Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: igniterealtime Component: Smack Clear all filters
TI-2016-08113 CVE-2016-10027 · GHSA-66pq-hqv5-228g

Race condition in the XMPP library in Smack before 4.1.9, when the SecurityMode.required…

Priority LOW 30

Race condition in the XMPP library in Smack before 4.1.9, when the SecurityMode.required TLS setting has been set, allows man-in-the-middle attackers to bypass TLS protections and trigger use of cleartext for client auth…

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01513 Published 2017-01-12 Partial fix · 4.1.9 CWE-362
TI-2014-00345 CVE-2014-0364 · GHSA-5xpq-f27x-7pw7

The ParseRoster component in the Ignite Realtime Smack XMPP API before 4.0.0-rc1 does not…

Priority LOW 32

The ParseRoster component in the Ignite Realtime Smack XMPP API before 4.0.0-rc1 does not verify the from attribute of a roster-query IQ stanza, which allows remote attackers to spoof IQ responses via a crafted attribute…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.06242 Published 2014-04-30 Partial fix CWE-345