Skip to content
OpenAdvisories

Package · Debian

gajim

7 known vulnerabilities.

7 results · Feed

  • Medium 5.3

    An issue was discovered in Gajim through 1.4.7. The vulnerability allows attackers, via crafted XML stanzas, to correct…

  • Unscored —

    Gajim through 0.16.7 unconditionally implements the "XEP-0146: Remote Controlling Clients" extension. This can be abuse…

  • Unscored —

    Gajim before 0.16.5 allows remote attackers to modify the roster and intercept messages via a crafted roster-push IQ st…

  • Unscored —

    The _ssl_verify_callback function in tls_nb.py in Gajim before 0.15.3 does not properly verify SSL certificates, which …

  • Unscored —

    SQL injection vulnerability in the get_last_conversation_lines function in common/logger.py in Gajim before 0.15 allows…

  • Unscored —

    The exec_command function in common/helpers.py in Gajim before 0.15 allows user-assisted remote attackers to execute ar…

  • Unscored —

    src/common/latex.py in Gajim 0.15 allows local users to overwrite arbitrary files via a symlink attack on a temporary l…