TI-2022-18830 CVE-2022-39835 · GHSA-q3pp-76rw-fqvm
An issue was discovered in Gajim through 1.4.7.
Priority LOW 31
An issue was discovered in Gajim through 1.4.7.
Vulnerabilities
8 records
TI-2021-17909 CVE-2021-41055 · GHSA-r23x-224g-484r
Gajim 1.2.x and 1.3.x before 1.3.3 allows remote attackers to cause a denial of service…
Priority LOW 36
Gajim 1.2.x and 1.3.x before 1.3.3 allows remote attackers to cause a denial of service (crash) via a crafted XMPP Last Message Correction (XEP-0308) message in multi-user chat, where the message ID equals the correction…
TI-2016-08426 CVE-2016-10376 · GHSA-5wv2-923f-jxwr
Gajim through 0.16.7 unconditionally implements the "XEP-0146: Remote Controlling…
Priority LOW 23
Gajim through 0.16.7 unconditionally implements the "XEP-0146: Remote Controlling Clients" extension.
TI-2015-07148 CVE-2015-8688 · GHSA-fg7g-52r5-p6wj
Gajim before 0.16.5 allows remote attackers to modify the roster and intercept messages…
Priority LOW 28
Gajim before 0.16.5 allows remote attackers to modify the roster and intercept messages via a crafted roster-push IQ stanza.
TI-2012-04643 CVE-2012-5524 · GHSA-g8h3-j4r4-m45r
The _ssl_verify_callback function in tls_nb.py in Gajim before 0.15.3 does not properly…
Priority LOW 22
The _ssl_verify_callback function in tls_nb.py in Gajim before 0.15.3 does not properly verify SSL certificates, which allows remote attackers to conduct man-in-the-middle (MITM) attacks and spoof servers via an arbitrar…
TI-2012-01859 CVE-2012-2086 · GHSA-9hfx-22wm-rhw8
SQL injection vulnerability in the get_last_conversation_lines function in…
Priority LOW 37
SQL injection vulnerability in the get_last_conversation_lines function in common/logger.py in Gajim before 0.15 allows remote attackers to execute arbitrary SQL commands via the jig parameter.
TI-2012-01858 CVE-2012-2085 · GHSA-m3cr-88v9-chgp
The exec_command function in common/helpers.py in Gajim before 0.15 allows user-assisted…
Priority LOW 36
The exec_command function in common/helpers.py in Gajim before 0.15 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in an href attribute.
TI-2012-01866 CVE-2012-2093 · GHSA-7jv3-hcrw-wvcq
src/common/latex.py in Gajim 0.15 allows local users to overwrite arbitrary files via a…
Priority LOW 16
src/common/latex.py in Gajim 0.15 allows local users to overwrite arbitrary files via a symlink attack on a temporary latex file, related to the get_tmpfile_name function.