Поиск уязвимостей
Количество 9
Количество 9
ALT-PU-2016-1317
ALT-PU-2016-1317: package `ejabberd` update to version 2.1.13-alt1
CVE-2014-8760
ejabberd before 2.1.13 does not enforce the starttls_required setting when compression is used, which causes clients to establish connections without encryption.
CVE-2014-8760
ejabberd before 2.1.13 does not enforce the starttls_required setting when compression is used, which causes clients to establish connections without encryption.
CVE-2014-8760
ejabberd before 2.1.13 does not enforce the starttls_required setting ...
CVE-2013-6169
The TLS driver in ejabberd before 2.1.12 supports (1) SSLv2 and (2) weak SSL ciphers, which makes it easier for remote attackers to obtain sensitive information via a brute-force attack.
CVE-2013-6169
The TLS driver in ejabberd before 2.1.12 supports (1) SSLv2 and (2) weak SSL ciphers, which makes it easier for remote attackers to obtain sensitive information via a brute-force attack.
CVE-2013-6169
The TLS driver in ejabberd before 2.1.12 supports (1) SSLv2 and (2) we ...
GHSA-wm48-6fcf-h8jf
The TLS driver in ejabberd before 2.1.12 supports (1) SSLv2 and (2) weak SSL ciphers, which makes it easier for remote attackers to obtain sensitive information via a brute-force attack.
GHSA-p3cj-xwxg-f4p3
ejabberd before 2.1.13 does not enforce the starttls_required setting when compression is used, which causes clients to establish connections without encryption.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2016-1317 ALT-PU-2016-1317: package `ejabberd` update to version 2.1.13-alt1 | CVSS2: 5 | больше 10 лет назад | |
 | CVE-2014-8760 ejabberd before 2.1.13 does not enforce the starttls_required setting when compression is used, which causes clients to establish connections without encryption. | CVSS2: 5 | 1% Низкий | около 12 лет назад |
 | CVE-2014-8760 ejabberd before 2.1.13 does not enforce the starttls_required setting when compression is used, which causes clients to establish connections without encryption. | CVSS2: 5 | 1% Низкий | около 12 лет назад |
| CVE-2014-8760 ejabberd before 2.1.13 does not enforce the starttls_required setting ... | CVSS2: 5 | 1% Низкий | около 12 лет назад |
| CVE-2013-6169 The TLS driver in ejabberd before 2.1.12 supports (1) SSLv2 and (2) weak SSL ciphers, which makes it easier for remote attackers to obtain sensitive information via a brute-force attack. | CVSS2: 4.3 | 2% Низкий | около 13 лет назад |
| CVE-2013-6169 The TLS driver in ejabberd before 2.1.12 supports (1) SSLv2 and (2) weak SSL ciphers, which makes it easier for remote attackers to obtain sensitive information via a brute-force attack. | CVSS2: 4.3 | 2% Низкий | около 13 лет назад |
| CVE-2013-6169 The TLS driver in ejabberd before 2.1.12 supports (1) SSLv2 and (2) we ... | CVSS2: 4.3 | 2% Низкий | около 13 лет назад |
| GHSA-wm48-6fcf-h8jf The TLS driver in ejabberd before 2.1.12 supports (1) SSLv2 and (2) weak SSL ciphers, which makes it easier for remote attackers to obtain sensitive information via a brute-force attack. | 2% Низкий | больше 4 лет назад | |
| GHSA-p3cj-xwxg-f4p3 ejabberd before 2.1.13 does not enforce the starttls_required setting when compression is used, which causes clients to establish connections without encryption. | 1% Низкий | больше 4 лет назад |
Уязвимостей на страницу