2-sm in /usr/bin jabberd2 · jabberd2 · CWE-732 | Yüksek7,8 | — | %0,2 | 12 Mar 2018 |
27İzleyin | CVE-2015-2058İstismar yok | c2s/c2s.c in Jabber Open Source Server 2.3.2 and earlier truncates data without ensuring it remains valid UTF-8, which allows remote authentjabberd2 · jabberd2 · CWE-200 | Orta6,5 | — | %1,9 | 12 Ağu 2015 |
24İzleyin | CVE-2012-3525İstismar yok | s2s/out.c in jabberd2 2.2.16 and earlier does not verify that a request was made for an XMPP Server Dialback response, which allows remote Xjabberd2 · jabberd2 · CWE-20 | Orta5,8 | — | %1,7 | 25 Ağu 2012 |
22İzleyin | CVE-2017-18226İstismar yok | The Gentoo net-im/jabberd2 package through 2.6.1 sets the ownership of /var/run/jabber to the jabber account, which might allow local users jabberd2 · jabberd2 · CWE-732 | Orta5,5 | — | %0,2 | 12 Mar 2018 |
- CVE-2017-1080740Planlayın
JabberD 2.x (aka jabberd2) before 2.6.1 allows anyone to authenticate using SASL ANONYMOUS, even when the sasl.anonymous c2s.xml option is n
KritikCVSS 9,8İstismar yokEPSS %2jabberd2 · jabberd24 Tem 2017
- CVE-2011-175531İzleyin
jabberd2 before 2.2.14 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of servic
YüksekCVSS 7,5İstismar yokEPSS %3jabberd2 · jabberd220 Haz 2011
- CVE-2017-1822531İzleyin
The Gentoo net-im/jabberd2 package through 2.6.1 installs jabberd, jabberd2-c2s, jabberd2-router, jabberd2-s2s, and jabberd2-sm in /usr/bin
YüksekCVSS 7,8İstismar yokEPSS %0jabberd2 · jabberd212 Mar 2018
- CVE-2015-205827İzleyin
c2s/c2s.c in Jabber Open Source Server 2.3.2 and earlier truncates data without ensuring it remains valid UTF-8, which allows remote authent
OrtaCVSS 6,5İstismar yokEPSS %1jabberd2 · jabberd212 Ağu 2015
- CVE-2012-352524İzleyin
s2s/out.c in jabberd2 2.2.16 and earlier does not verify that a request was made for an XMPP Server Dialback response, which allows remote X
OrtaCVSS 5,8İstismar yokEPSS %1jabberd2 · jabberd225 Ağu 2012
- CVE-2017-1822622İzleyin
The Gentoo net-im/jabberd2 package through 2.6.1 sets the ownership of /var/run/jabber to the jabber account, which might allow local users
OrtaCVSS 5,5İstismar yokEPSS %0jabberd2 · jabberd212 Mar 2018