CVE-2015-8688

Description

References

• gultsch.de/gajim_roster_push_and_message_interception.html
• lists.fedoraproject.org/pipermail/package-announce/2016-January/175503.html
• lists.fedoraproject.org/pipermail/package-announce/2016-January/175526.html
• lists.opensuse.org/opensuse-updates/2016-01/msg00027.html
• debian.org/security/2016/dsa-3492
• hg.gajim.org/gajim/file/gajim-0.16.5/ChangeLog · Vendor Advisory

gajim 的其他漏洞

• CVE-2022-39835中危 5.3An issue was discovered in Gajim through 1.4.7. The vulnerability allows attackers, via crafted XML stanzas, to correct messages that were n…
• CVE-2021-41055高危 7.5Gajim 1.2.x and 1.3.x before 1.3.3 allows remote attackers to cause a denial of service (crash) via a crafted XMPP Last Message Correction (…
• CVE-2016-10376中危 4.5Gajim through 0.16.7 unconditionally implements the "XEP-0146: Remote Controlling Clients" extension. This can be abused by malicious XMPP s…
• CVE-2012-5524中危 4.3The _ssl_verify_callback function in tls_nb.py in Gajim before 0.15.3 does not properly verify SSL certificates, which allows remote attacke…
• CVE-2012-2086高危 7.5SQL injection vulnerability in the get_last_conversation_lines function in common/logger.py in Gajim before 0.15 allows remote attackers to …