Skip to content
OpenAdvisories

Archive

9 February 2017

Vulnerabilities first published on this day (UTC), newest first.

← January 2017 2017 / February /9 March 2017 →
  1. 1143
  2. 215
  3. 344
  4. 43
  5. 53
  6. 632
  7. 734
  8. 886
  9. 952
  10. 109
  11. 11 
  12. 126
  13. 13124
  14. 144
  15. 1592
  16. 1628
  17. 1759
  18. 183
  19. 19 
  20. 20154
  21. 2121
  22. 2241
  23. 2311
  24. 2434
  25. 25 
  26. 261
  27. 2730
  28. 2812
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 5.9
    CVE-2017-5591

    SleekXMPP and Slixmpp Incorrect Implementation of Message Carbons

    An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. Thi…

    slixmpp slixmpp sleekxmpp sleekxmpp Debian Ubuntu PyPI
  • Medium 5.9
    CVE-2017-5605

    XMPP Clients User Impersonation Vulnerability in Movim Moxl

    An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. Thi…

    movim/moxl Packagist
  • Medium 5.9
    CVE-2017-5858

    User Impersonation in converse.js

    An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. Thi…

    converse.js npm
  • Medium 6.5
    CVE-2016-4987

    Jenkins Image Gallery Plugin allows Path Traversal

    Directory traversal vulnerability in the Image Gallery plugin before 1.4 in Jenkins allows remote attackers to list arbitrary directories and read arbitrary files via unspecified form fields.

    com.tupilabs.image_gallery:image-gallery Maven
  • Medium 6.1
    CVE-2016-4988

    Cross-site Scripting in Jenkins Build Failure Analyzer plugin

    Cross-site scripting (XSS) vulnerability in the Build Failure Analyzer plugin before 1.16.0 in Jenkins allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter.

    com.sonyericsson.jenkins.plugins.bfa:build-failure-analyzer Maven
  • Medium 5.4
    CVE-2016-3101

    Jenkins Extra Columns Plugin allows Cross-Site Scripting (XSS)

    Cross-site scripting (XSS) vulnerability in the Extra Columns plugin before 1.17 in Jenkins allows remote attackers to inject arbitrary web script or HTML by leveraging failure to filter tool tips through the configured markup formatter.

    org.jenkins-ci.plugins:extra-columns Maven