Gajim
6 CVEs across 1 Gajim products. Browse Gajim vulnerabilities, severities, and proof-of-concept exploits.
Gajim products with known CVEs
Gajim CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2022-39835 | Medium | 5.3 | 2022-09-27 | An issue was discovered in Gajim through 1.4.7. The vulnerability allows attackers, via crafted XML stanzas, to correct messages that were not sent by them. Th… |
CVE-2021-41055 | High | 7.5 | 2021-10-11 | Gajim 1.2.x and 1.3.x before 1.3.3 allows remote attackers to cause a denial of service (crash) via a crafted XMPP Last Message Correction (XEP-0308) message i… |
CVE-2016-10376 | Medium | 4.5 | 2017-05-28 | Gajim through 0.16.7 unconditionally implements the "XEP-0146: Remote Controlling Clients" extension. This can be abused by malicious XMPP servers to, for exam… |
CVE-2015-8688 | Medium | 5.4 | 2016-01-15 | Gajim before 0.16.5 allows remote attackers to modify the roster and intercept messages via a crafted roster-push IQ stanza. |
CVE-2012-5524 | | | 2014-02-08 | The _ssl_verify_callback function in tls_nb.py in Gajim before 0.15.3 does not properly verify SSL certificates, which allows remote attackers to conduct man-i… |
CVE-2012-2086 | | | 2012-11-23 | SQL injection vulnerability in the get_last_conversation_lines function in common/logger.py in Gajim before 0.15 allows remote attackers to execute arbitrary S… |
CVE-2012-2085 | | | 2012-08-28 | The exec_command function in common/helpers.py in Gajim before 0.15 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacter… |
CVE-2012-2093 | | | 2012-05-18 | src/common/latex.py in Gajim 0.15 allows local users to overwrite arbitrary files via a symlink attack on a temporary latex file, related to the get_tmpfile_na… |