ejabberd

8 results · Feed

• High 7.4
  CVE-2026-104733

  User Impersonation/Authorization Bypass in XMPP Server ejabberd

  User Impersonation in ProcessOnes XMMP Server ejabberd <= 26.04 allows an attacker to impersonate arbitrary users via unvalidated authzid parameter in SASL-PLAIN mechanism.

  ProcessOne ejabberd ejabberd ejabberd Debian Ubuntu
  Oct 2, 2026
• Unscored —
  CVE-2014-8760

  ejabberd before 2.1.13 does not enforce the starttls_required setting when compression is used, which causes clients to…

  ejabberd Debian
  Oct 25, 2014
• Unscored —
  CVE-2013-6169

  The TLS driver in ejabberd before 2.1.12 supports (1) SSLv2 and (2) weak SSL ciphers, which makes it easier for remote …

  ejabberd Debian
  Oct 17, 2013
• Medium —
  CVE-2011-4320

  Ejabberd DoS via malformed stanza

  The mod_pubsub module (mod_pubsub.erl) in ejabberd 2.1.8 and 3.0.0-alpha-3 allows remote authenticated users to cause a denial of service (infinite loop) via a stanza with a publish tag that lacks a node attribute.

  ejabberd ejabberd Debian Hex
  Feb 18, 2012
• Unscored —
  CVE-2011-1753

  expat_erl.c in ejabberd before 2.1.7 and 3.x before 3.0.0-alpha-3, and exmpp before 0.9.7, does not properly detect rec…

  ejabberd Debian
  Jun 21, 2011
• Unscored —
  CVE-2010-0305

  ejabberd_c2s.erl in ejabberd before 2.1.3 allows remote attackers to cause a denial of service (daemon crash) via a lar…

  ejabberd Debian
  Feb 3, 2010
• Unscored —
  CVE-2009-0934

  Cross-site scripting (XSS) vulnerability in ejabberd before 2.0.4 allows remote attackers to inject arbitrary web scrip…

  ejabberd Debian
  Mar 18, 2009
• Unscored —
  CVE-2007-0903

  Unspecified vulnerability in the mod_roster_odbc module in ejabberd before 1.1.3 has unknown impact and attack vectors.

  ejabberd Debian
  Feb 13, 2007