Skip to content
OpenAdvisories

Archive

12 January 2017

Vulnerabilities first published on this day (UTC), newest first.

← December 2016 2017 / January /12 February 2017 →
  1. 11
  2. 24
  3. 35
  4. 419
  5. 514
  6. 653
  7. 7 
  8. 8 
  9. 95
  10. 1016
  11. 1152
  12. 12159
  13. 1341
  14. 1410
  15. 1510
  16. 162
  17. 177
  18. 1861
  19. 1939
  20. 2025
  21. 211
  22. 22 
  23. 2397
  24. 2410
  25. 2510
  26. 2631
  27. 27261
  28. 2845
  29. 29 
  30. 3057
  31. 3148
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.9
    CVE-2016-10027

    Smack allows the bypass of TLS protections

    Race condition in the XMPP library in Smack before 4.1.9, when the SecurityMode.required TLS setting has been set, allows man-in-the-middle attackers to bypass TLS protections and trigger use of cleartext for client authentication by stripping the "starttls" …

    org.igniterealtime.smack:smack-core Maven